allinurl: “proxylist.txt”
allinurl: “proxy.txt”
“index of/root”
“auth_user_file.txt”
“index of/root”
“Index of /admin”
“Index of /password”
“Index of /mail”
“Index of /” +passwd
“Index of /” +password.txt
“Index of /” +.htaccess
index of ftp +.mdb allinurl:/cgi-bin/ +mailto
administrators.pwd.index
authors.pwd.index
service.pwd.index
filetype:config web
gobal.asax index
allintitle: “index of/admin”
allintitle: “index of/root”
allintitle: sensitive filetype oc
allintitle: restricted filetype :mail
allintitle: restricted filetype oc site:gov
for IIS server exlpoit
allinurl: winnt/system32/
and u’ll get many IIS server exploitsú
intitle:r57shell
intitle:”Index of” .sh_history
intitle:”Index of” .bash_history
intitle:”index of” passwd
intitle:”index of” people.lst
intitle:”index of” pwd.db
intitle:”index of” etc/shadow
intitle:”index of” spwd
intitle:”index of” master.passwd
intitle:”index of” htpasswd
intitle:”index of” members OR accounts
intitle:”index of” user_carts OR user_cart
_vti_inf.html
service.pwd
users.pwd
authors.pwd
administrators.pwd
shtml.dll
shtml.exe
fpcount.exe
default.asp
showcode.asp
sendmail.cfm
getFile.cfm
imagemap.exe
test.bat
msadcs.dll
htimage.exe
counter.exe
browser.inc
hello.bat
default.asp\
dvwssr.dll
cart32.exe
add.exe
index.jsp
SessionServlet
glimpse
man.sh
AT-admin.cgi
AT-generate.cgi
inurl:/adpassword.txt
inurl:admin.dat
and even for shop sites:
inurl:/shop/db/
intitle:”index of/ shop” +db
intitle:”index of/” +shopping_cart
“Index of /admin”
“Index of /password”
“Index of /mail”
“Index of /” +passwd
“Index of /” +password.txt
“Index of /” +.htaccess
index of ftp +.mdb allinurl:/cgi-bin/ +mailto
administrators.pwd.index
authors.pwd.index
service.pwd.index
filetype:config web
gobal.asax index
allintitle: “index of/admin”
allintitle: “index of/root”
allintitle: sensitive filetype:doc
allintitle: restricted filetype :mail
allintitle: restricted filetype:doc site:gov
inurlasswd filetype:txt
inurl:admin filetype:db
inurl:iisadmin
inurl:”auth_user_file.txt”
inurl:”wwwroot/*.”
top secret site:mil
confidential site:mil
allinurl: winnt/system32/ (get cmd.exe)
allinurl:/bash_history
intitle:”Index of” .sh_history
intitle:”Index of” .bash_history
intitle:”index of” passwd
intitle:”index of” people.lst
intitle:”index of” pwd.db
intitle:”index of” etc/shadow
intitle:”index of” spwd
intitle:”index of” master.passwd
intitle:”index of” htpasswd
intitle:”index of” members OR accounts
intitle:”index of” user_carts OR user_cart
Ìíîãèå àäìèíû îñòàâëÿþò îòêðûòûìè òàêèå äèðåêòîðèè:
Öèòàòà:/orders
/Order
/Orders
/order
/config
/Admin_files
/mall_log_files
/PDG_Cart
PDG_Cart/order.log
PDG_Cart/shopper.conf
/pw
/store/customers
/store/temp_customers
/WebShop
/webshop
/WebShop/templates
/WebShop/logs
/cgi/PDG_Cart/order.log
/PDG_Cart/authorizenets.txt
/cgi-bin/PDG_Cart/mc.txt
/PDG/order.txt
/cgi-bin/PDG_cart/card.txt
/PDG_Cart/shopper.conf
/php/mlog.phtml
/php/mylog.phtml
/webcart/carts
/cgi-bin/orders.txt
/WebShop/logs
/cgi-bin/AnyForm2
/cgi-bin/mc.txt
/ccbill/secure/ccbill.log
/cgi-bin/orders/mc.txt
/WebCart/orders.txt
/cgi-bin/orders/cc.txt
/cvv2.txt
/cgi-bin/orderlog.txt
/WebShop/logs
/orderb/shop.mdb
/_private/shopping_cart.mdb
/scripts/iisadmin/tools/mkilog.exe
/cool-logs/mylog.html
/cool-logs/mlog.html
/easylog/easylog.html
/HyperStat/stat_what.log
/mall_log_files/
/scripts/weblog
/super_stats/access_logs
/trafficlog
/wwwlog
/Admin_files/order.log
/bin/orders/orders.txt
/cgi/orders/orders.txt
/cgi-bin/orders/orders.txt
/cgi-sys/orders/orders.txt
/cgi-local/orders/orders.txt
/htbin/orders/orders.txt
/cgibin/orders/orders.txt
/cgis/orders/orders.txt
/scripts/orders/orders.txt
/cgi-win/orders/orders.txt
/bin/pagelog.cgi
/cgi/pagelog.cgi
/cgi-bin/pagelog.cgi
/cgi-sys/pagelog.cgi
/cgi-local/pagelog.cgi
/cgibin/pagelog.cgi
/cgis/pagelog.cgi
/scripts/pagelog.cgi
/cgi-win/pagelog.cgi
/bin/DCShop/auth_data/auth_user_file.txt
/cgi/DCShop/auth_data/auth_user_file.txt
/cgi-bin/DCShop/auth_data/auth_user_file.txt
/cgi-sys/DCShop/auth_data/auth_user_file.txt
/cgi-local/DCShop/auth_data/auth_user_file.txt
/htbin/DCShop/auth_data/auth_user_file.txt
/cgibin/DCShop/auth_data/auth_user_file.txt
/cgis/DCShop/auth_data/auth_user_file.txt
/scripts/DCShop/auth_data/auth_user_file.txt
/cgi-win/DCShop/auth_data/auth_user_file.txt
/bin/DCShop/orders/orders.txt
/cgi/DCShop/orders/orders.txt
/cgi-bin/DCShop/orders/orders.txt
/cgi-sys/DCShop/orders/orders.txt
/cgi-local/DCShop/orders/orders.txt
/htbin/DCShop/orders/orders.txt
/cgibin/DCShop/orders/orders.txt
/cgis/DCShop/orders/orders.txt
/scripts/DCShop/orders/orders.txt
/cgi-win/DCShop/orders/orders.txt
/dc/auth_data/auth_user_file.txt
/dcshop/orders/orders.txt
/dcshop/auth_data/auth_user_file.txt
/dc/orders/orders.txt
/orders/checks.txt
/orders/mountain.cfg
/cgi-bin/shopper.cgi&TEMPLATE=ORDER.LOG
/webcart/carts
/webcart-lite/orders/import.txt
/webcart/config
/webcart/config/clients.txt
/webcart/orders
/webcart/orders/import.txt
/WebShop/logs/cc.txt
/WebShop/templates/cc.txt
/bin/shop/auth_data/auth_user_file.txt
/cgi/shop/auth_data/auth_user_file.txt
/cgi-bin/shop/auth_data/auth_user_file.txt
/cgi-sys/shop/auth_data/auth_user_file.txt
/cgi-local/shop/auth_data/auth_user_file.txt
/htbin/shop/auth_data/auth_user_file.txt
/cgibin/shop/auth_data/auth_user_file.txt
/cgis/shop/auth_data/auth_user_file.txt
/scripts/shop/auth_data/auth_user_file.txt
/cgi-win/shop/auth_data/auth_user_file.txt
/bin/shop/orders/orders.txt
/cgi/shop/orders/orders.txt
/cgi-bin/shop/orders/orders.txt
/cgi-sys/shop/orders/orders.txt
/cgi-local/shop/orders/orders.txt
/htbin/shop/orders/orders.txt
/cgibin/shop/orders/orders.txt
/cgis/shop/orders/orders.txt
/scripts/shop/orders/orders.txt
/cgi-win/shop/orders/orders.txt
/bin/shop.pl/page=;cat%20shop.pl
/cgi/shop.pl/page=;cat%20shop.pl
/cgi-bin/shop.pl/page=;cat%20shop.pl
/cgi-sys/shop.pl/page=;cat%20shop.pl
/cgi-local/shop.pl/page=;cat%20shop.pl
/htbin/shop.pl/page=;cat%20shop.pl
/cgibin/shop.pl/page=;cat%20shop.pl
/cgis/shop.pl/page=;cat%20shop.pl
/scripts/shop.pl/page=;cat%20shop.pl
/cgi-win/shop.pl/page=;cat%20shop.pl
/bin/cart.pl
/cgi/cart.pl
/cgi-bin/cart.pl
/cgi-sys/cart.pl
/cgi-local/cart.pl
/htbin/cart.pl
/cgibin/cart.pl
/scripts/cart.pl
/cgi-win/cart.pl
/cgis/cart.pl
/bin/cart.pl
/cgi/cart.pl
/cgi-bin/cart.pl
/cgi-sys/cart.pl
/cgi-local/cart.pl
/htbin/cart.pl
/cgibin/cart.pl
/cgis/cart.pl
/scripts/cart.pl
/cgi-win/cart.pl
/bin/cart32.exe
/cgi/cart32.exe
/cgi-bin/cart32.exe
/cgi-sys/cart32.exe
/cgi-local/cart32.exe
/htbin/cart32.exe
/cgibin/cart32.exe
/cgis/cart32.exe
/scripts/cart32.exe
/cgi-win/cart32.exe
/cgi-bin/www-sql;;;
/server%20logfile;;;
/cgi-bin/pdg_cart/order.log
/cgi-bin/shopper.exe?search
/orders/order.log
/orders/import.txt
/orders/checks.txt
/orders/orders.txt
/Orders/order.log
/order/order.log
/WebShop/logs/ck.log
/WebShop/logs/cc.txt
/WebShop/templates/cc.txt
/_private/orders.txt
â
ýòèõ äèðåêòîðèÿõ ìû çà ÷àñòóþ ìîæåì íàéòè òàêèå ôàéëû êàê
Öèòàòà:orders.txt
order.txt
import.txt
checks.txt
order_log
order.log
orders.log
orders_log
log_order
log_orders
temp_order
temp_orders
order_temp
robots.txt
admin.mdb
user_file.txt
comment:advisories and vulnerabilities*—–
“1999-2004 FuseTalk Inc” -site:fusetalk.com
“2003 DUware All Rights Reserved”
“Active Webcam Page” inurl:8080
“BlackBoard 1.5.1-f | © 2003-4 by Yves Goergen”
“BosDates Calendar System ” “powered by BosDates v3.2 by BosDev”
“Copyright © 2002 Agustin Dondo Scripts”
“delete entries” inurl:admin/delete.asp
“driven by: ASP Message Board”
“Enter ip” inurl:”php-ping.php”
“IceWarp Web Mail 5.3.0″ “Powered by IceWarp”
“Ideal BB Version: 0.1″ -idealbb.com
“inurl:/site/articles.asp?idcategory=”
“Obtenez votre forum Aztek” -site:forum-aztek.com
“Online Store - Powered by ProductCart”
“Powered *: newtelligence” (”dasBlog 1.6″| “dasBlog 1.5″| “dasBlog 1.4″|”dasBlog 1.3″)
“Powered by A-CART”
“Powered by AJ-Fork v.167″
“powered by antiboard”
“Powered by Coppermine Photo Gallery”
“Powered by CubeCart”
“Powered by DCP-Portal v5.5″
“Powered by DMXReady Site Chassis Manager” -site:dmxready.com
“Powered by FUDforum”
“Powered by Gallery v1.4.4″
“Powered by IceWarp Software” inurl:mail
“Powered by Ikonboard 3.1.1″
“Powered by Megabook *” inurl:guestbook.cgi
“Powered by MercuryBoard [v1"
"powered by minibb" -site:[??? ????????? ?????? ?????? ????? ??????????????????] -intext:1.7f
“Powered by My Blog” intext:”FuzzyMonkey.org”
“Powered by ocPortal” -demo -ocportal.com
“powered by phpWebSite” 0.9-3-2…4
“Powered by PowerPortal v1.3″
“powered by vbulletin 3.0″
“Powered by WordPress” -html filetype:php -demo -wordpress.org -bugtraq
“Powered by WowBB” -site:wowbb.com
“Powered by YaPig V0.92b”
“Powered by yappa-ng”
“running: Nucleus v3.1″ -.nucleuscms.org -demo
“SquirrelMail version 1.4.4″ inurl:src ext:php
“This page has been automatically generated by Plesk Server Administrator”
+”Powered by Invision Power Board v2.0.0..2″
+”Powered by phpBB 2.0.6..10″ -phpbb.com -phpbb.pl
inurl:”dispatch.php?atknodetyp e” | inurl:class.at —–Achievo webbased project management—–
allintitle:aspjar.com guestbook
inurl:”/becommunity/community/index.php?pageurl=” —–E-market remote code execution—–
inurl:custva.asp —–EarlyImpact Productcart—–
ext:php intext:”Powered by phpNewMan Version”
ext:pl inurl:cgi intitle:”FormMail *” -”*Referrer” -”* Denied” -sourceforge -error -cvs -input
filetype:cgi inurl:nbmember.cgi
filetype:cgi inurl:pdesk.cgi
filetype:cgi inurl:tseekdir.cgi
filetype:php inurl:index.php inurl:”module=subjects” inurl:”func=*” (listpages| viewpage | listcat)
intext”UBB.threads™ 6.2″|”UBB.threads™ 6.3″) intext:”You * not logged *” -site:ubbcentral.com
intitle:”EMUMAIL - Login” “Powered by EMU Webmail”
intitle:”MRTG/RRD” 1.1* (inurl:mrtg.cgi | inurl:14all.cgi |traffic.cgi)
intitle:”View Img” inurl:viewimg.php
intitle:”WebJeff - FileManager” intext:”login” intext:Pass|PAsse
intitle:”WordPress > * > Login form” inurl:”wp-login.php”
intitle:guestbook “advanced guestbook 2.2 powered”
intitle:welcome.to.horde
inurl:”/cgi-bin/loadpage.cgi?user_id=”
inurl:”/site/articles.asp?idcategory=”
inurl:”comment.php?serendipity “
inurl:”messageboard/Forum.asp?”
inurl:”slxweb.dll”
inurl:/SiteChassisManager/
inurl:cal_make.pl
inurl:citrix/metaframexp/default/login.asp? ClientDetection=On
inurl:comersus_message.asp
inurl:directorypro.cgi
inurl:gotoURL.asp?url=
inurl:technote inurl:main.cgi*filename=*
inurl:ttt-webmaster.php
inurl:wiki/MediaWiki
“Powered by Invision Power Board(U) v1.3 Final” —–Invision Power Board SSI.PHP SQL Injection—–
“Powered by mnoGoSearch - free web search engine software” —–nGoSearch vulnerability—–
“FC Bigfeet” -inurl:mail —–Quicksite demopages for Typo3—–
inurl:com_remository —–ReMOSitory module for Mambo—–
uploadpics.php?did= -forumintext:Generated.by.phpix .1.0? inurl:$mode=album
“Powered by: vBulletin * 3.0.1″ inurl:newreply.php —–vBulletin version 3.0.1 newreply.php XSS—–
filetype:asp inurl:”shopdisplayproducts.asp ” —–VP-ASP Shopping Cart XSS—–
inurl:/cgi-bin/index.cgi inurl:topics inurl:viewcat= +intext:”WebAPP” -site:web-app.org —–WebAPP directory traversal—–
“FrontPage-” inurl:service.pwd
” Dumping data for table”
“phpMyAdmin MySQL-Dump” filetype:txt
“1999-2004 FuseTalk Inc” -site:fusetalk.com
“4images Administration Control Panel”
“ASP.NET_SessionId” “data source=”
“Active Webcam Page” inurl:8080
“AnWeb/1.42h” intitle:index.of
“BlackBoard 1.5.1-f | © 2003-4 by Yves Goergen”
“CERN httpd 3.0B (VAX VMS)”
“Certificate Practice Statement” inurlPDF | DOC)
“Copyright (c) Tektronix, Inc.” “printer status”
“Enter ip” inurl:”php-ping.php”
“FC Bigfeet” -inurl:mail
“File Upload Manager v1.3″ “rename to”
“HTTP_FROM=googlebot” googlebot.com “Server_Software=”
“IMail Server Web Messaging” intitle:login
“Ideal BB Version: 0.1″ -idealbb.com
“Incorrect syntax near”
“Index of /backup”
“Index of” rar r01 nfo Modified 2004
“Internal Server Error” “server at”
“JRun Web Server” intitle:index.of
“Login to Usermin” inurl:20000
“MaXX/3.1″ intitle:index.of
“Microsoft (R) Windows * (TM) Version * DrWtsn32 Copyright (C)” ext:log
“Microsoft-IIS/* server at” intitle:index.of
“Microsoft-IIS/5.0 server at”
“More Info about MetaCart Free”
“Netware * Home” inurl:nav.html
“Network Vulnerability Assessment Report”
“OPENSRS Domain Management” inurl:manage.cgi
“ORA-00933: SQL command not properly ended”
“ORA-12541: TNS:no listener” intitle:”error occurred”
“OmniHTTPd/2.10″ intitle:index.of
“OpenSA/1.0.4″ intitle:index.of
“Phaser 6250″ “Printer Neighborhood” “XEROX CORPORATION”
“Phaser® 740 Color Printer” “printer named: “
“Phorum Admin” “Database Connection” inurl:forum inurl:admin
“Powered *: newtelligence” (”dasBlog 1.6″| “dasBlog 1.5″| “dasBlog 1.4″|”dasBlog 1.3″)
“Powered by A-CART”
“Powered by Coppermine Photo Gallery”
“Powered by DCP-Portal v5.5″
“Powered by Duclassified” -site:duware.com
“Powered by Dudirectory” -site:duware.com
“Powered by Gallery v1.4.4″
“Powered by Ikonboard 3.1.1″
“Powered by Invision Power File Manager” (inurl:login.php) | (intitle:”Browsing directory /” )
“Powered by Link Department”
“Powered by MercuryBoard [v1"
"Powered by PHPFM" filetype:php -username
"Powered by WordPress" -html filetype:php -demo -wordpress.org -bugtraq
"Powered by YaPig V0.92b"
"Powered by ocPortal" -demo -ocportal.com
"Powered by yappa-ng"
"Red Hat Secure/2.0"
"Request Details" "Control Tree" "Server Variables"
"Select a database to view" intitle:"filemaker pro"
"SquirrelMail version 1.4.4" inurl:src ext:php
"Supplied argument is not a valid MySQL result resource"
"Switch to table format" inurl:table|plain
"SysCP - login"
"The script whose uid is " "is not allowed to access"
"This file was generated by Nessus"
"This page has been automatically generated by Plesk Server Administrator"
"This report was generated by WebLog"
"Unclosed quotation mark before the character string"
"VNC Desktop" inurl:5800
"Warning: Cannot modify header information - headers already sent"
"Warning: pg_connect(): Unable to connect to PostgreSQL server: FATAL"
allinurl:/examples/jsp/snp/snoop.jsp
allinurl:index.htm?cus?audio
allinurl:install/install.php
allinurl:intranet admin
allinurl:servlet/SnoopServlet
axis storpoint "file view" inurl:/volumes/
buddylist.blt
camera linksys inurl:main.cgi
comment:Files containing juicy info***]
comment:Files containing usernames
comment:Pages containing login portals
comment:Sensitive Directories***]
comment:Various online devices
comment:Vulnerable servers
comment:advisories and vulnerabilities
data filetype:mdb -site:gov -site:mil
databasetype. Code : 80004005. Error Description
e-mail address filetype:csv csv
eggdrop filetype:user user
etc (index.of)
ext:asp inurlUgallery intitle:”3.0″ -site:dugallery.com -site:duware.com
ext:asp inurl:pathto.asp
ext:cgi intext:”nrg-” ” This web page was created on “
ext:cgi inurl:editcgi.cgi inurl:file=
ext:cgi inurl:ubb6_test.cgi
ext:conf inurl:rsyncd.conf -cvs -man
ext:gho gho
ext:ini eudora.ini
ext:ini intext:env.ini
ext:ldif ldif
ext:log “Software: Microsoft Internet Information Services *.*”
ext:mdb inurl:*.mdb inurl:fpdb shop.mdb
ext:nsf nsf -gov -mil
ext:php intext:”Powered by phpNewMan Version”
ext:pl inurl:cgi intitle:”FormMail *” -”*Referrer” -”* Denied” -sourceforge -error -cvs -input
ext:reg “username=*” putty
ext:txt inurl:dxdiag
ext:vmx vmx
ezBOO “Administrator Panel” -cvs
filetype:QDF QDF
filetype:asp “Custom Error Message” Category Source
filetype:asp DBQ=” * Server.MapPath(”*.mdb”)
My blog is worth $0.00.
How much is your blog worth?
