|
http://www.cnsu.org-->site 3 g" U( A/ [) t
" K% s$ E6 T, \9 d6 G
www.cnsu.org-->inurl / b% A' N4 z8 k% r" s2 I! j
8 _9 q. R1 d/ h+ M7 {
adminàinurl 4 x8 C# J$ D# q; Q2 a5 A
3 k L% J( w ], J% h
。asp D D》filetype
" q/ E9 E" z/ B# C+ {% j5 I: z* o, z; D( `) Y% _* p
标题 D D》intitle
q0 F) i3 f5 f- u! O2 I! ~* ^" g7 y, v |8 U! a ? o1 W9 } X) j
页面文字 D D》intext
, m! W" ~. I: B& s. [( W4 f5 ~- Z" s6 Z a0 u& a
页面编号 D D》numeange : y0 n2 P0 }( }! \$ r
, t! A5 Z4 g6 s1 J7 W C$ y - 逻辑非,“A-B”表示包含A没有B的网页 9 D" l" i$ H: B% j; b' \
! O: q) K5 B. R *代表单个字符
1 O! p$ @/ X1 H7 z2 X7 n) P, w8 R2 X/ i( V
or操作
$ `2 d; P; W/ O% ^$ E3 \% A" K5 O6 D; F
“”用短语做关键字,必须加上引号,不然会被当作与操作 * B# p9 u% N* v& g6 L
2 V5 F% i2 h8 g0 W
。空格 ; X+ p( ]; X0 V& I3 ~- L/ `) j
- b }# X5 d9 s- @) { Google对一些网路上出现频率极高的英文单词,如“i”、“com”、“www”等,以及一些符号如“*”、“。”等,作忽略处理 / c) j6 N3 f3 K
6 D& X3 T) K' y 可以用+强制搜索 4 x( c' @7 `$ }) [1 {7 _6 d
1 u2 X7 `, ^3 |# [: T( q2 m+ C
下面的语句是我搜集来的,大家可以试着用下
5 [) X5 `: k. Z* b$ q# W5 T. u7 f( m$ w; i; y( c
比如用Intitle:welcome.to.iis.4.0 IIS4会找到好多winNT的主机,呵呵
7 c9 Z) F `7 ~: G9 l5 E, `$ U( t5 b, j% A! h8 Z
Site:sohu.com 9 k8 z; z3 ?4 N
" W" I7 d: u; x Site:sohu.com-site:www.sohu.com ( d3 N% K9 t* |+ V6 P
' e! Q: h& C, r" K$ ^8 u' e Intitle:index.of/admin
$ g0 J5 m' b7 I$ ~( i1 W
' `1 Y f Q4 v: Y2 k Intitle:index.of apache server.at 9 d' y- q- W- i- Y$ ^
2 z a# n. |9 R2 w$ V3 A+ h
Intitle:test.page.for.apache “it workd” . H1 H- l/ u+ \) V' b& ^
+ w5 J8 O: L% m Allintitle:Netscape Fasr Track Server Home Page
& N$ [' }& u `. z( w7 K% X% L: j8 x6 B# @- X* ]1 s, ~" E0 q
Intitle:”welcome to windows 2000 internet services”
$ F+ ?7 u7 i8 g3 @4 q0 i3 Q9 n8 ~; `3 L5 @) B8 Q4 j+ o- ]
IIS—win2000 * z7 g. j K. B/ \+ R( i6 P
' E/ n7 R) d, B4 E" F0 D Allintitle:welcome to windows XP server internet
0 W! g/ ~+ @: K7 _+ d$ p1 Q* Z3 D" R; {6 k' C
services iis---XP ' ?( s+ U7 Z$ O t' }% L( P, b
4 C. s8 F' [0 w! c' i5 [$ a: {* n. x) U Intitle:welcome.to.iis.4.0 IIS4 2 t3 m6 b; M1 C% U' O( e' T: J
; @8 G9 o+ O3 K
Allintrtle:”welcome to internet information server” ' W! m+ l& m& s, L+ I7 [) l# ^
+ c9 ^2 }* J* z6 O# ] IIS-- generic ( t+ \3 L' L* I y7 y& z; b
- j* C/ l4 V, s( s7 S/ M
Intitle:”apache http server” ( q+ [0 A, a1 M6 G, T
3 F/ K7 k) @: p- t
Intitle:”documentation” / ~* R7 \" M6 _: d9 k1 E; _4 @
, Q1 `( Z- C9 W+ I Intitle:””error using hypernews””server software” 9 L! j0 r& j9 P3 v+ a+ _6 {! g" A
6 q. k" R% l7 E, U7 n9 E& d
“HTTP_USER_AGENT=Googlebot” * z# f3 F. d4 {2 P8 h
6 ]( s2 `: t4 t" w, ~) ` “HTTP_USER_AGENT=Googlebot”TNS_ADMIN
/ ~1 _, A& q5 N) D* X4 F0 G/ a+ }! f6 v' }
Inurl:/admin/login.asp
) r" P2 A" T5 E* J# z; K$ e0 I% X
Intitle:”remote desktop wen connection”
% e1 M# g* p$ x1 U
- h( g4 l) Z# e" u5 c “welcome to *” “Your password is *”
; M# n. j3 y5 ]+ ~: z9 `! y4 G9 G; b& \8 w( j M$ M
Inurl(browse top_rated power_search hot create_admin_user)+”powered
/ I7 P2 [9 A' J7 U
+ F, L( j# Y4 S% m7 B( h. O by inde xu” % {* N- w8 @8 H8 a
. X% c( m8 c7 d8 W “adding new user” inurl:addnewuser C“there are no
0 e5 |+ Z3 \0 l) w
+ x1 m1 P" s! X/ n+ N9 c3 a; B domain”
0 q3 z% J, L2 r/ D2 G. l! O
v" K0 g8 K* O' M Filetype:log inurl:”password.log” 3 Q ^3 J* n, I2 N: J
4 Q8 H- }7 J, v/ q( B8 v, m Intitle:”PHP Shell *” “enable stderr” filetype:php
6 S+ h+ R( I: O i4 m% {' c. i% c( ~3 n
Intitle:confixx login password
9 o) {- S1 `- Q
0 _2 q4 M" E4 L0 J$ S/ V1 n “powered by rover”
4 } ^: I3 @% _2 z0 _) A9 G' B6 k, o* O1 _; c
Inurl:iisadmpwd 6 A7 _% I$ t! \! k7 X/ d
: W9 I4 @* x9 Y) s+ N9 o _* F1 Y Inurl:5800
1 l. ~! A6 p# G1 k
$ l* |% X+ @$ C& ~3 I& N0 A: S: B “VNC desktop” inurl:5800 + O6 s3 z8 n$ ?6 i2 r$ [
- T' O2 w9 ]! @) y" p Inurl:webmin inurl:10000
F: ~. Y# ?0 W5 V( t; q5 W: g% f
Inurl:8080 Cintext:8080
- g4 s$ X: r8 [1 m5 e
3 A* N2 o( n1 [4 h- `2 E7 Y+ @ “access denird for user” “using password”
. ]+ c/ b/ L4 C7 d' i+ ?4 s% s
& }" [& v6 W3 A “# Dumping data for table”
* q+ E6 v& ^, g+ C @
3 U0 B2 ]+ x6 t$ r “# Dumping data for table” username password
" ?0 o9 G; a) o% X- W# J
' X( v' a* A; d& E/ A# X “# Dumping data for table ( ?% p+ A1 Y# L1 z% i* W3 Q
7 }6 A2 P# i7 ?- i* w (username user users password)” 2 i( R! d4 J }- F ^
1 F) l" i# L( l/ `7 X
Inurl:main.php welcome to phpmyadmin
' s4 |. M& d: F# ?; J* N( Y1 L8 X6 C1 ~) M
Intitle:”phpmyadmin running on *” welcome to phpmyadmin 4 v& A) N2 `5 o$ ?
- }$ r$ O/ Y8 q Filetype:inc intext:mysql connect 7 s' Y, E/ Y/ ?. Z* s
3 R0 a: ?' a/ k7 C. J/ N: _
Filetype:sql + “INENTIFIED BY” Ccvs * L/ J! x# s) B% m# A7 N' ^- ]8 D
" c7 W: a5 r% `# G1 r Filetype:sql + “INENTIFIED BY” (“grant * on *” “create $ |' d: n; g* e# F
$ m2 T* U2 o$ J' j' e, ~
user”)
6 ]3 z8 c' Y7 ]3 W1 v6 ^; G% P2 A
2 P/ g: z' e+ T/ z “this report lists” “identified by internet scaner”
* A$ b; g: Y$ W% @! \; u$ {3 U
' O) [6 ]# J- L [6 L( m ACID “by roman danyliw” Filetype HP
) P( f/ P1 C! ?! c. |; c9 i! g; ^
* V5 _: l8 ?0 s' ] 小提示:用google hacking工具搜索这些,真的是多快好省啊:) 4 s" u1 Q, g8 v5 h1 C1 X: ~& r. v
|