http://www.cnsu.org-->site
www.cnsu.org-->inurl f* g& W/ X8 b. N; @- Q
adminàinurl ( t+ T! f: J, @* ~4 } 2 Z% z. o7 C- {' R% R+ N
。asp D D》filetype 5 O9 H; z; q9 u4 w, b7 N* a / b- R9 Q+ ^" M1 o+ Q" M
标题 D D》intitle
页面文字 D D》intext 1 ]' f7 C$ k4 _+ I0 x$ `
页面编号 D D》numeange 2 u. |3 q* @. h% |, O& e " t9 ~/ l* g5 e( _6 w, e
- 逻辑非,“A-B”表示包含A没有B的网页 # j4 p0 k0 T$ O; d9 T' F8 Q
*代表单个字符 - M* D7 @$ L6 I# E1 B' \ 8 { [, ]# q0 w* C+ u
or操作 5 `) ~' N. G8 T2 k' U) K* W # [7 h X7 ~- V8 ?
“”用短语做关键字,必须加上引号,不然会被当作与操作 + p. Q3 ^9 h$ A% u( l0 E% I
。空格 * t6 W O6 e$ g3 h( d
Google对一些网路上出现频率极高的英文单词,如“i”、“com”、“www”等,以及一些符号如“*”、“。”等,作忽略处理
可以用+强制搜索 K! y1 J: C) B8 l3 h 4 ^" g9 i: K }! D, i3 L
下面的语句是我搜集来的,大家可以试着用下 5 U& T) o! j' m5 Q) o. g2 J5 X
比如用Intitle:welcome.to.iis.4.0 IIS4会找到好多winNT的主机,呵呵 % v ? P# j, V4 x% z
Site:sohu.com & r& x+ }- V. y4 r. ^6 \
Site:sohu.com-site:www.sohu.com 7 ]/ H6 w& G; J/ H
Intitle:index.of/admin ( Z6 q2 ^* Q4 t! I
Intitle:index.of apache server.at
Intitle:test.page.for.apache “it workd” , q3 |. B( J% j& @. s2 Y b1 M' W
Allintitle:Netscape Fasr Track Server Home Page * K2 d" h7 x8 X6 Y S 5 e p9 j$ c; X+ ?* D
Intitle:”welcome to windows 2000 internet services” 3 `+ ?1 e4 \( G7 `7 k5 X4 t5 H 0 u) d3 _7 j' t3 j7 s$ d1 z
IIS—win2000 - X6 [$ G6 G; ]+ f
Allintitle:welcome to windows XP server internet
services iis---XP
Intitle:welcome.to.iis.4.0 IIS4 0 P2 v0 A2 _' X& s7 e* d
Allintrtle:”welcome to internet information server” # p: O: }/ @% c
IIS-- generic
Intitle:”apache http server” 2 B2 U) Y; r1 ]: M4 A+ _& K
Intitle:”documentation” 6 a, h1 @$ z: _8 z% b b8 I( a) }" ? ( |! p/ V9 _- A+ A. m+ n8 ~' K) y5 `
Intitle:””error using hypernews””server software” n( K/ J% s( F, f- J
“HTTP_USER_AGENT=Googlebot” % K* T+ X+ G* ~$ u, W
“HTTP_USER_AGENT=Googlebot”TNS_ADMIN 9 C' }# N2 O5 Y( z + J0 l9 _1 C6 T" B
Inurl:/admin/login.asp & F' j) z2 b3 H7 b) u6 v0 G+ I' M
Intitle:”remote desktop wen connection” % g" w" X4 N3 d3 Q 7 I5 J6 u- i5 G0 f
“welcome to *” “Your password is *” 8 y$ I# K5 k" ~4 x ; j$ N3 k+ V) Z1 e: `
Inurl(browse top_rated power_search hot create_admin_user)+”powered
by inde xu” ! F) M$ W+ w, P5 a3 H+ h& W# h" N
“adding new user” inurl:addnewuser C“there are no 7 x& }: o f3 N% J: U. l6 ?
domain” ( o) T9 N' ^# b : H. [/ j" R8 k7 R0 f" B* B
Filetype:log inurl:”password.log”
Intitle:”PHP Shell *” “enable stderr” filetype:php ; b6 z/ y0 {% i7 B5 @9 \, h" W - p' o/ m" b' Q( |$ N3 @
Intitle:confixx login password " s+ h& [; U# v2 y: i: `8 r * H& A `$ _1 P
“powered by rover” : Q# f7 |. F* ~; P' B! a
Inurl:iisadmpwd % U. H. E* D8 {8 l S7 V
Inurl:5800
“VNC desktop” inurl:5800
Inurl:webmin inurl:10000 ( T" b3 D3 A9 a
Inurl:8080 Cintext:8080 ; G7 ]" A( u _5 c0 X. o
“access denird for user” “using password” 7 y* Z: S+ |2 g! v & V" Q7 p5 A; @! D |9 q/ ^- j1 k
“# Dumping data for table” 7 T6 m t8 i! J; p) l& ^2 f1 V
“# Dumping data for table” username password # Q" R! C1 l0 l1 g& {1 ~) v
“# Dumping data for table
(username user users password)” 9 _0 n1 S& z. ?1 i. c. ^
Inurl:main.php welcome to phpmyadmin ; A" f/ e1 ]/ h; F
Intitle:”phpmyadmin running on *” welcome to phpmyadmin + R, ~; P1 Z5 d4 q( a
Filetype:inc intext:mysql connect & l0 O4 F# ~& e j/ @& I* @! n
Filetype:sql + “INENTIFIED BY” Ccvs 9 K( h4 o% R' h1 f
Filetype:sql + “INENTIFIED BY” (“grant * on *” “create ! I% V7 C8 f5 [# t0 \ q
user”) 1 Q# J' R& l' R
“this report lists” “identified by internet scaner” & a1 K9 D* b* B/ O# \; G, H
ACID “by roman danyliw” Filetype
HP
小提示:用google hacking工具搜索这些,真的是多快好省啊:) - U0 o8 B# w% x
great!!
看不懂。。。。。。。。
!!!!!!!!!!!!!!
| 欢迎光临 数学建模社区-数学中国 (http://www.madio.net/) | Powered by Discuz! X2.5 |