|
http://www.cnsu.org-->site 5 }( u3 d2 h) @7 q. g5 v6 G
# q- _9 d$ S; r: V6 o
www.cnsu.org-->inurl , f8 e9 ]1 ^) K! W' H
! e+ h# }0 @& k/ T4 {! q- `3 [; o$ }) ~ adminàinurl 7 h( Q! ]7 q# X
8 K3 {" f" F: O5 z8 Q6 a6 E% \' b 。asp D D》filetype 9 x5 l- p! `1 o/ \& O
( K3 |* e" c) G+ C
标题 D D》intitle
, U! d* B* q! U1 U( `4 w7 l8 a0 \
; e2 z: D; w1 Z 页面文字 D D》intext 0 {) s0 p' ^3 p2 Z' N
4 m0 E) {9 [8 h- e
页面编号 D D》numeange 8 h8 Z+ Z& z$ S8 |# N6 O7 [
# M( g" G0 x1 c1 m4 X8 N
- 逻辑非,“A-B”表示包含A没有B的网页
" a4 J/ B+ w- r( Z F8 `8 q s. |8 t
6 }- s) u- j. r1 h+ L *代表单个字符
; \. C' F n% z+ u' d) e. z9 o8 e' ]2 v7 Y8 R6 c/ c' j
or操作 & }) a* m q3 N8 Y9 Q+ X+ C4 H
* G; w, D; M" i. v* n6 j7 _ “”用短语做关键字,必须加上引号,不然会被当作与操作
, b1 @& b; }+ d ?, y) {+ T1 R: N4 A+ F- c# k* U, S8 L
。空格
% O0 s) j* I+ p& y3 {: |" }* C/ I( Y! h8 `- q
Google对一些网路上出现频率极高的英文单词,如“i”、“com”、“www”等,以及一些符号如“*”、“。”等,作忽略处理 3 s& H7 V6 k& [# S# V
1 A& z# {% ^5 w( r* W 可以用+强制搜索
! l: q# v. N9 c" {# n$ c: p. {0 c! d& j4 h2 |+ {. M: R; Z8 c
下面的语句是我搜集来的,大家可以试着用下 - p& M) g! {% K1 h' k( S
6 J' S; O1 O+ l$ H 比如用Intitle:welcome.to.iis.4.0 IIS4会找到好多winNT的主机,呵呵
# i' B1 p/ q$ \5 `. E" s7 F6 n; `' M- e( b# _$ Y( t) }1 j- t
Site:sohu.com ) W4 x" g* i0 k( e6 d3 x
% w! | g1 f" \5 \8 ] b Site:sohu.com-site:www.sohu.com ; s0 j6 H6 R/ P0 P/ |( m2 w
1 P- J! y- ~$ k. o
Intitle:index.of/admin
( h" i$ J q) }& S K2 v ?3 v& c8 {) g9 g
Intitle:index.of apache server.at
+ m; k& U! H0 e; M4 j
- |# c4 t# I5 ^4 } Intitle:test.page.for.apache “it workd”
: v: l) T# a; ~4 D; q5 F f8 t( |6 B3 n) r8 ~4 A' `" A* O: y3 Y6 o
Allintitle:Netscape Fasr Track Server Home Page & @) ?# ?- {! w% @, n
* T& p: ~ p+ H- N4 i. n: P Intitle:”welcome to windows 2000 internet services” ; U/ f+ h% x: ~9 y9 ^* w- H
2 m) p1 E M7 x2 H3 G7 b5 X IIS—win2000
* n4 T( o6 U8 S$ g4 j. |6 C
2 K% z- Y# c! J; g7 `3 V( u Allintitle:welcome to windows XP server internet
3 K5 N& ^: _3 j9 D: p: a
: y9 J7 g3 }& n) P- c8 _ services iis---XP $ i# ]: E$ Z4 D/ d
5 W8 F5 u8 L8 r2 [+ T; N0 Z
Intitle:welcome.to.iis.4.0 IIS4
k% `0 D- u; k+ i2 w) g% Y% N+ A5 w( m2 h4 I7 U
Allintrtle:”welcome to internet information server”
$ Y6 Q$ ?7 f& \( R3 Y5 S" H
2 [7 N5 E1 r9 s2 R1 \5 j IIS-- generic
' ^; _: W/ _, F# }) Z3 ~+ x; ^
) X6 p9 D6 g1 {! |4 I* s5 Z Intitle:”apache http server” 6 T$ a& u8 K4 P
4 C5 B5 q; Y- e6 `# V; d Intitle:”documentation” ' y w0 f. H& I5 g+ F: w
+ k+ j3 S. J( v8 ]
Intitle:””error using hypernews””server software”
$ T. \& u* s- q4 J* s# c' ?/ Z; m+ q$ L
“HTTP_USER_AGENT=Googlebot”
& a+ K, W3 e6 ~) E# ~0 j! t$ E3 O
; [4 E) n# Y/ K# E# z “HTTP_USER_AGENT=Googlebot”TNS_ADMIN $ [6 G; i, i1 f; ]7 @9 ~
# P! z$ y6 Y# c- ]3 u; A Inurl:/admin/login.asp / ~3 t8 _; v F9 j7 Z
" r4 y7 x! }7 z0 I+ O
Intitle:”remote desktop wen connection”
7 r8 }# P: |% ?# n1 O/ P: q5 l: P
_0 ?- \+ l7 g* D “welcome to *” “Your password is *” ' p6 r! A8 ?& v, v2 `1 R
% D9 e" S$ `( V1 t) S! p% {6 s Inurl(browse top_rated power_search hot create_admin_user)+”powered
) q* B( {. x$ r( J/ \# [+ n
2 k! Y6 o3 e# W, a3 q by inde xu” 5 X5 i9 p, \6 A$ l2 ~& o
& o, D: m/ B- ]& S “adding new user” inurl:addnewuser C“there are no 1 R6 W4 P7 i# ^! f% q9 H7 D
4 {1 ]3 k" N+ i, q8 J8 B domain”
% m; Z: @# k' d$ e/ \6 K& B
# z) V0 ~+ J& K( C* q5 o Filetype:log inurl:”password.log”
; `4 g. V1 Y+ R d1 K Q+ p# j2 e* |$ O9 w9 m4 @2 l* R2 ^ Z, {( z2 O
Intitle:”PHP Shell *” “enable stderr” filetype:php 7 b1 D, l% X" {. s$ d8 I2 L$ I4 H
: }9 e. J9 G8 K% w- i Intitle:confixx login password 6 M7 h" l6 q/ Y$ f& ^ c
+ B9 `, f5 g/ w
“powered by rover” $ u0 u! ~+ m5 q% u
8 u" y% f% Q7 o9 ~9 n
Inurl:iisadmpwd
, o" a; k4 ?0 B+ w4 A5 m: n/ Q* u0 R: L/ o) A+ h% J
Inurl:5800
' S/ x# \0 `6 U) H9 J# b8 Y8 x3 y. Q* H8 c$ P$ F9 j. {8 N5 P1 Z9 q
“VNC desktop” inurl:5800 , V! _% G3 B$ y! K L$ l2 v
1 J" q3 W* X+ S3 C+ W$ j
Inurl:webmin inurl:10000
$ W6 l( E0 b/ L1 C E3 R! W0 o; j0 t
Inurl:8080 Cintext:8080 ; H' @# @& M9 X; M0 s& ~# k! \ b# @
& L8 Q( g0 V4 K
“access denird for user” “using password”
6 |' k3 t) [/ f& L; ^1 Y7 w
+ [$ ]; h" D* a" f “# Dumping data for table”
' r9 x, F( J+ A; u/ x2 B; P% F0 \8 Q9 n
“# Dumping data for table” username password
7 e7 o7 B- x$ |; ]) I0 }7 t$ O) |7 L% T$ }4 l2 ^
“# Dumping data for table 8 |$ S" M% a9 M4 N7 j0 b
( W. V, N- r1 | (username user users password)” % N/ Z: U) b1 `, {, U' s
8 t+ p; {& ^, \ Inurl:main.php welcome to phpmyadmin
" M. I8 u9 A* J% P/ z& N9 Y: |1 b( K% Y" k
Intitle:”phpmyadmin running on *” welcome to phpmyadmin * r# n4 O7 \: V+ o/ `
1 K% Z; `: R0 Q o' Y; u' e- X1 G5 O Filetype:inc intext:mysql connect
9 R1 b# v$ D" r9 O9 A
. E8 N# K$ O1 b+ V' t1 x Filetype:sql + “INENTIFIED BY” Ccvs
% J4 m- d* T- n+ }3 O% e
& o% W6 N$ _4 u/ l* c Filetype:sql + “INENTIFIED BY” (“grant * on *” “create F, n# [3 S* M/ m) R7 g3 w* `
; v! W# I' t% S" V# `
user”)
6 k/ w p% ~% v* B% ?- |
! X& i4 ?$ F; i) d1 L “this report lists” “identified by internet scaner”
* `, [8 a0 l5 v, V8 b) L% a3 w) t8 q
ACID “by roman danyliw” Filetype HP
9 J: K) j8 V$ M7 [6 L. M5 c2 m" C, G2 f5 t# @- a, f/ _
小提示:用google hacking工具搜索这些,真的是多快好省啊:)
" I. r" z0 t0 O3 w+ o( R" `$ s |