ตัวอย่างเช่น
“admin account info” filetype:log
!Host=*.* intext:enc_UserPassword=*
ext:pcf
“# -FrontPage-” ext:pwd inurl:(service | authors | administrators |
users) “# -FrontPage-” inurl:service.pwd
“AutoCreate=TRUE
password=*”
“http://*:*@www” domainname
“index of/” “ws_ftp.ini” “parent
directory”
“liveice configuration file” ext:cfg
-site:sourceforge.net
“parent directory” +proftpdpasswd
“Duclassified” -site:duware.com “DUware All Rights reserved”
“duclassmate” -site:duware.com
“Dudirectory” -site:duware.com
“dudownload” -site:duware.com
“Elite Forum Version *.*”
“Link Department”
“sets mode: +k”
“your password is” filetype:log
filetype:config config intext:appSettings “User ID”
filetype:dat
“password.dat”
filetype:dat inurl:Sites.dat
filetype:dat
wand.dat
filetype:inc dbconn
filetype:inc
intext:mysql_connect
filetype:inc mysql_connect OR
mysql_pconnect
filetype:inf sysprep
filetype:ini
inurl:”serv-u.ini”
filetype:ini inurl:flashFXP.ini
filetype:ini
ServUDaemon
filetype:ini wcx_ftp
filetype:ini ws_ftp pwd
filetype:ldb
admin
filetype:log “See `ipsec –copyright”
filetype:log
inurl:”password.log”
filetype:mdb inurl:users.mdb
filetype:mdb
wwforum
filetype:netrc password
filetype:pass pass
intext:userid
filetype:reg reg
+intext:”defaultusername” +intext:”defaultpassword”
filetype:reg reg
+intext:?WINVNC3?
filetype:reg reg HKEY_CURRENT_USER
SSHHOSTKEYS
filetype:sql “insert into” (pass|passwd|password)
filetype:sql
(”values * MD5″ | “values * password” | “values * encrypt”)
filetype:sql
+”IDENTIFIED BY” -cvs
filetype:sql password
filetype:url +inurl:”ftp://”
+inurl:”;@”
filetype:xls username password email
htpasswd
htpasswd /
htgroup
htpasswd / htpasswd.bak
intext:”enable password
7″
intext:”enable secret 5 $”
Web
Wiz Journal”
intitle:”index of” intext:connect.inc
intitle:”index of”
intext:globals.inc
intitle:”Index of” passwords modified
intitle:”Index
of” sc_serv.conf sc_serv content
intitle:”phpinfo()”
+”mysql.default_password” +”Zend Scripting Language Engine”
intitle:dupics
inurladd.asp | default.asp | view.asp | voting.asp)
-site:duware.com
intitle:index.of administrators.pwd
intitle:Index.of etc
shadow
intitle:index.of
intext:”secring.skr”|”secring.pgp”|”secring.bak”
intitle:rapidshare
intext:login
inurl:”calendarscript/users.txt”
inurl:”editor/list.asp” |
inurl:”database_editor.asp” | inurl:”login.asa” “are set”
inurl:”GRC.DAT”
intext:”password”
inurl:”Sites.dat”+”PASS=”
inurl:”slapd.conf”
intext:”credentials” -manpage -”Manual Page” -man: -sample
inurl:”slapd.conf”
intext:”rootpw” -manpage -”Manual Page” -man: -sample
inurl:”wvdial.conf”
intext:”password”
inurl:/db/main.mdb
inurl:/wwwboard
inurl:ccbill
filetype:log
inurl:cgi-bin inurl:calendar.cfg
inurl:chap-secrets
-cvs
inurl:config.php dbuname dbpass
inurl:filezilla.xml
-cvs
inurl:lilo.conf filetype:conf password -tatercounter2000 -bootpwd
-man
inurl:nuke filetype:sql
inurl:ospfd.conf intext:password -sample
-test -tutorial -download
inurl:pap-secrets
-cvs
inurl:pass.dat
inurl:perform filetype:ini
inurl:perform.ini
filetype:ini
inurl:secring ext:skr | ext:pgp | ext:bak
inurl:server.cfg
rcon password
inurl:ventrilo_srv.ini adminpassword
inurl:vtund.conf
intext:pass -cvs
inurl:zebra.conf intext:password -sample -test -tutorial
-download
LeapFTP intitle:”index.of./” sites.ini
modified
master.passwd
สามารถเข้าไปดูเพิ่มเติมได้ที่
.. http://ha.xors.org/hacking-tutorials/hacking-google/#content
ทางที่ดีเราควรสร้าง file robot.txt แล้ว disallow file หรือ directoryที่สำคัญๆ เอาไว้
เช่น
User-agent: *
Disallow: /admin
Disallow:
/config
Disallow: /data
