一些技巧集合： 

3) "http://*:*@www" domainname 找一些ISP站点，可以查对方ip的虚拟主机 

4) auth_user_file.txt 不实用了，太老了 

5) The Master List 寻找邮件列表的 

6) intitle:"welcome.to.squeezebox" 一种特殊的管理系统，默认开放端口90 

7) passlist.txt (a better way) 字典 

8) "A syntax error has occurred" filetype:ihtml 

9) ext:php program_listing intitle:MythWeb.Program.Listing 

10) intitle:index.of abyss.conf 

11)ext:nbe nbe 

12)intitle:"SWW link" "Please wait....." 

14) intitle:"Freifunk.Net - Status" -site:commando.de 

15) intitle:"WorldClient" intext:"? (2003|2004) Alt-N Technologies." 

17) intitle:open-xchange inurl:login.pl 

20) intitle:"site administration: please log in" "site designed by emarketsouth" 

21) orA-00921: unexpected end of SQL command 

22)intitle:"YALA: Yet Another LDAP Administrator" 

23)welcome.to phpqladmin "Please login" -cvsweb 

24)intitle:"SWW link" "Please wait....." 

25)inurl:"port_255" -htm 

27)intitle:"WorldClient" intext:"? (2003|2004) Alt-N Technologies." 

这些是新的一些漏洞技巧，在0days公告公布 

ext:php program_listing intitle:MythWeb.Program.Listing 

inurl:preferences.ini "[emule]" 

intitle:"Index of /CFIDE/" administrator 

"access denied for user" "using password" 

ext:php intext:"Powered by phpNewMan Version" 可以看到：path/to/news/browse.php?clang=../../../../../../file/i/want 

inurl:"/becommunity/community/index.php?pageurl=" 

intitle:"ASP FileMan" Resend -site:iisworks.com 

"Enter ip" inurl:"php-ping.php" 

ext:conf inurl:rsyncd.conf -cvs -man 

intitle: private, protected, secret, secure, winnt 

intitle:"DocuShare" inurl:"docushare/dsweb/" -faq -gov -edu 
"#mysql dump" filetype:sql 

"allow_call_time_pass_reference" "PATH_INFO" 

"Certificate Practice Statement" inurl:(PDF | DOC) 

LeapFTP intitle:"index.of./" sites.ini modified 
master.passwd 

mysql history files 
NickServ registration passwords 
passlist 
passlist.txt (a better way) 
passwd 
passwd / etc (reliable) 
people.lst 
psyBNC config files 
pwd.db 
signin filetype:url 
spwd.db / passwd 
trillian.ini 
wwwboard WebAdmin inurl:passwd.txt wwwboard|webadmin 

"# -FrontPage-" ext:pwd inurl:(service | authors | administrators | users) "# -FrontPage-" 

inurl:service.pwd 
"AutoCreate=TRUE password=*" 
"http://*:*@www" domainname 
"index of/" "ws_ftp.ini" "parent directory" 
"liveice configuration file" ext:cfg -site:sourceforge.net 
"powered by ducalendar" -site:duware.com 
"Powered by Duclassified" -site:duware.com 
"Powered by Duclassified" -site:duware.com "DUware All Rights reserved" 
"powered by duclassmate" -site:duware.com 
"Powered by Dudirectory" -site:duware.com 
"powered by dudownload" -site:duware.com 
"Powered By Elite Forum Version *.*" 
"Powered by Link Department" 
"sets mode: +k" 
"Powered by DUpaypal" -site:duware.com 
allinurl: admin mdb 
auth_user_file.txt 
config.php 
eggdrop filetype:user user 
etc (index.of) 
ext:ini eudora.ini 
ext:ini Version=... password 
ext:txt inurl:unattend.txt 

filetype:bak inurl:"htaccess|passwd|shadow|htusers" 

filetype:cfg mrtg "target

上一页  [1] [2] [3] 下一页