_______l33t______viprasys

:evil: this is hack section...i don't care what ya guys do using da info..

Many says Google is you're Cobber..yes Google is my Evil Friend :evil:



Everyone knows google in the security sector...and what a powerful tool it is,
just by entering certain search strings you can gain a vast amount of knowledge
and information of your chosen target...often revealing sensitive data...this
is all down to badly configured systems...brought on by sloppy administration
allowing directory indexing and accessing , password files , log entrys ,
files , paths ,etc , etc



the common search inputs below will give you an idea...for instance if you
want to search for the an index of "root"

in the search box put in exactly as you see it below


allintitle: "index of/root"


result:

[Only registered users can see links. ]

what it reveals is 2,510 pages that you can possible browse at your will...



inurl:"auth_user_file.txt"

[Only registered users can see links. ]

this result spawned 414 possible files to access

here is an actual file retrieved from a site and edited , we know who the
admin is and we have the hashes thats a job for JTR (john the ripper)

txUKhXYi4xeFs|master|admin|Worasit|Junsawang|xxx@x xx|on
qk6GaDj9iBfNg|tomjang||Bug|Tom|xxx@xxx|on

with the many variations below it should keep you busy for a long time mixing
them reveals many different permutations


?? pa?e ?ÃÃâ€*’Ãâ€Â*â€â„ ¢ÃƒÆ’¢â‚ ¬Ãƒâ€šÃ‚¦ÃƒÃâ€*’à¢Ã¢â€šÂ¬Ã…¡Ãƒâ€š ¡ ÃÃâ€*’Ãâ€Â*â€℠¢ÃƒÆ’ƒÂ¢Ã¢â€šÂ ¬ÃƒÆ’‚¦ÃÃâ€*’à¢ÃƒÂ¢Ã¢â‚¬Å¡Ã‚¬Ã…¡Ãƒâ€šà ƒÆ’‚¡?c? 18/08/2007 07:26






"Index of /admin"
"Index of /password"
"Index of /mail"
"Index of /" +passwd
"Index of /" +password.txt
"Index of /" +.htaccess
index of ftp +.mdb allinurl:/cgi-bin/ +mailto

administrators.pwd.index
authors.pwd.index
service.pwd.index
filetype:config web
gobal.asax index

allintitle: "index of/admin"
allintitle: "index of/root"
allintitle: sensitive filetype:doc
allintitle: restricted filetype :mail
allintitle: restricted filetype:doc site:gov

inurlasswd filetype:txt
inurl:admin filetype:db
inurl:iisadmin
inurl:"auth_user_file.txt"
inurl:"wwwroot/*."


top secret site:mil
confidential site:mil

allinurl: winnt/system32/ (get cmd.exe)
allinurl:/bash_history

intitle:"Index of" .sh_history
intitle:"Index of" .bash_history
intitle:"index of" passwd
intitle:"index of" people.lst
intitle:"index of" pwd.db
intitle:"index of" etc/shadow
intitle:"index of" spwd
intitle:"index of" master.passwd
intitle:"index of" htpasswd
intitle:"index of" members OR accounts
intitle:"index of" user_carts OR user_cart


?? pa?e ?ÃÃâ€*’Ãâ€Â*â€â„ ¢ÃƒÆ’¢â‚ ¬Ãƒâ€šÃ‚¦ÃƒÃâ€*’à¢Ã¢â€šÂ¬Ã…¡Ãƒâ€š ¡ ÃÃâ€*’Ãâ€Â*â€℠¢ÃƒÆ’ƒÂ¢Ã¢â€šÂ ¬ÃƒÆ’‚¦ÃÃâ€*’à¢ÃƒÂ¢Ã¢â‚¬Å¡Ã‚¬Ã…¡Ãƒâ€šà ƒÆ’‚¡?c? 18/08/2007 07:26


_vti_inf.html
service.pwd
users.pwd
authors.pwd
administrators.pwd
shtml.dll
shtml.exe
fpcount.exe
default.asp
showcode.asp
sendmail.cfm
getFile.cfm
imagemap.exe
test.bat
msadcs.dll
htimage.exe
counter.exe
browser.inc
hello.bat
default.asp
dvwssr.dll
cart32.exe
add.exe
index.jsp
SessionServlet
shtml.dll
index.cfm
page.cfm
shtml.exe
web_store.cgi
shop.cgi
upload.asp
default.asp
pbserver.dll
phf
test-cgi
finger
Count.cgi
jj
php.cgi
php
nph-test-cgi
handler
webdist.cgi
webgais
websendmail
faxsurvey
htmlscript
perl.exe
wwwboard.pl
www-sql
view-source
campas
aglimpse
glimpse
man.sh
AT-admin.cgi
AT-generate.cgi
filemail.pl
maillist.pl
info2www
files.pl
bnbform.cgi
survey.cgi
classifieds.cgi
wrap
cgiwrap
edit.pl
perl
names.nsf
webgais
dumpenv.pl
test.cgi
submit.cgi
guestbook.cgi
guestbook.pl
cachemgr.cgi
responder.cgi
perlshop.cgi
query
w3-msql
plusmail
htsearch
infosrch.cgi
publisher
ultraboard.cgi
db.cgi
formmail.cgi
allmanage.pl
ssi
adpassword.txt
redirect.cgi
cvsweb.cgi
login.jsp
dbconnect.inc
admin
htgrep
wais.pl
amadmin.pl
subscribe.pl
news.cgi
auctionweaver.pl
.htpasswd
acid_main.php
access.log
log.htm
log.html
log.txt
logfile
logfile.htm
logfile.html
logfile.txt
logger.html
stat.htm
stats.htm
stats.html
stats.txt
webaccess.htm
wwwstats.html
source.asp
perl
mailto.cgi
YaBB.pl
mailform.pl
cached_feed.cgi
global.cgi
Search.pl
build.cgi
common.php
show
global.inc
ad.cgi
WSFTP.LOG
index.html~
index.php~
index.html.bak
index.php.bak
print.cgi
register.cgi
webdriver
bbs_forum.cgi
mysql.class
sendmail.inc
CrazyWWWBoard.cgi
search.pl
way-board.cgi
webpage.cgi
pwd.dat
adcycle
post-query


?? pa?e ?ÃÃâ€*’Ãâ€Â*â€â„ ¢ÃƒÆ’¢â‚ ¬Ãƒâ€šÃ‚¦ÃƒÃâ€*’à¢Ã¢â€šÂ¬Ã…¡Ãƒâ€š ¡ ÃÃâ€*’Ãâ€Â*â€℠¢ÃƒÆ’ƒÂ¢Ã¢â€šÂ ¬ÃƒÆ’‚¦ÃÃâ€*’à¢ÃƒÂ¢Ã¢â‚¬Å¡Ã‚¬Ã…¡Ãƒâ€šà ƒÆ’‚¡?c? 18/08/2007 07:27
search rapidshare links using google

Use Google to search for some of the most known extensions and you wont believe what you find!!


Copy & paste this in your GOOGLE ADDRESS BAR, hit enter, To get pages of rapidshare links...

for applictns:

[Only registered users can see links. ]

For movies:

[Only registered users can see links. ]

For music:

[Only registered users can see links. ]


?? pa?e ?ÃÃâ€*’Ãâ€Â*â€â„ ¢ÃƒÆ’¢â‚ ¬Ãƒâ€šÃ‚¦ÃƒÃâ€*’à¢Ã¢â€šÂ¬Ã…¡Ãƒâ€š ¡ ÃÃâ€*’Ãâ€Â*â€℠¢ÃƒÆ’ƒÂ¢Ã¢â€šÂ ¬ÃƒÆ’‚¦ÃÃâ€*’à¢ÃƒÂ¢Ã¢â‚¬Å¡Ã‚¬Ã…¡Ãƒâ€šà ƒÆ’‚¡?c? 18/08/2007 07:27
One for MP3s



?intitle:Index.of?mp3

After "mp3" give a space an' type the artist, album, or whatever


e-njoy

Vipra Peace :evil: