|
http://www.cnsu.org-->site
4 K4 x5 k7 y6 C3 ~/ ?$ ]
) e! y" V( H( F3 D' {* q www.cnsu.org-->inurl
. f/ v* E/ }; m9 j' M9 t1 A2 d- y& q& P; |5 m
adminàinurl 6 I0 F H( k8 E0 l
/ M B+ `% F$ `2 H. g C J 。asp D D》filetype , N4 ?! {% m- }* a+ G' j: v
1 t- v3 O" p9 k, }
标题 D D》intitle
4 E; I+ h. t+ b; n% e" O4 {/ g, [. M
页面文字 D D》intext
# B5 u) ^8 N5 X& u+ \. D6 u
: j, S% k# [* S7 }- C ^0 ] U" N8 \ 页面编号 D D》numeange
D3 v" k! A% `2 w1 v7 D8 w% p+ S) |# F- u: r$ E
- 逻辑非,“A-B”表示包含A没有B的网页
- b' l% j9 j5 E: h& B" s# F* F) T( t$ L, N' ~
*代表单个字符 1 f6 c d2 T& B
/ s2 p3 Q& z8 U( A4 ? ] W. Z( n1 q5 [
or操作 ! j$ U( x/ I J9 T! Y$ a
* k9 h [9 x) [2 g6 s5 ]% c8 @& S
“”用短语做关键字,必须加上引号,不然会被当作与操作 * b8 k6 y+ K/ c( r4 c5 }) `
5 ~# r- j9 h6 ]: N4 c x 。空格
2 d% G5 F6 [% V" z, P
$ p0 h8 P# j6 E2 L) _+ D4 G& ] Google对一些网路上出现频率极高的英文单词,如“i”、“com”、“www”等,以及一些符号如“*”、“。”等,作忽略处理
m: w6 k$ W3 t' |1 d) ]! @6 q( Z( |# @3 Q7 T% {* X! n
可以用+强制搜索 . q2 C$ ~3 c/ u8 s( O, R- w) @
3 N/ `6 E! W: [0 b' ~, O
下面的语句是我搜集来的,大家可以试着用下 1 J, h, D$ Z, b: {; g
8 W4 _3 x. Q2 n. W0 m 比如用Intitle:welcome.to.iis.4.0 IIS4会找到好多winNT的主机,呵呵
! y6 E* X! X& o; r, ~, N% L, W( J, D% l' _
Site:sohu.com
4 Q w$ y3 t+ p+ V* I' @2 Z O+ r4 }; j
; c2 ]) @2 ^4 j' X, S* M y Site:sohu.com-site:www.sohu.com / T9 l7 c+ T0 a5 b
! x# n; `, H) ?# q' z8 s3 v5 ` Intitle:index.of/admin % X3 F: ?& H g- o, }1 y
3 y- c/ x; e- `8 X# N Intitle:index.of apache server.at
" J$ Y( I o$ e g' u) [
$ h( a! a* Z. x) W, s# R Intitle:test.page.for.apache “it workd”
0 o; W# V1 j# H8 P9 D8 {6 F; E- V: m: h$ b
Allintitle:Netscape Fasr Track Server Home Page " T- \% b# z1 M5 K, `- X) t- b/ h
8 Z& Q0 i; K- I- u7 t8 b Intitle:”welcome to windows 2000 internet services” ' t7 k' f+ N- S& p
2 b6 F# U( L0 d/ ?) N
IIS—win2000 / s, r5 y9 }, B0 c T; G% l# ~
5 C) M, a- G( A Allintitle:welcome to windows XP server internet
, A! J8 w( y3 V3 j G% S- X
2 F. h5 u% h: ~0 V9 c6 \ services iis---XP 5 F3 c- Q2 G& ?' K+ }6 x7 h
! D! K& c2 u5 b" d% E m/ U Y9 V
Intitle:welcome.to.iis.4.0 IIS4
J( [2 ]' C/ i$ [ o$ Z, P( }2 u
Allintrtle:”welcome to internet information server”
# J N$ o' E5 s' L: Q6 X6 o( ]1 g. w7 H, V. U; G$ @
IIS-- generic
# w1 F; }! A9 k& X6 @+ `
7 h! `( q! ]* D; T3 g7 K Intitle:”apache http server” 9 g6 d/ J9 F" `1 P, u: \' F/ ?
9 y3 n6 n. N/ E z4 M9 R
Intitle:”documentation”
5 ]! w7 V+ G2 a, z( ?$ _3 D7 b& S( I, ?
Intitle:””error using hypernews””server software”
/ u! L3 Z/ ?4 x
6 p* ~* d L' V2 F1 m/ E# B “HTTP_USER_AGENT=Googlebot” & |$ U; Z' j, j
3 l7 `1 `$ f( e; W/ f8 Q ?; I
“HTTP_USER_AGENT=Googlebot”TNS_ADMIN / Z$ J. p" w0 E, X* D- T
, M+ \: X% U5 X/ H, O ~
Inurl:/admin/login.asp
; Y4 v% q x: |
- c$ L6 f8 `. L$ G+ W- `& ^ Intitle:”remote desktop wen connection” * ]. _- j9 f4 T2 e$ t8 e2 {
: P8 O6 I1 Y/ e' h" q @ “welcome to *” “Your password is *” 2 }# v. e" G D8 L" q6 h
$ N; h" w% S" j% a7 |' A Inurl(browse top_rated power_search hot create_admin_user)+”powered
$ F& Z( o. s) N) n- {1 J. q; I( f5 W& z) A7 e# X) ?
by inde xu”
8 f9 w% Q+ H0 g! ]* q
0 X' |, z* x! y, A% T) n! Q “adding new user” inurl:addnewuser C“there are no
) @# y' d0 ^, [8 p; L7 g& T/ F$ }. o! N
domain” 9 S( S2 _0 i0 Q$ W# b7 N& j1 E8 ?! n5 h
, H* m7 x( O4 K! R8 e
Filetype:log inurl:”password.log”
2 [& o# N2 J, }$ j" U {; O8 H/ n$ L, \5 e- J' C7 k+ _ ^% o# {
Intitle:”PHP Shell *” “enable stderr” filetype:php - J* w$ h4 ~2 c1 ^
( r6 m% i z) \/ `" O Intitle:confixx login password
, Q" b' j( }8 `" r9 U6 r6 L6 V$ P- g" Y9 Y1 d
“powered by rover”
* K9 _$ _! `: y
# P0 Z, w. o# E+ |! d0 I* o! g Inurl:iisadmpwd
/ ~6 @/ q* a2 d! @ @3 O1 |7 u/ m! o# ^/ D8 O, ]* x
Inurl:5800 , |/ T5 I$ l/ p V7 T( q# v/ I9 x
- s0 n1 {) |- U. k! ` “VNC desktop” inurl:5800 % R/ V6 _3 V- ^
/ F# N4 ~* l# T2 r4 m Inurl:webmin inurl:10000
, k( f/ s2 M6 ^; B0 @- {9 ~
: g9 ^% h- j9 E" k8 f: W Inurl:8080 Cintext:8080 " ~3 ]% B% Q( w( a" M' D. @5 j0 M
3 }+ n1 \! S5 E4 T
“access denird for user” “using password” * l% v8 t3 H& t6 V* O
2 Q# Q: v! x( V* {0 N “# Dumping data for table” / U8 N" J+ ?+ I c
( A3 ^" U4 r0 E4 e$ `" R" G “# Dumping data for table” username password
/ ]# N/ {8 ], m9 |' ~
5 ?% d1 v/ L& k “# Dumping data for table 8 J3 `9 J8 e3 Q* A
$ @, ?/ t, a7 \ P (username user users password)”
# H: a, E/ O$ X0 G8 }: I; M3 w$ t! S; m/ i; O$ C
Inurl:main.php welcome to phpmyadmin
$ ^6 K7 Q) I; s! I3 x: C- z+ {1 E2 l
Intitle:”phpmyadmin running on *” welcome to phpmyadmin
w3 [; Y8 c5 L: @
4 I) x: b/ l0 a Filetype:inc intext:mysql connect 2 }! _; Z2 C0 p- S7 w* J; [
8 e- w; y, Y8 o/ d8 A" c
Filetype:sql + “INENTIFIED BY” Ccvs & a- b, C- @2 L, z0 {# L- ?
+ i+ A0 h; E% _- T
Filetype:sql + “INENTIFIED BY” (“grant * on *” “create
2 h* H3 }% V, f* }; w9 G. C
6 c/ [/ ]! z" A7 I user”)
5 Z) j: R# a' W9 U4 w) Y. ]2 i- d V- e2 N$ a) I8 X, m
“this report lists” “identified by internet scaner” . H# e* u' U) h0 F: P
( @) ^! g. h3 ?, |7 B
ACID “by roman danyliw” Filetype HP
# @, J* O' B3 U
; W, q& T2 E% n. X5 t 小提示:用google hacking工具搜索这些,真的是多快好省啊:)
; c: V% R4 o- s" `+ L: p |