http://www.cnsu.org-->site . s3 z3 O! n: _: v$ H, Z 9 l4 `- D- L" j7 y
www.cnsu.org-->inurl 6 J8 U- W; x9 I6 ~ 2 Y+ M7 e- W: _
adminàinurl & k3 T+ r* u9 y; @% P- j5 N) M+ E
。asp D D》filetype
标题 D D》intitle 9 K n7 m* s) o- | 1 k9 J2 H$ ], q/ B* V
页面文字 D D》intext ) A; ^7 W: z" x4 W+ d8 Z0 _
页面编号 D D》numeange ; E$ @: @) f- _# \! X
- 逻辑非,“A-B”表示包含A没有B的网页 - i; ^1 {+ I6 o; A 3 k( u& w: p0 X
*代表单个字符
or操作
“”用短语做关键字,必须加上引号,不然会被当作与操作
。空格 # X5 W9 @" L1 B+ D/ o) {
Google对一些网路上出现频率极高的英文单词,如“i”、“com”、“www”等,以及一些符号如“*”、“。”等,作忽略处理 0 Q- h% x. b3 \; Z2 R
可以用+强制搜索 6 {2 T* F' b, k1 i% W
下面的语句是我搜集来的,大家可以试着用下 4 K( W7 P3 V1 `2 z $ H& F8 }3 Y0 q. b* I5 C
比如用Intitle:welcome.to.iis.4.0 IIS4会找到好多winNT的主机,呵呵
Site:sohu.com 3 K; \: T( {5 `9 _ W# Q. t8 i' p
Site:sohu.com-site:www.sohu.com 3 B/ j8 B+ F$ K# ^0 M* f: s) w) \
Intitle:index.of/admin $ I! |# O1 J2 u9 E U/ m6 r
Intitle:index.of apache server.at - d6 o+ ?5 Q7 s* a- X
Intitle:test.page.for.apache “it workd”
Allintitle:Netscape Fasr Track Server Home Page `, o( i+ g! y. w% W' S7 U) R . G3 U( A6 B8 W6 z
Intitle:”welcome to windows 2000 internet services” 9 p4 j# d9 S8 G0 n# Y3 g) Y
IIS—win2000 + b3 q6 O8 F0 R t- p: F& T; F
Allintitle:welcome to windows XP server internet 7 J# K( U7 w+ t7 s: O5 N. N
services iis---XP f8 _8 H9 C7 O) H3 [" W : I. g* B9 |: i; x8 Q
Intitle:welcome.to.iis.4.0 IIS4 1 q$ [# k7 P: O% ^$ l' C
Allintrtle:”welcome to internet information server” $ t7 m/ \+ I& V. c) z: b
IIS-- generic - g: t( M+ d6 R6 A9 }
Intitle:”apache http server” 7 ^: J8 S, [, {& T4 V
Intitle:”documentation” & @: o# K1 X1 T8 B" h
Intitle:””error using hypernews””server software” / u6 q* }1 O" m0 T, i) Y. M! L
“HTTP_USER_AGENT=Googlebot”
“HTTP_USER_AGENT=Googlebot”TNS_ADMIN
Inurl:/admin/login.asp
Intitle:”remote desktop wen connection” 9 a3 O6 r; M G& j1 t& i2 K. s- t % m& u0 v: [ L% `, u
“welcome to *” “Your password is *” , U, ^: L) T" \* {$ r
Inurl(browse top_rated power_search hot create_admin_user)+”powered ( ?4 X. {1 B( c+ C& k # n, M% R0 y. @1 }
by inde xu” 0 q0 ]. q% x) o/ h# ]
“adding new user” inurl:addnewuser C“there are no
domain”
Filetype:log inurl:”password.log” + t$ q x0 w8 v. o
Intitle:”PHP Shell *” “enable stderr” filetype:php 1 `* u& X; w: Q- o4 j% k $ w# M+ l% f& U+ A2 x
Intitle:confixx login password 0 j$ @2 k4 X) D; m0 d% e 8 g9 {) j `8 p8 m+ ^- J
“powered by rover” w+ C. w9 z, B" {6 K7 o B3 s
Inurl:iisadmpwd - T2 k# M* u4 z% M2 J+ @ 9 a. r. h* L9 b J, ?& ~
Inurl:5800 $ ]9 ]0 R7 V- j6 c" l; |/ }7 H- i! f
“VNC desktop” inurl:5800
Inurl:webmin inurl:10000
Inurl:8080 Cintext:8080 . V+ l6 a: _- j4 h r: r+ g
“access denird for user” “using password” : ]7 }& F, C7 K2 s" t N# w7 D! w# _& N# Q8 f
“# Dumping data for table”
“# Dumping data for table” username password ; m+ z5 t5 T* U+ Q( k# ~8 ^
“# Dumping data for table 8 E, e2 m h6 C( P& ^0 f' O1 b6 y
(username user users password)” & y! V' D9 _3 y* v* T
Inurl:main.php welcome to phpmyadmin 1 a3 ]6 P' c0 Y
Intitle:”phpmyadmin running on *” welcome to phpmyadmin # a0 z# R9 I: B8 X1 G) P! y5 ^" z 3 ~+ x1 V3 T; \
Filetype:inc intext:mysql connect ) Q# r2 d- r7 M& L5 l+ }% [
Filetype:sql + “INENTIFIED BY” Ccvs , T5 g* [/ o7 Q ' C3 f3 P6 `+ L9 p% Q
Filetype:sql + “INENTIFIED BY” (“grant * on *” “create
user”)
“this report lists” “identified by internet scaner” 7 \! O; S. U$ K1 x: e
ACID “by roman danyliw” Filetype
HP
2 |6 p5 b8 r9 q( b0 c6 l
小提示:用google hacking工具搜索这些,真的是多快好省啊:) $ p- ~) O4 l0 K' Y, |- q
great!!
看不懂。。。。。。。。
!!!!!!!!!!!!!!
| 欢迎光临 数学建模社区-数学中国 (http://www.madio.net/) | Powered by Discuz! X2.5 |