Google 黑客搜索技巧

站内搜索地址为
http.google.customdomas=（这里写我们要搜索的站点，比如feelids.）
进去可以选择和feelids.， 再选我们要的站内搜索哦！
黑客专用信息和资料搜索地址为
http.google.customhl=xx-hacker
这里是google关键字的用法，要设置它为中文，则是
http.google.customhl=zh-CN
英文则是http.google.customhl=en 常用的google关键字
foo1 foo2 (也就是关联，比如搜索xx公司 xx美女)
operatorfoo
filetype123 类型
sitefoo. 相对直接看网站更有意思，可以得到许多意外的信息
textfoo
title fooltitle 标题哦
allurlfoo 搜索xx网站的所有相关连接。（踩点必备）
lksfoo 不要说就知道是它的相关链接
alltiltefoo. 我们可以辅助- 来调整搜索的精确程度 直接搜索密码(引号表示为精确搜索)
我们可以再延伸到上面的结果里进行二次搜索
dex of htpasswd passwd
filetypexls username password email
ws_ftp.log
config.php
allurladm mdb
service filetypepwd ....或者某个比如pcanywhere的密码后缀cif等 越来越有意思了，再来点更敏感信息
robots.txt Disallow filetypetxt
url_vti_f (FrontPage的关键索引啦，扫描器的CGI库一般都有地)
allurl msadcSamplesselectorshowcode.asp
......passwd
examplesjspsnpsnoop.jsp
phpsysfo
titledex of adm
titledocumetation
url 5800(vnc的端口)或者desk port等多个关键字检索
webm port 10000
urladmlog.asp
textPowered by GBook365
titlephp shell Enable stderr filetypephp 直接搜索到phpwebshell foo. filetypec ipsec filetypeconf
tilteerror ourred ODBC request Where (selectsert) 说白了就是说，可以直接试着查查数据库检索，针对目前流行的sql注射，会发达哦
titlephp shell Enable stderr filetypephp
Dumpg data for table username password
titleError usg Hypernews
Server Software
titleHTTP_USER_AGENT=Googlebot
HTTP_USER_ANGET=Googlebot THS ADMIN
filetype.doc site.mil classified 直接搜索军方相关word 检查多个关键字
titleconfig confixx log password mydoma. nessus report
report generated by
ipconfig
wipconfig google缓存利用（hoho，最有影响力的东西）推荐大家搜索时候多选搜索所有网站
特别推荐admistrator users 等相关的东西，比如名字，生日等……最惨也可以拿来做字典嘛
cachefoo. 可以查阅类似结果 先找找网站的管理后台地址
sitexxxx. text管理
sitexxxx. urllog
sitexxxx. title管理
sitea2.xxxx. urlfile
sitea3.xxxx. urlload
sitea2.xxxx. textftp
sitea2.xxxx. filetypeasp
sitexxxx. 得到N个二级域名
sitexxxx. text@xxxx. 得到N个邮件地址，还有邮箱的主人的名字什么的
sitexxxx. text电话 N个电话
titledex of etc
titleIndex of .sh_history
titleIndex of .bash_history
titledex of passwd
titledex of people.lst
titledex of pwd.db
titledex of etcshadow
titledex of spwd
titledex of master.passwd
titledex of htpasswd
# -FrontPage- urlservice.pwd allurlbbs data
filetypemdb urldatabase
filetypec conn
urldata filetypemdb
titledex of data
3) http@ domaname 找一些ISP站点，可以查对方ip的虚拟主机 4) auth_user_file.txt 不实用了，太老了 5) The Master List 寻找邮件列表的 6) titlewele.to.squeezebox 一种特殊的管理系统，默认开放端口90 7) passlist.txt (a better way) 字典 8) A syntax error has ourred filetypeihtml 9) extphp program_listg titleMythWeb.Program.Listg 10) titledex.of abyss.conf 11)extnbe nbe 12)titleSWW lk Please wait..... 14) titleFreifunk.Net - Status -sitemando.de 15) titleWorldClient text (20032004) Alt-N Technologies. 17) titleopen-xchange urllog.pl 20) titlesite admistration please log site designed by emarketsouth 21) orA-00921 unexpected end of SQL mand 22)titleYALA Yet Another LDAP Admistrator 23)wele.to phpqladm Please log -cvsweb 24)titleSWW lk Please wait..... 25)urlport_255 -htm 27)titleWorldClient text (20032004) Alt-N Technologies. 这些是新的一些漏洞技巧，在0days公告公布 extphp program_listg titleMythWeb.Program.Listg urlpreferences.i [emule] titleIndex of CFIDE admistrator aess denied for user usg password extphp textPowered by phpNewMan Version 可以看到pathtonewsbrowse.phpclang=............fileiwant urlbemunitymunitydex.phppageurl= titleASP FileMan Resend -siteiisworks. Enter ip urlphp-pg.php extconf urlrsyncd.conf -cvs -man title private, protected, secret, secure, wnt titleDocuShare urldocusharedsweb -faq -gov -edu
#mysql dump filetypesql allow_call_time_pass_reference PATH_INFO Certificate Practice Statement url(PDF DOC) LeapFTP titledex.of. sites.i modified
master.passwd mysql history files
NickServ registration passwords
passlist
passlist.txt (a better way)
passwd
passwd etc (reliable)
people.lst
psyBNC config files
pwd.db
sign filetypeurl
spwd.db passwd
trillian.i
board WebAdm urlpasswd.txt boardwebadm # -FrontPage- extpwd url(service authors admistrators users) # -FrontPage- urlservice.pwd
AutoCreate=TRUE password=
http@ domaname
dex of ws_ftp.i parent directory
liveice configuration file extcfg -sitesourcefe.
powered by ducalendar -siteduware.
Powered by Duclassified -siteduware.
Powered by Duclassified -siteduware. DUware All Rights reserved
powered by duclassmate -siteduware.
Powered by Dudirectory -siteduware.
powered by dudownload -siteduware.
Powered By Elite Forum Version .
Powered by Lk Department
sets mode k
Powered by DUpaypal -siteduware.
allurl adm mdb
auth_user_file.txt
config.php
eggdrop filetypeuser user
etc (dex.of)
exti eudora.i
exti Version=... password
exttxt urlunattend.txt filetypebak urlhtaesspasswdshadowhtusers filetypecfg mrtg target -sample -cvs -example filetypecfm cfapplication name password filetypeconf oekakibbs
filetypeconf sc_serv.conf filetypeconf slapd.conf filetypeconfig config textappSettgs User ID filetypedat password.dat filetypedat wand.dat filetypec dbconn filetypec textmysql_connect
filetypec mysql_connect or mysql_pconnect filetypef sysprep filetypei urlserv-u.i
filetypei urlflashFXP.i
filetypei ServUDaemon
filetypei wcx_ftp
filetypei ws_ftp pwd filetypeldb adm filetypelog See `ipsec copyright filetypelog urlpassword.log filetypemdb urlusers.mdb filetypemdb wwforum filetyperc password filetypepass pass textuserid filetypepem textprivate filetypeproperties urldb textpassword filetypepwd service
filetypepwl pwl filetypereg reg textdefaultusername textdefaultpassword
filetypereg reg HKEY_CURRENT_USER SSHHOSTKEYS
filetypesql (values MD values password values encrypt)
filetypesql (passwd values password values pass values )
filetypesql IDENTIFIED BY -cvs
filetypesql password filetypeurl urlftp url;@ filetypexls username password email htpasswd
htpasswd htgroup
htpasswd htpasswd.bak textenable secret $
textpowered by Web Wiz Journal titledex of textconnect.c
titledex of textglobals.c
titleIndex of passwords modified titledupics url(add.asp default.asp view.asp votg.asp) -siteduware. titledex.of textsecrg.skrsecrg.pgpsecrg.bak urlGRC.DAT textpassword urlslapd.conf textcredentials -manpage -Manual Page -man -sample urlslapd.conf textrootpw -manpage -Manual Page -man -sample urlwvdial.conf textpassword urldbma.mdb urlchap-secrets -cvs urlconfig.php dbuname dbpass
urlfilezilla.xml -cvs urllilo.conf filetypeconf password -tatercounter -bootpwd -man urlnuke filetypesql urlospfd.conf textpassword -sample -test -tutorial -download 路由配置
urlpap-secrets -cvs urlperform filetypei
urlsecrg extskr extpgp extbak urlvtund.conf textpass -cvs urlzebra.conf textpassword -sample -test -tutorial -download Generated by phpSystem
generated by stat Host Vulnerability Summary Report ] HTTP_FROM=googlebot googlebot. Server_Software= Index of chatlogs 聊天室
Installed Objects Scanner urldefault.asp Mecury Version Infastructure Group
Microsoft (R) Wdows (TM) Version DrWtsn Copyright (C) extlog Most Submitted Forms and Scripts this section Network Vulnerability Assessment Report not for distribution confidential
phone address e-mail titlecurriculum vitae phpMyAdm runng on urlma.php produced by getstats
Request Details Control Tree Server Variables
robots.txt Disallow filetypetxt Runng Child mode sets mode p
sets mode s
Thank you for your order receipt
This is a Shareaza Node
This report was generated by WebLog
( filetypemail filetypeeml filetypembox filetypembx ) textpasswordsubject (urlrobot.txt urlrobots.txt ) textdisallow filetypetxt -sitephp. -The PHP Group urlsource urlurl extpHp FBR ADOBE PHOTOSHOP
AIM buddy lists
allurlexamplesjspsnpsnoop.jsp
allurlservletSnoopServlet
cgiirc.conf data filetypemdb -sitegov -sitemil exported email addresses extasp urlpathto.asp extcgi urleditcgi.cgi urlfile= extconf urlrsyncd.conf -cvs -man
extconf NoCatAuth -cvs extdat bpk.dat
extgho gho exti textenv.i
extldif ldif extlog Software Microsoft Inter Information Services .
--------------------------
extmdb url.mdb urlfpdb shop.mdb filetypebkf bkf
filetypeblt buddylist
filetypeblt blt textscreenname filetypecfg auto_st.cfg filetypeconf urlfirewall -titlecvs
filetypeconfig web.config -CVS filetypectt ctt messenger filetypefp fp
filetypefp fp -sitegov -sitemil -cvs log filetypef urlcapolicy.f
filetypelic lic textkey filetypemyd myd -CVS
filetypens ns
filetypeora ora
filetypeora tnsnames
filetypepdb pdb backup (Pilot Pluckerdb) filetypepot urljohn.pot
----------------------------------------
filetypepst urloutlook.pst
filetypepst pst -from -to -date
filetypeqbb qbb
filetyperdp rdp filetypereg Termal Server Client
filetypevcs vcs
filetypewab wab filetypexls -sitegov urlcontact
filetypexls urlemail.xls
Fancial spreadsheets fance.xls
Fancial spreadsheets fances.xls Ganglia Cluster Reports haess.ctl (one way)
haess.ctl (VERY reliable)
ICQ chat logs, please... iletypelog cron.log
textSession Start filetypelog
textTobias Oetiker traffic analysis text(password passcode) text(username userid user) filetypecsv
textgmail vite texthttpgmail.google.gmaila textSQLiteManager urlma.php titleApacheStatus (urlserver-status urlstatus.html urlapache.html) titleAppServ Open Project -site.appservwork.
titleASP Stats Generator . ASP Stats Generator - weppos titleFTP root at
titledex of myd size titleIndex Of -urlmaillog maillog size titleIndex Of cookies.txt size titledex of mysql.conf or mysql_config
titleIndex of upload size parent directory titledex.of .diz .nfo last modified
titleMultimon UPS status page
titlePHP Advanced Transfer (urldex.php urlshowrecent.php )
titlePhpMyExplorer urldex.php -cvs
---------------------------------------------------------------------
titlestatistics of advanced web statistics
titleSystem Statistics System and Network Information Center
titleUsage Statistics for Generated by Webalizer
titlewbem paq log Compaq Information Technologies Group titleWeb Server Statistics for
titleweb server status SSH Tel
titlewele.to.squeezebox titleadm titlelog
titledex.of Apache server at
titledex.of cleanup.log
titledex.of dead.letter
titledex.of box
titledex.of box dbx titletra urltra textphone
urlaxsax-adm.pl -script
urlcricketgrapher.cgi
urlbookmark.htm urlcacti urlgraph_view.php Settgs Tree View -cvs -RPM
urlnewsletteradm
urlnewsletteradm titlenewsletter adm
urlputty.reg
urlsmb.conf textworkgroup filetypeconf conf
---------------------------------------------------------------------------------------------------------- Wele to n! addg new user urladdnewuser -there are no domas
(urlcgi-b.cobalt) (textWele to the Cobalt RaQ) filetypephp HAXPLORER Server Files Browser
titleWeb Data Admistrator - Log urlConnectComputerprecheck.htm urlRemotelogon.aspx
PHP Shell (unprotected)
PHPKonsole PHPShell filetypephp -echo
Public PHP FileManagers dex of picasa.i
dex of urlrecycler
Index of rar r nfo Modified
titleIndex.Of stats merchant cgi- etc
Powered by Invision Power File Manager (urllog.php) (titleBrowsg directory )
Web File Browser Use regular expression filetypei Desk.i textmydocs.dll textd.aspxid urld.aspxid
textPowered By TotalIndex titleTotalIndex
titlealbum permissions Users who can modify photos EVERYBODY
titleDirectory Listg For textTomcat -titleTomcat
titleHFS HttpFileServer
titleIndex of urlmy shared folder size modified
------------------------------------------------------------------------------------------------------------------- File Upload Manager v. rename to extasp powered by DUForum url(messagesdetailslogdefaultregister) -siteduware.
extasp urlDUgallery title. -sitedugallery. -siteduware.
extcgi urlubb_test ezBOO Admistrator Panel -cvs filetypecgi urlcachemgr.cgi
filetypef my.f -cvs -example
filetypec c textsetcookie filetypephp urlviewfile -dex.php -idfil
filetypewsdl wsdl titleASP FileMan Resend -siteiisworks. titleIndex of modified php.exe titlephpremoteview filetypephp Name, Size, Type, Modify url WWWADMIN.PL titleadm
urlnph-proxy.cgi Start browsg through this CGI-based proxy
urlplogregister.php
urlcgi.asxStoreID urlrobpoll.cgi filetypecgi The Master List More Info about MetaCart Free