http://www.cnsu.org-->site , I$ |0 _. e0 Q
www.cnsu.org-->inurl 3 X, L& K! ]/ \
adminàinurl ) g( o* z" Y2 r& z% `
。asp D D》filetype 8 S6 F2 R/ [/ g4 G: V2 O ) s; ]( a+ L8 w& r: \- x1 u5 w2 X
标题 D D》intitle ! `7 a4 |4 R1 S# ^' v0 y
页面文字 D D》intext ; @; g7 X' f. y7 k" s3 M ( b# R, c- G% ]; O( r& m
页面编号 D D》numeange 9 m6 G5 `7 D7 L, u* D! [- t , k1 ~0 M9 w% Z! U _4 \6 R' c
- 逻辑非,“A-B”表示包含A没有B的网页 2 A. B# O1 }: K* n, C2 W) \
*代表单个字符 $ Q( p7 y$ o/ w8 M9 C # _2 B& P! j+ C% G6 N1 m! h1 B& _
or操作 . N2 t2 T5 ]. a! F* {
“”用短语做关键字,必须加上引号,不然会被当作与操作
。空格 7 _7 r! M2 K/ T9 }& n
Google对一些网路上出现频率极高的英文单词,如“i”、“com”、“www”等,以及一些符号如“*”、“。”等,作忽略处理 * J! U4 ~! v, o4 ^0 {5 @
可以用+强制搜索
下面的语句是我搜集来的,大家可以试着用下
比如用Intitle:welcome.to.iis.4.0 IIS4会找到好多winNT的主机,呵呵 & I- G' P7 X" ^
Site:sohu.com - {, S( ]2 D! s9 a- L( E P! d* j9 v9 M ) ^! n5 H- L! G
Site:sohu.com-site:www.sohu.com # }# K3 U* X* z% _3 o8 v+ }$ T6 X
Intitle:index.of/admin % o+ P9 k. ?, O( s: ^& c
Intitle:index.of apache server.at
Intitle:test.page.for.apache “it workd” O/ q t% I7 y1 i6 ~4 c3 e
Allintitle:Netscape Fasr Track Server Home Page / s2 ]9 H- n- a i1 R( k
Intitle:”welcome to windows 2000 internet services” . y' S' e5 z8 w: a* d4 |
IIS—win2000
Allintitle:welcome to windows XP server internet
services iis---XP
Intitle:welcome.to.iis.4.0 IIS4 ; B ? i( Y+ Y/ _' y1 p; i ! _) ~6 j# h. U/ G4 @+ R! D4 r2 Z
Allintrtle:”welcome to internet information server” ; Q' r( e \; ~, a4 W7 [; W8 X
IIS-- generic 1 p( v) A& W5 n6 H( B
Intitle:”apache http server”
Intitle:”documentation” 4 R0 H7 a/ X9 D5 J k; h
Intitle:””error using hypernews””server software” ) v9 Y/ T5 R! Y. E! F, B7 e
“HTTP_USER_AGENT=Googlebot” , F' I* \' B( m* M; [1 T5 F
“HTTP_USER_AGENT=Googlebot”TNS_ADMIN
Inurl:/admin/login.asp
Intitle:”remote desktop wen connection” 4 {! z) p! b# X1 L& p) U: [& d ) J" O9 j; G. v8 i7 g
“welcome to *” “Your password is *” . u* ?/ A h: G0 Z- r* n/ t, u
Inurl(browse top_rated power_search hot create_admin_user)+”powered
by inde xu”
“adding new user” inurl:addnewuser C“there are no & g7 G: ?" Q2 K, Y R
domain” & i0 L- I: K0 R8 u7 k+ y9 O & [9 Z- X( ^' e
Filetype:log inurl:”password.log” ! [) j% p- H% S$ c
Intitle:”PHP Shell *” “enable stderr” filetype:php , W( _0 ^9 ?# f V
Intitle:confixx login password 5 h8 _" G7 p' m( [+ x- g
“powered by rover” 6 M. H8 M. |2 a5 t! }3 `: @
Inurl:iisadmpwd & t( c3 Q" ~( S# J' j$ M$ f* c
Inurl:5800 / k2 L' _2 S- M& K0 b
“VNC desktop” inurl:5800 7 P+ ], ?6 X7 T3 O
Inurl:webmin inurl:10000 0 T' y: c* S: V& b; c8 Q6 o
Inurl:8080 Cintext:8080 2 r" i: b: |. B6 ]! p
“access denird for user” “using password” 3 q9 L5 ]) M5 p; }
“# Dumping data for table” ' Z9 P g4 J$ j C
“# Dumping data for table” username password
“# Dumping data for table
(username user users password)” ! _ r7 G# j7 @9 P' s4 @
Inurl:main.php welcome to phpmyadmin ; Q# k% z* |" L$ G s! \) E5 I
Intitle:”phpmyadmin running on *” welcome to phpmyadmin ) }* s) T0 N9 \+ u) D$ u9 ^
Filetype:inc intext:mysql connect ; s- P+ W# _9 f0 x D: V
Filetype:sql + “INENTIFIED BY” Ccvs . k' e& Q( v3 E/ |% z5 l
Filetype:sql + “INENTIFIED BY” (“grant * on *” “create ) V( x% L. d& k3 W
user”)
“this report lists” “identified by internet scaner”
ACID “by roman danyliw” Filetype
HP
小提示:用google hacking工具搜索这些,真的是多快好省啊:) " m q0 O# W$ |$ s4 Y
great!!
看不懂。。。。。。。。
!!!!!!!!!!!!!!
| 欢迎光临 数学建模社区-数学中国 (http://www.madio.net/) | Powered by Discuz! X2.5 |