1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How to Use Google For Hacking

Discussion in 'Ethical hacking Tips' started by vishal sharma, May 23, 2006.

  1. vishal sharma

    vishal sharma New Member

    Joined:
    Jul 23, 2004
    Messages:
    106
    Likes Received:
    6
    Trophy Points:
    0
    A week or so back i had an e-mail from a friend (FLW) asking me if i had any info on google search tips he was surprised on the amount of info available and open via google...this got me thinking , well i have seen many various search strings in several papers....so i thought i would put them all together on the one page...and up-date as new one are discovered...so if i missed any to be added to the list

    please let me know and i shall add some more....

    *****************************************************************
    WARNING:::I hold no responsibility for what you do via the information supplied here...this is for educational purpose only , use at your own risk you have been warned
    *****************************************************************
    Thanks

    ComSec aka ZSL

    SUMMARY

    Everyone knows google in the security sector...and what a powerful tool it is , just by entering certain search strings you can gain a vast amount of knowledge and information of your chosen target...often revealing sensitive data...this is all down to badly configured systems...brought on by sloppy administration allowing directory indexing and accessing , password files , log entrys , files , paths ,etc , etc

    Search Tips

    so how do we start ?

    The common search inputs below will give you an idea...for instance if you want to search for the an index of "root" in the search box put in exactly as you see it below

    Example 1:

    allintitle: "index of/root"

    Result:

    http://www.google.com/search?hl=en&ie=ISO-8859-1&q=allintitle:+"index+of/root"&btnG=Google+Search

    what it reveals is 2,510 pages that you can possible browse at your will...

    Example 2

    inurl:"auth_user_file.txt"

    http://www.google.com/search?num=10...inurl:"auth_user_file.txt"&btnG=Google+Search

    this result spawned 414 possible files to access

    Here is an actual file retrieved from a site and edited , we know who the admin is and we have the hashes thats a job for JTR (john the ripper)

    txUKhXYi4xeFs|master|admin|Worasit|Junsawang|xxx@xxx|on
    qk6GaDj9iBfNg|tomjang||Bug|Tom|xxx@xxx|on

    with the many variations below it should keep you busy for a long time mixing them reveals many different permutations

    *************************************

    SEARCH PATHS....... more to be added

    *************************************

    "Index of /admin"
    "Index of /password"
    "Index of /mail"
    "Index of /" +passwd
    "Index of /" +password.txt
    "Index of /" +.htaccess
    index of ftp +.mdb allinurl:/cgi-bin/ +mailto

    administrators.pwd.index
    authors.pwd.index
    service.pwd.index
    filetype:config web
    gobal.asax index

    allintitle: "index of/admin"
    allintitle: "index of/root"
    allintitle: sensitive filetype:doc
    allintitle: restricted filetype :mail
    allintitle: restricted filetype:doc site:gov

    inurl:passwd filetype:txt
    inurl:admin filetype:db
    inurl:iisadmin
    inurl:"auth_user_file.txt"
    inurl:"wwwroot/*."

    top secret site:mil
    confidential site:mil

    allinurl: winnt/system32/ (get cmd.exe)
    allinurl:/bash_history

    intitle:"Index of" .sh_history
    intitle:"Index of" .bash_history
    intitle:"index of" passwd
    intitle:"index of" people.lst
    intitle:"index of" pwd.db
    intitle:"index of" etc/shadow
    intitle:"index of" spwd
    intitle:"index of" master.passwd
    intitle:"index of" htpasswd
    intitle:"index of" members OR accounts
    intitle:"index of" user_carts OR user_cart

    ALTERNATIVE INPUTS====================

    _vti_inf.html
    service.pwd
    users.pwd
    authors.pwd
    administrators.pwd
    shtml.dll
    shtml.exe
    fpcount.exe
    default.asp
    showcode.asp
    sendmail.cfm
    getFile.cfm
    imagemap.exe
    test.bat
    msadcs.dll
    htimage.exe
    counter.exe
    browser.inc
    hello.bat
    default.asp\
    dvwssr.dll
    cart32.exe
    add.exe
    index.jsp
    SessionServlet
    shtml.dll
    index.cfm
    page.cfm
    shtml.exe
    web_store.cgi
    shop.cgi
    upload.asp
    default.asp
    pbserver.dll
    phf
    test-cgi
    finger
    Count.cgi
    jj
    php.cgi
    php
    nph-test-cgi
    handler
    webdist.cgi
    webgais
    websendmail
    faxsurvey
    htmlscript
    perl.exe
    wwwboard.pl
    www-sql
    view-source
    campas
    aglimpse
    glimpse
    man.sh
    AT-admin.cgi
    AT-generate.cgi
    filemail.pl
    maillist.pl
    info2www
    files.pl
    bnbform.cgi
    survey.cgi
    classifieds.cgi
    wrap
    cgiwrap
    edit.pl
    perl
    names.nsf
    webgais
    dumpenv.pl
    test.cgi
    submit.cgi
    guestbook.cgi
    guestbook.pl
    cachemgr.cgi
    responder.cgi
    perlshop.cgi
    query
    w3-msql
    plusmail
    htsearch
    infosrch.cgi
    publisher
    ultraboard.cgi
    db.cgi
    formmail.cgi
    allmanage.pl
    ssi
    adpassword.txt
    redirect.cgi
    cvsweb.cgi
    login.jsp
    dbconnect.inc
    admin
    htgrep
    wais.pl
    amadmin.pl
    subscribe.pl
    news.cgi
    auctionweaver.pl
    .htpasswd
    acid_main.php
    access.log
    log.htm
    log.html
    log.txt
    logfile
    logfile.htm
    logfile.html
    logfile.txt
    logger.html
    stat.htm
    stats.htm
    stats.html
    stats.txt
    webaccess.htm
    wwwstats.html
    source.asp
    perl
    mailto.cgi
    YaBB.pl
    mailform.pl
    cached_feed.cgi
    global.cgi
    Search.pl
    build.cgi
    common.php
    show
    global.inc
    ad.cgi
    WSFTP.LOG
    index.html~
    index.php~
    index.html.bak
    index.php.bak
    print.cgi
    register.cgi
    webdriver
    bbs_forum.cgi
    mysql.class
    sendmail.inc
    CrazyWWWBoard.cgi
    search.pl
    way-board.cgi
    webpage.cgi
    pwd.dat
    adcycle
    post-query
    help.cgi

    There are to many people to thank for the bits of information cut and pasted and added to form this paper most have been collected from various forums , txt , doc's etc...like to thank you all, its not intended to rip anyone its just a combo of various search inputs...put on the one Paper to use as a reference.
     
    Last edited by a moderator: Jul 7, 2009
    akelius likes this.
  2. Sgx

    Sgx New Member

    Joined:
    Oct 31, 2006
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    0
    Occupation:
    universitario
    Re: Google...

    wow
     
  3. Sophia01

    Sophia01 New Member

    Joined:
    Dec 5, 2006
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    0
    Re: Google...

    wow
     
  4. gurpreet567345

    gurpreet567345 New Member

    Joined:
    Jan 4, 2007
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    0
    Re: Google...

    wow
     
  5. vishal sharma

    vishal sharma New Member

    Joined:
    Jul 23, 2004
    Messages:
    106
    Likes Received:
    6
    Trophy Points:
    0
    Re: Google...

    Thanx a ton guyz.. i really appreciate u'll for reading these....
     
  6. phreakabit

    phreakabit New Member

    Joined:
    Apr 5, 2007
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    0
  7. Peter_APIIT

    Peter_APIIT New Member

    Joined:
    Apr 11, 2007
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    0
    Occupation:
    Student
    Location:
    Malaysia
    Re: Google...

    It 's a great information. Thanks for your post. I will use/follow it at my own risk.
     
  8. phreakabit

    phreakabit New Member

    Joined:
    Apr 5, 2007
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    0
    Re: Google...

    hi peter it really is some great info have you got any luck yet?
     
  9. Peter_APIIT

    Peter_APIIT New Member

    Joined:
    Apr 11, 2007
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    0
    Occupation:
    Student
    Location:
    Malaysia
    Re: Google...

    I think i doesn't have such luck.

    Bye.
     
  10. phreakabit

    phreakabit New Member

    Joined:
    Apr 5, 2007
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    0
    Re: Google...

    not much luck here either pete
     
  11. Peter_APIIT

    Peter_APIIT New Member

    Joined:
    Apr 11, 2007
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    0
    Occupation:
    Student
    Location:
    Malaysia
    Re: Google...

    That's true. I hope i have better luck next time.
     
  12. phreakabit

    phreakabit New Member

    Joined:
    Apr 5, 2007
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    0
    Re: Google...

    do you know much about programming languages,i think we can work together
     
  13. Peter_APIIT

    Peter_APIIT New Member

    Joined:
    Apr 11, 2007
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    0
    Occupation:
    Student
    Location:
    Malaysia
    Re: Google...

    I only know C and little bit about C++. I classfied myself as advanced beginner. I have program in C less than one and half year.

    Thanks.
     
  14. kiran7

    kiran7 New Member

    Joined:
    Feb 12, 2007
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    0
    Re: Google...

    nice examples out here. we can find some more in google cheat sheet here.
     
  15. Darkness1337

    Darkness1337 New Member

    Joined:
    Mar 15, 2007
    Messages:
    130
    Likes Received:
    1
    Trophy Points:
    0
    Re: Google...

    wow, thts really kwl :D

    keep up the good work :)
     
  16. SpOonWiZaRd

    SpOonWiZaRd Know what you can do.

    Joined:
    May 30, 2007
    Messages:
    747
    Likes Received:
    8
    Trophy Points:
    0
    Occupation:
    Network Engineer/Programmer
    Location:
    South Africa
    Re: Google...

    well I have tried it and it works great!!!

    thanx for your effort.

    Astalavista!
     
  17. Gomez

    Gomez New Member

    Joined:
    Apr 15, 2008
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    0
    Re: Google...

    Yup.
     
  18. faizulhaque

    faizulhaque New Member

    Joined:
    May 23, 2008
    Messages:
    213
    Likes Received:
    3
    Trophy Points:
    0
    Occupation:
    Student
    Location:
    Karachi
    Home Page:
  19. Dean-123

    Dean-123 New Member

    Joined:
    Jul 5, 2007
    Messages:
    19
    Likes Received:
    1
    Trophy Points:
    0
    Re: Google...

    Good job!
     
  20. linuxswan

    linuxswan New Member

    Joined:
    Aug 7, 2008
    Messages:
    43
    Likes Received:
    5
    Trophy Points:
    0
    Re: Google...

    hey watchout before this , excellent findings by the google and ofcourse all other search engines also helps you
     

Share This Page