|
http://www.cnsu.org-->site
3 ]9 T* ?7 w1 _: ~1 R. F7 e# b f7 `2 G3 v
www.cnsu.org-->inurl
$ @/ c! _6 P9 k
0 j3 W ]8 G7 g& J2 H adminàinurl ' G+ G* G+ G# I! g' {! Y9 x0 C8 W
& ~9 k6 m% H" g @7 K- ]# \/ P 。asp D D》filetype 8 V2 }3 ^, V# x. v
2 P8 x, k: P8 ?6 m2 @& {7 Z" w
标题 D D》intitle
! f; M+ r% j! M6 k2 \1 t- q4 q: ^
页面文字 D D》intext
2 W! ]4 q) I, N% s9 f2 ~0 c$ a2 ~8 E6 t) Y0 Z% P7 ?# v0 }
页面编号 D D》numeange
* e$ F, Y$ Q( O) Q! B& i% q) D+ G* [. G; N9 M
- 逻辑非,“A-B”表示包含A没有B的网页
0 W3 M0 |/ o+ f5 C% _- m( W- s# H; p8 `7 Q6 C' u& a% ^& X
*代表单个字符 , P7 }9 B9 \1 h d: d2 z1 z
1 q9 B; j6 G. E1 o6 X5 D+ X; E or操作 : J8 L/ ?( d: R' R- [
& }2 R- Z7 R9 V+ V “”用短语做关键字,必须加上引号,不然会被当作与操作
( M2 }7 V% v- l! e/ E ]
1 Q+ U* m9 w i& Z9 ` 。空格 6 L+ p6 D$ c- l8 i
; J# e' g. c o9 a" O6 m1 Z Google对一些网路上出现频率极高的英文单词,如“i”、“com”、“www”等,以及一些符号如“*”、“。”等,作忽略处理 - N9 Z9 ~8 D/ U- F4 d( x8 J
$ E9 [. M" }$ u/ p4 q# V0 r 可以用+强制搜索
& n4 Q4 F* c" x3 W$ U1 c6 Q/ Q: P0 v3 ^& n1 \# D, f- @6 A( O
下面的语句是我搜集来的,大家可以试着用下
- u* G @9 S8 \% a8 [4 ~( X0 Q( g5 l/ l) H
比如用Intitle:welcome.to.iis.4.0 IIS4会找到好多winNT的主机,呵呵 ! `, G7 \( F( V% K2 u
& ~7 y9 m- \8 x" Q Site:sohu.com 6 H) O- n# ]" Q1 F
" L! u$ q8 v/ M/ t2 Y! K. u3 L
Site:sohu.com-site:www.sohu.com ! @2 B# s) ^( h1 w8 V7 _( d
1 }9 }, A6 h- R1 B6 R$ A Intitle:index.of/admin + g' |2 _8 j, f/ M0 J
. |8 Y9 a; s W& ]% k Intitle:index.of apache server.at
# m$ x9 k8 k; \- p- }! D
* g8 L9 s- D8 J) F Intitle:test.page.for.apache “it workd” 1 I3 M" t0 G# A
7 W0 {. E- m0 i, p- C2 T, b
Allintitle:Netscape Fasr Track Server Home Page
1 o' V" j$ s9 M: N6 j2 h5 `
! r0 P4 R0 P) M9 r2 N7 s Intitle:”welcome to windows 2000 internet services” . t% V) V& O) r2 @; f
' h2 A: j/ Z& Y1 w; c) M" ?' Y IIS—win2000
6 @- n; `- d5 R# h2 G. b. `1 f; i9 ~0 a* H' F5 @
Allintitle:welcome to windows XP server internet
# A% q/ c! E% w# y- ~( p- t% F
: V" P. K2 P- q3 a, [ services iis---XP
; E, M ~6 Z# j% h c" h. B" c$ O6 }( @. p: A
Intitle:welcome.to.iis.4.0 IIS4
, Z' T, D/ E' @7 X" K. D
2 Y- B7 F- o2 `0 m J* c. h) k2 ` Allintrtle:”welcome to internet information server” ( r: [, N* ?& D. Q4 @6 P
0 \, j1 W2 a9 W' } IIS-- generic
2 i% U: s g0 [! k5 }4 `! w+ d! S* c* ^4 P8 j5 s r: h, d1 \
Intitle:”apache http server” 9 O6 p4 B7 W+ M. `: v! {* r* d
+ `0 u4 O; Z5 a9 p Intitle:”documentation” ' e8 Q; e# ~4 R8 h8 y8 N+ J* z
4 i$ W) J" x+ y
Intitle:””error using hypernews””server software” 6 f9 S& @2 q4 p& j8 V$ x
2 n+ r$ H; [6 D0 Z
“HTTP_USER_AGENT=Googlebot” 2 S$ }' }* J) y }) y [5 ~# x$ S
: J: X$ ^3 o: I9 s7 y/ ^
“HTTP_USER_AGENT=Googlebot”TNS_ADMIN 0 V. T F8 o% `2 k i$ L
2 B& T5 k. H' N
Inurl:/admin/login.asp ! N& e1 d5 g' d: J" I) }: K; i& ?
6 a) j2 {4 X5 r7 K @# h4 [ o- s
Intitle:”remote desktop wen connection” & ^6 U3 v- \/ \+ M
( |. [3 |* P2 }1 L! ^2 i" [ “welcome to *” “Your password is *”
! M+ p' ?+ G ~1 }+ O0 g R. Q/ Y- w$ v7 h
Inurl(browse top_rated power_search hot create_admin_user)+”powered
4 _2 v2 U- X6 Z$ A* j! D% f2 j' h4 S0 U2 o/ z f
by inde xu” " l. p/ Z9 V# F8 e
) i/ B* J$ e/ O6 k' L “adding new user” inurl:addnewuser C“there are no - l- N, g7 @1 m
) j; t: {7 f5 Y& m$ X; F' Q
domain”
9 @* s0 h' Y! S! h6 U; S1 t. \! y" J, F# a; b2 y
Filetype:log inurl:”password.log”
. E# x5 t# f% N4 G# z. r$ [0 d% I# e! X
Intitle:”PHP Shell *” “enable stderr” filetype:php 5 b p/ H* o7 d! z% r3 b, X
" j8 @( t7 ~& F' T% a4 ~) D
Intitle:confixx login password
+ g% W2 A+ @6 n! H: t' \; V) ?9 d' ?3 V6 ]% F# {
“powered by rover”
" d; `! R! V r. z# G' M, t
; M7 z2 k/ h2 L f9 \% r5 Q5 V Inurl:iisadmpwd
7 K, W: j+ [- K& s8 X' T( d5 q1 H+ A; ]' u, T
Inurl:5800 " o5 i6 u% z Z6 X4 d7 ^
# y0 ]( I8 x; y5 P, W2 Y
“VNC desktop” inurl:5800
/ F3 A+ n/ x5 c4 a' c; |4 K0 {
5 p" l( x- A: j( f% d Inurl:webmin inurl:10000
8 J2 y( [: @' \+ u- g! W, W2 ~: q! X& ^* e0 h2 F5 y# r+ @" ?5 W8 ^/ J
Inurl:8080 Cintext:8080 3 P( x1 B5 m. P5 }) n/ ]
, Z) {. q) G, h. a r1 P; j- j “access denird for user” “using password”
# k7 G3 p4 F" B& ?+ z2 K4 \6 P4 C6 ]& S; F) @( F
“# Dumping data for table”
. K$ }; z7 e, c& t
$ T6 K( m1 V5 ^: [ “# Dumping data for table” username password
% Z s8 v# `- Z- g- z6 R' n6 \ N8 S3 z# p0 Q* `
“# Dumping data for table
4 F ]! A8 r- m6 Z6 n3 U" F& a y" i% `) j
(username user users password)” 1 K! f* U9 \6 W7 d- u: p
/ ^: S! W6 g; n# L) z1 Y# m% H) A" @
Inurl:main.php welcome to phpmyadmin
( C3 C( D5 s/ m& E1 z8 q
- o( k0 j2 F; [0 p. r- ] Intitle:”phpmyadmin running on *” welcome to phpmyadmin
6 Z0 ?, L4 o) j1 s/ F! _/ X8 K m
+ @* g- U! L: ?% u" K Filetype:inc intext:mysql connect
. ?) v2 a0 i* w, z% ^) Y2 q9 k0 d5 I& U7 D
Filetype:sql + “INENTIFIED BY” Ccvs
. [! g, t# @5 @" Y" A1 ~: [" J8 b K5 u
Filetype:sql + “INENTIFIED BY” (“grant * on *” “create 3 z6 D/ {, y+ ~7 E: ?4 s
6 b8 q6 D! w! O0 f; ]& V6 j user”)
- v4 Z) \3 M# v7 K+ |8 c+ ?& B: J* R1 `4 N0 |
“this report lists” “identified by internet scaner” 8 H# b2 B- o# k' ^* T
" J! n9 S5 j+ u0 A/ L4 ] ACID “by roman danyliw” Filetype HP
$ Y; e# B. W$ v, q
, V! {4 r P; H2 X+ l, j$ _ 小提示:用google hacking工具搜索这些,真的是多快好省啊:) 5 s, T+ c! r7 D! `$ D2 Y0 v8 y
|