|
inurl:
inurl: 是黑客重要的搜寻方法,可搜到的网址包括的关键字
例如填上 allinurl:login password 作搜索,便会很易找到有 login 和 password 的网页。
-------------------------------------------------------------------------------------------
filetype:
filetype: 是黑客专用法,例如想找 mdb 的数据库档案,可用 password filetype:mdb 作搜寻,
便会找到密码文件,进阶用法可配合 inurl: 使用,例如 girl filetype:jpg site:com 便可搜到所有标题
.com 网站,而档案为 girl.jp 或网页內容有 girl 字串的。
-------------------------------------------------------------------------------------------
Index of /admin
搜到的结果大多数是@ index browsing 的网站,随便按下一个连接便看到网站的资料夹和
档案分布。
-------------------------------------------------------------------------------------------
"Index of /" +password.txt
有些站长会將密码储存成 password.txt 档案,如配合 index browsing 將 google 的关键字
串成 "Index of /" +password.txt 作搜寻,便找到很多 password.txt
-------------------------------------------------------------------------------------------
以下还有更多输入搜寻法,有时间可自行玩玩!
"Index of /admin"
"Index of /password"
"Index of /mail"
"Index of /" +passwd
"Index of /" +password.txt
"Index of /" +.htaccess
index of ftp +.mdb allinurl:/cgi-bin/ +mailto
administrators.pwd.index
authors.pwd.index
service.pwd.index
filetype:config web
gobal.asax index
allintitle: "index of/admin"
allintitle: "index of/root"
allintitle: sensitive filetype:doc
allintitle: restricted filetype :mail
allintitle: restricted filetype:doc site:gov
inurl:passwd filetype:txt
inurl:admin filetype:db
inurl:iisadmin
inurl:"auth_user_file.txt"
inurl:"wwwroot/*."
top secret site:mil
confidential site:mil
allinurl: winnt/system32/ (get cmd.exe)
allinurl:/bash_history
intitle:"Index of" .sh_history
intitle:"Index of" .bash_history
intitle:"index of" passwd
intitle:"index of" people.lst
intitle:"index of" pwd.db
intitle:"index of" etc/shadow
intitle:"index of" spwd
intitle:"index of" master.passwd
intitle:"index of" htpasswd
intitle:"index of" members OR accounts
intitle:"index of" user_carts OR user_cart |
|