|
http://www.cnsu.org-->site
_/ F# J2 Q6 I! S# V
8 p/ c" b. |" u+ s' z8 A www.cnsu.org-->inurl * H# E8 ~ D: V5 {
& f* d# Z& d W8 X v5 c
adminàinurl - c' s" H; N: v! x+ w
" w1 k: D$ N" w; H* M) i+ f" e) [ 。asp D D》filetype " y1 E& ^! Q. H! |, x) x, f
: ~! Z# @2 J8 J% {% m
标题 D D》intitle 9 p& U4 ^' E8 _ Z
, L8 `: K }$ |$ I# I6 `! u9 H 页面文字 D D》intext
7 s+ d& [0 g: k5 m4 N
$ x: ^4 w6 a0 l: B" ? 页面编号 D D》numeange 3 \& \! e; ?! h% e! [) b3 y1 o
8 k. U$ \) y6 p! c) P; J1 W; m
- 逻辑非,“A-B”表示包含A没有B的网页 % ^1 b1 j9 }2 ?
0 S+ { r4 q! O1 x! U4 o
*代表单个字符 * ^' G+ ]& ]$ m' S, E- G
# Y% |9 k1 F. Y+ d; F
or操作 * [# @ |9 ], s7 `$ M$ n* A
7 K# V$ g8 t3 X “”用短语做关键字,必须加上引号,不然会被当作与操作 2 D1 C& U4 J U; m) z# d8 V' E
7 U, P+ V- \0 I 。空格 . N7 l9 {4 [) o' K
# K3 P! B" J% P; x
Google对一些网路上出现频率极高的英文单词,如“i”、“com”、“www”等,以及一些符号如“*”、“。”等,作忽略处理 3 Y8 E. i" ?+ B# y
9 r# B, o4 e3 ` 可以用+强制搜索
8 o0 U3 z& _8 B2 d9 ^1 ]% z- T8 S* v* X# _7 T. I' ]4 D
下面的语句是我搜集来的,大家可以试着用下
' O8 o0 Y6 i! e- F
* ?2 L4 H1 g. h5 m$ _0 L' @ 比如用Intitle:welcome.to.iis.4.0 IIS4会找到好多winNT的主机,呵呵
- E; M( T1 V" z; y/ N! L
. \2 X4 R6 l/ C! G7 _ Site:sohu.com & J0 S$ C. z( ?) b
, R. P7 Z* t7 U$ ` Site:sohu.com-site:www.sohu.com
: ]7 U( i* X$ u2 H# C+ \, M, z5 P, E! W
Intitle:index.of/admin 8 l2 d2 m/ n# Z+ H, z* W
# S- \3 ]' S/ r5 Q Intitle:index.of apache server.at . |" n1 ]: b! M. H H- t& o" J) t
5 J- W _) @# A0 G2 e! C
Intitle:test.page.for.apache “it workd”
( U5 l7 s \, X/ B6 G5 _8 A! B7 R6 N7 ^. [7 E
Allintitle:Netscape Fasr Track Server Home Page
0 | C- ~+ _9 N7 G! X& l4 j9 q) u; I. [3 B9 q
Intitle:”welcome to windows 2000 internet services” 5 n- d' V3 O& l- [% D) x! h
" f! Z: m' M) h5 h8 a/ g
IIS—win2000 # J+ F* X9 }- s! N2 l8 ~
* b& T2 o2 p" h& I% w9 ], m; X Allintitle:welcome to windows XP server internet . t4 M- {1 `5 `2 B; K. @5 p
. B2 T/ W. U8 J% o4 L services iis---XP
$ i+ n( N7 T* X) u4 N( p
0 H1 D/ R/ l1 X9 E0 G6 [ Intitle:welcome.to.iis.4.0 IIS4
) @% w+ T/ T* E, C R7 R( x, Q6 I* ]& I3 R5 C9 c* G _8 d
Allintrtle:”welcome to internet information server” , X4 R: ]2 S1 S: F$ K+ ?0 A
$ g# A* r5 ? H' ? IIS-- generic
1 q( x5 N, B- Z( q+ @ D5 h8 M7 Z, l7 ^1 d% i
Intitle:”apache http server”
5 C' q% A. O; l3 g1 k# M: ]! }3 M( Z
Intitle:”documentation” 7 r' S$ ]6 z% L7 i, }' z
9 f- `6 |5 ?0 j: ~* h Intitle:””error using hypernews””server software”
0 N4 P; Q3 \7 N& Z0 O. [% Y: f8 f, o) ]/ F# z h7 o- x5 z1 e
“HTTP_USER_AGENT=Googlebot”
* m7 v: p. Q9 S9 [3 p, c" X+ T
( w8 \& z0 K1 e4 a K “HTTP_USER_AGENT=Googlebot”TNS_ADMIN
! ~; N9 Q; N, f: z9 u( z6 Q! c' e
* j# | n" A) H3 ?, F Inurl:/admin/login.asp ' A0 ^1 v. B* |, g0 m+ ]
: u& v2 Y8 Z* z' o
Intitle:”remote desktop wen connection” 6 e0 i9 q- c) r5 d
0 N/ G `% s! x; A$ g
“welcome to *” “Your password is *”
4 g! g; \" Y1 S& n, b* J
$ T7 Z9 j0 _* R9 x0 _! W Inurl(browse top_rated power_search hot create_admin_user)+”powered 9 |2 @3 ^' z$ d; |
1 M6 a8 j' A( j H; ~
by inde xu”
- |- ~! k, }# {3 x5 w$ }
( h0 E+ |% @5 j: w/ k8 | N8 ] “adding new user” inurl:addnewuser C“there are no
7 U6 C# s( \0 |9 h0 Q1 N6 }7 D/ k5 Q1 u- C x
domain” X2 H3 J7 w4 t5 `; c
" |1 X' X2 o. c/ j Filetype:log inurl:”password.log” $ Y! a+ b* n! O
, R$ W9 N# K- x# A- `; {; Z) c4 b: c) h
Intitle:”PHP Shell *” “enable stderr” filetype:php
0 Z5 d, J$ U5 T! L0 e" f7 Z
7 h3 M7 }/ M) d1 I$ m0 i: k* \" Y Intitle:confixx login password ( n9 ?1 o ~% \8 j
5 I2 o1 R. Z4 p$ Y9 D/ ~ “powered by rover”
3 S0 O: }* k& Z
( u3 ~& C" T9 l8 t8 N5 U" q! a Inurl:iisadmpwd
# _* T0 {' F! k0 O( B8 e) G3 [6 D# }4 W& f+ b! p
Inurl:5800
% [* d3 O6 E( j [
1 y7 A/ I" [. e4 h9 Z “VNC desktop” inurl:5800
4 L8 i3 h+ C# V! e9 ~% r0 o# P) a+ ~5 ^! _& } Z
Inurl:webmin inurl:10000
- P/ h# V" W! V \: m
! @+ S1 X2 K# Q* T Inurl:8080 Cintext:8080 1 h7 `8 a1 r3 |& d( J7 h
. G& Q H2 M% e9 P+ H! }
“access denird for user” “using password”
0 @( }6 M S8 x7 Y- H% `) O$ h' Y8 O0 N6 N
“# Dumping data for table” 0 d/ @, J. u4 T* c9 v
4 g% D7 E$ o7 I! H8 X& X& a( M+ s “# Dumping data for table” username password 5 l1 O. y1 V' c q Y S
- w1 F3 Y$ i! ~7 z+ o r! H* u “# Dumping data for table
& r- y& G- q( f8 J1 X# F1 X
* X( M# n! c# w (username user users password)”
; L9 g/ m$ R! f7 v
+ y8 U5 c3 N; A1 I+ P j, W; F Inurl:main.php welcome to phpmyadmin , J' k) k h2 o8 \; y: f
( C6 Q2 M: Y4 V; x- `8 [7 P Intitle:”phpmyadmin running on *” welcome to phpmyadmin 8 a# u. x5 F$ ]
# r' a: F- @# Q- R7 m' c, D Filetype:inc intext:mysql connect
4 o' ?' z$ h9 Q# U+ F+ n0 x4 \; j0 x' W
Filetype:sql + “INENTIFIED BY” Ccvs & M: ]* Y+ x7 b$ K4 _9 Y" i2 J) q) p
2 N8 R" d6 A9 B, k% N/ z8 J6 W1 g
Filetype:sql + “INENTIFIED BY” (“grant * on *” “create
. ^* Q( s2 }- O$ [% F
& V+ r- a( @0 O+ Y x* Z user”)
+ e% S* [2 W$ G* l# ~' Y1 x# \0 k3 j, m% h' _* d
“this report lists” “identified by internet scaner” 6 O/ b+ d# N1 X" _
7 g5 X3 M0 E! E- {' C
ACID “by roman danyliw” Filetype HP 0 @( z' e! N W4 Z
# {! q9 u. e% r* E
小提示:用google hacking工具搜索这些,真的是多快好省啊:)
7 b" m2 S4 o/ t1 ?% t" r2 L |