在线时间:8:00-16:00
迪恩网络APP
随时随地掌握行业动态
扫描二维码
关注迪恩网络微信公众号
站内搜索地址为:
httpwww.google.comcustomdomains=(这里写我们要搜索的站点,比如feelids.com) 进去可以选择www和feelids.com, 当然再选我们要的站内搜索哦! 黑客专用信息和资料搜索地址为: httpwww.google.comcustomhl=xx-hacker 这里是google关键字的用法,要设置它为中文,则是 httpwww.google.comcustomhl=zh-CN 英文则是httpwww.google.comcustomhl=en 常用的google关键字: foo1 foo2 (也就是关联,比如搜索xx公司 xx美女) operatorfoo filetype123 类型 sitefoo.com 相对直接看网站更有意思,可以得到许多意外的信息 intextfoo intitle fooltitle 标题哦 allinurlfoo 搜索xx网站的所有相关连接。(踩点必备) linksfoo 不要说就知道是它的相关链接 allintiltefoo.com 我们可以辅助- 来调整搜索的精确程度 直接搜索密码:(引号表示为精确搜索) 当然我们可以再延伸到上面的结果里进行二次搜索 index of htpasswd passwd filetypexls username password email ws_ftp.log config.php allinurladmin mdb service filetypepwd ....或者某个比如pcanywhere的密码后缀cif等 越来越有意思了,再来点更敏感信息 robots.txt Disallow filetypetxt inurl_vti_cnf (FrontPage的关键索引啦,扫描器的CGI库一般都有地) allinurl msadcSamplesselectorshowcode.asp ......passwd examplesjspsnpsnoop.jsp phpsysinfo intitleindex of admin intitledocumetation inurl 5800(vnc的端口)或者desktop port等多个关键字检索 webmin port 10000 inurladminlogin.asp intextPowered by GBook365 intitlephp shell Enable stderr filetypephp 直接搜索到phpwebshell foo.org filetypeinc ipsec filetypeconf intilteerror occurred ODBC request Where (selectinsert) 说白了就是说,可以直接试着查查数据库检索,针对目前流行的sql注射,会发达哦 intitlephp shell Enable stderr filetypephp Dumping data for table username password intitleError using Hypernews Server Software intitleHTTP_USER_AGENT=Googlebot HTTP_USER_ANGET=Googlebot THS ADMIN filetype.doc site.mil classified 直接搜索军方相关word 检查多个关键字: intitleconfig confixx login password mydomain.com nessus report report generated by ipconfig winipconfig google缓存利用(hoho,最有影响力的东西)推荐大家搜索时候多选搜索所有网站 特别推荐:administrator users 等相关的东西,比如名字,生日等……最惨也可以拿来做字典嘛 cachefoo.com 可以查阅类似结果 先找找网站的管理后台地址: sitexxxx.com intext管理 sitexxxx.com inurllogin sitexxxx.com intitle管理 sitea2.xxxx.com inurlfile sitea3.xxxx.com inurlload sitea2.xxxx.com intextftp sitea2.xxxx.com filetypeasp sitexxxx.com 得到N个二级域名 sitexxxx.com [email protected] 得到N个邮件地址,还有邮箱的主人的名字什么的 sitexxxx.com intext电话 N个电话 intitleindex of etc intitleIndex of .sh_history intitleIndex of .bash_history intitleindex of passwd intitleindex of people.lst intitleindex of pwd.db intitleindex of etcshadow intitleindex of spwd intitleindex of master.passwd intitleindex of htpasswd # -FrontPage- inurlservice.pwd allinurlbbs data filetypemdb inurldatabase filetypeinc conn inurldata filetypemdb intitleindex of data 3) http@www domainname 找一些ISP站点,可以查对方ip的虚拟主机 4) auth_user_file.txt 不实用了,太老了 5) The Master List 寻找邮件列表的 6) intitlewelcome.to.squeezebox 一种特殊的管理系统,默认开放端口90 7) passlist.txt (a better way) 字典 8) A syntax error has occurred filetypeihtml 9) extphp program_listing intitleMythWeb.Program.Listing 10) intitleindex.of abyss.conf 11)extnbe nbe 12)intitleSWW link Please wait..... 14) intitleFreifunk.Net - Status -sitecommando.de 15) intitleWorldClient intext (20032004) Alt-N Technologies. 17) intitleopen-xchange inurllogin.pl 20) intitlesite administration please log in site designed by emarketsouth 21) orA-00921 unexpected end of SQL command 22)intitleYALA Yet Another LDAP Administrator 23)welcome.to phpqladmin Please login -cvsweb 24)intitleSWW link Please wait..... 25)inurlport_255 -htm 27)intitleWorldClient intext (20032004) Alt-N Technologies. 这些是新的一些漏洞技巧,在0days公告公布 extphp program_listing intitleMythWeb.Program.Listing inurlpreferences.ini [emule] intitleIndex of CFIDE administrator access denied for user using password extphp intextPowered by phpNewMan Version 可以看到:pathtonewsbrowse.phpclang=............fileiwant inurlbecommunitycommunityindex.phppageurl= intitleASP FileMan Resend -siteiisworks.com Enter ip inurlphp-ping.php extconf inurlrsyncd.conf -cvs -man intitle private, protected, secret, secure, winnt intitleDocuShare inurldocusharedsweb -faq -gov -edu #mysql dump filetypesql allow_call_time_pass_reference PATH_INFO Certificate Practice Statement inurl(PDF DOC) LeapFTP intitleindex.of. sites.ini modified master.passwd mysql history files NickServ registration passwords passlist passlist.txt (a better way) passwd passwd etc (reliable) people.lst psyBNC config files pwd.db signin filetypeurl spwd.db passwd trillian.ini wwwboard WebAdmin inurlpasswd.txt wwwboardwebadmin # -FrontPage- extpwd inurl(service authors administrators users) # -FrontPage- inurlservice.pwd AutoCreate=TRUE password= http@www domainname index of ws_ftp.ini parent directory liveice configuration file extcfg -sitesourceforge.net powered by ducalendar -siteduware.com Powered by Duclassified -siteduware.com Powered by Duclassified -siteduware.com DUware All Rights reserved powered by duclassmate -siteduware.com Powered by Dudirectory -siteduware.com powered by dudownload -siteduware.com Powered By Elite Forum Version . Powered by Link Department sets mode k Powered by DUpaypal -siteduware.com allinurl admin mdb auth_user_file.txt config.php eggdrop filetypeuser user etc (index.of) extini eudora.ini extini Version=... password exttxt inurlunattend.txt filetypebak inurlhtaccesspasswdshadowhtusers filetypecfg mrtg target -sample -cvs -example filetypecfm cfapplication name password filetypeconf oekakibbs filetypeconf sc_serv.conf filetypeconf slapd.conf filetypeconfig config intextappSettings User ID filetypedat password.dat filetypedat wand.dat filetypeinc dbconn filetypeinc intextmysql_connect filetypeinc mysql_connect or mysql_pconnect filetypeinf sysprep filetypeini inurlserv-u.ini filetypeini inurlflashFXP.ini filetypeini ServUDaemon filetypeini wcx_ftp filetypeini ws_ftp pwd filetypeldb admin filetypelog See `ipsec copyright filetypelog inurlpassword.log filetypemdb inurlusers.mdb filetypemdb wwforum filetypenetrc password filetypepass pass intextuserid filetypepem intextprivate filetypeproperties inurldb intextpassword filetypepwd service filetypepwl pwl filetypereg reg intextdefaultusername intextdefaultpassword filetypereg reg HKEY_CURRENT_USER SSHHOSTKEYS filetypesql (values MD values password values encrypt) filetypesql (passwd values password values pass values ) filetypesql IDENTIFIED BY -cvs filetypesql password filetypeurl inurlftp inurl;@ filetypexls username password email htpasswd htpasswd htgroup htpasswd htpasswd.bak intextenable secret $ intextpowered by Web Wiz Journal intitleindex of intextconnect.inc intitleindex of intextglobals.inc intitleIndex of passwords modified intitledupics inurl(add.asp default.asp view.asp voting.asp) -siteduware.com intitleindex.of intextsecring.skrsecring.pgpsecring.bak inurlGRC.DAT intextpassword inurlslapd.conf intextcredentials -manpage -Manual Page -man -sample inurlslapd.conf intextrootpw -manpage -Manual Page -man -sample inurlwvdial.conf intextpassword inurldbmain.mdb inurlchap-secrets -cvs inurlconfig.php dbuname dbpass inurlfilezilla.xml -cvs inurllilo.conf filetypeconf password -tatercounter -bootpwd -man inurlnuke filetypesql inurlospfd.conf intextpassword -sample -test -tutorial -download 路由配置 inurlpap-secrets -cvs inurlperform filetypeini inurlsecring extskr extpgp extbak inurlvtund.conf intextpass -cvs inurlzebra.conf intextpassword -sample -test -tutorial -download Generated by phpSystem generated by wwwstat Host Vulnerability Summary Report ] HTTP_FROM=googlebot googlebot.com Server_Software= Index of chatlogs 聊天室 Installed Objects Scanner inurldefault.asp Mecury Version Infastructure Group Microsoft (R) Windows (TM) Version DrWtsn Copyright (C) extlog Most Submitted Forms and Scripts this section Network Vulnerability Assessment Report not for distribution confidential phone address e-mail intitlecurriculum vitae phpMyAdmin running on inurlmain.php produced by getstats Request Details Control Tree Server Variables robots.txt Disallow filetypetxt Running in Child mode sets mode p sets mode s Thank you for your order receipt This is a Shareaza Node This report was generated by WebLog ( filetypemail filetypeeml filetypembox filetypembx ) intextpasswordsubject (inurlrobot.txt inurlrobots.txt ) intextdisallow filetypetxt -sitephp.net -The PHP Group inurlsource inurlurl extpHp FBR ADOBE PHOTOSHOP AIM buddy lists allinurlexamplesjspsnpsnoop.jsp allinurlservletSnoopServlet cgiirc.conf data filetypemdb -sitegov -sitemil exported email addresses extasp inurlpathto.asp extcgi inurleditcgi.cgi inurlfile= extconf inurlrsyncd.conf -cvs -man extconf NoCatAuth -cvs extdat bpk.dat extgho gho extini intextenv.ini extldif ldif extlog Software Microsoft Internet Information Services . -------------------------- extmdb inurl.mdb inurlfpdb shop.mdb filetypebkf bkf filetypeblt buddylist filetypeblt blt intextscreenname filetypecfg auto_inst.cfg filetypeconf inurlfirewall -intitlecvs filetypeconfig web.config -CVS filetypectt ctt messenger filetypefp fp filetypefp fp -sitegov -sitemil -cvs log filetypeinf inurlcapolicy.inf filetypelic lic intextkey filetypemyd myd -CVS filetypens ns filetypeora ora filetypeora tnsnames filetypepdb pdb backup (Pilot Pluckerdb) filetypepot inurljohn.pot ---------------------------------------- filetypepst inurloutlook.pst filetypepst pst -from -to -date filetypeqbb qbb filetyperdp rdp filetypereg Terminal Server Client filetypevcs vcs filetypewab wab filetypexls -sitegov inurlcontact filetypexls inurlemail.xls Financial spreadsheets finance.xls Financial spreadsheets finances.xls Ganglia Cluster Reports haccess.ctl (one way) haccess.ctl (VERY reliable) ICQ chat logs, please... iletypelog cron.log intextSession Start filetypelog intextTobias Oetiker traffic analysis intext(password passcode) intext(username userid user) filetypecsv intextgmail invite intexthttpgmail.google.comgmaila intextSQLiteManager inurlmain.php intitleApacheStatus (inurlserver-status inurlstatus.html inurlapache.html) intitleAppServ Open Project -sitewww.appservnetwork.com intitleASP Stats Generator . ASP Stats Generator - weppos intitleFTP root at intitleindex of myd size intitleIndex Of -inurlmaillog maillog size intitleIndex Of cookies.txt size intitleindex of mysql.conf or mysql_config intitleIndex of upload size parent directory intitleindex.of .diz .nfo last modified intitleMultimon UPS status page intitlePHP Advanced Transfer (inurlindex.php inurlshowrecent.php ) intitlePhpMyExplorer inurlindex.php -cvs --------------------------------------------------------------------- intitlestatistics of advanced web statistics intitleSystem Statistics System and Network Information Center intitleUsage Statistics for Generated by Webalizer intitlewbem compaq login Compaq Information Technologies Group intitleWeb Server Statistics for intitleweb server status SSH Telnet intitlewelcome.to.squeezebox intitleadmin intitlelogin intitleindex.of Apache server at intitleindex.of cleanup.log intitleindex.of dead.letter intitleindex.of inbox intitleindex.of inbox dbx intitleintranet inurlintranet intextphone inurlaxsax-admin.pl -script inurlcricketgrapher.cgi inurlbookmark.htm inurlcacti inurlgraph_view.php Settings Tree View -cvs -RPM inurlnewsletteradmin inurlnewsletteradmin intitlenewsletter admin inurlputty.reg inurlsmb.conf intextworkgroup filetypeconf conf ---------------------------------------------------------------------------------------------------------- Welcome to ntop! adding new user inurladdnewuser -there are no domains (inurlcgi-bin.cobalt) (intextWelcome to the Cobalt RaQ) filetypephp HAXPLORER Server Files Browser intitleWeb Data Administrator - Login inurlConnectComputerprecheck.htm inurlRemotelogon.aspx PHP Shell (unprotected) PHPKonsole PHPShell filetypephp -echo Public PHP FileManagers index of picasa.ini index of inurlrecycler Index of rar r nfo Modified intitleIndex.Of stats merchant cgi- etc Powered by Invision Power File Manager (inurllogin.php) (intitleBrowsing directory ) Web File Browser Use regular expression filetypeini Desktop.ini intextmydocs.dll intextd.aspxid inurld.aspxid intextPowered By TotalIndex intitleTotalIndex intitlealbum permissions Users who can modify photos EVERYBODY intitleDirectory Listing For intextTomcat -intitleTomcat intitleHFS HttpFileServer intitleIndex of inurlmy shared folder size modified ------------------------------------------------------------------------------------------------------------------- File Upload Manager v. rename to extasp powered by DUForum inurl(messagesdetailslogindefaultregister) -siteduware.com extasp inurlDUgallery intitle. -sitedugallery.com -siteduware.com extcgi inurlubb_test ezBOO Administrator Panel -cvs filetypecgi inurlcachemgr.cgi filetypecnf my.cnf -cvs -example filetypeinc inc intextsetcookie filetypephp inurlviewfile -index.php -idfil filetypewsdl wsdl intitleASP FileMan Resend -siteiisworks.com intitleIndex of modified php.exe intitlephpremoteview filetypephp Name, Size, Type, Modify inurl WWWADMIN.PL intitlewwwadmin inurlnph-proxy.cgi Start browsing through this CGI-based proxy inurlplogregister.php inurlcgi.asxStoreID inurlrobpoll.cgi filetypecgi The Master List More Info about MetaCart Free |
2023-10-27
2022-08-15
2022-08-17
2022-09-23
2022-08-13
请发表评论