close
  HackDiscussion

Google tips



thehackerAug 4, 2006 5:44am
Using Google, and some finely crafted searches we can find a lot of interesting information.

For Example we can find:
Credit Card Numbers
Passwords
Software / MP3's
...... (and on and on and on) Presented below is just a sample of interesting searches that we can send to google to obtain info that some people might not want us having.. After you get a taste using some of these, try your own crafted searches to find info that you would be interested in.

Try a few of these searches:
intitle:"Index of" passwords modified
allinurl:auth_user_file.txt
"access denied for user" "using password"
"A syntax error has occurred" filetype:ihtml
allinurl: admin mdb
"ORA-00921: unexpected end of SQL command"
inurl:passlist.txt
"Index of /backup"
"Chatologica MetaSearch" "stack tracking:"


Amex Numbers: 300000000000000..399999999999999
MC Numbers: 5178000000000000..5178999999999999
visa 4356000000000000..4356999999999999


"parent directory " /appz/ -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory "Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " MP3 -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " Name of Singer or album -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

Notice that I am only changing the word after the parent directory, change it to what you want and you will get a lot of stuff.

METHOD 2

put this string in google search:

?intitle:index.of? mp3

You only need add the name of the song/artist/singer.

Example: ?intitle:index.of? mp3 jackson

METHOD 3

put this string in google search:

inurl:microsoft filetype:iso

You can change the string to watever you want, ex. microsoft to adobe, iso to zip etc...


"# -FrontPage-" inurl:service.pwd
Frontpage passwords.. very nice clean search results listing !!

"AutoCreate=TRUE password=*"
This searches the password for "Website Access Analyzer", a Japanese software that creates webstatistics. For those who can read Japanese, check out the author's site at: coara.or.jp/~passy/ [coara.or.jp/~passy/]

"http://*:*@www" domainname
This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net

"http://*:*@www" bangbus or "http://*:*@www"bangbus

Another way is by just typing
"http://bob:bob@www"

"sets mode: +k"
This search reveals channel keys (passwords) on IRC as revealed from IRC chat logs.

allinurl: admin mdb
Not all of these pages are administrator's access databases containing usernames, passwords and other sensitive information, but many are!

allinurl:auth_user_file.txt
DCForum's password file. This file gives a list of (crackable) passwords, usernames and email addresses for DCForum and for DCShop (a shopping cart program(!!!). Some lists are bigger than others, all are fun, and all belong to googledorks. =)


intitle:"Index of" config.php
This search brings up sites with "config.php" files. To skip the technical discussion, this configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database.

eggdrop filetype:user user
These are eggdrop config files. Avoiding a full-blown descussion about eggdrops and IRC bots, suffice it to say that this file contains usernames and passwords for IRC users.

intitle:index.of.etc
This search gets you access to the etc directory, where many many many types of password files can be found. This link is not as reliable, but crawling etc directories can be really fun!

filetype:bak inurl:"htaccess|passwd|shadow|htusers"
This will search for backup files (*.bak) created by some editors or even by the administrator himself (before activating a new version).
Every attacker knows that changing the extenstion of a file on a webserver can have ugly consequences.


Let's pretend you need a serial number for windows xp pro.

In the google search bar type in just like this - "Windows XP Professional" 94FBR

the key is the 94FBR code.. it was included with many MS Office registration codes so this will help you dramatically reduce the amount of 'fake' porn sites that trick you.

or if you want to find the serial for winzip 8.1 - "Winzip 8.1" 94FBR
---------------------------------------
Copied from: enigmagroup.org/index.php [enigmagroup.org/index.php]
---------------------------------------


Sponsor
PinGUYAug 4, 2006 7:15am
hack.group.stumbleupon.com/forum/35788/ [hack.group.stumbleupon.com/forum/35788/]

But thanks for fitting it all onto one page ;-)


ben76213Dec 28, 2007 5:20am
Google

google.com/Easter/feature_easter.html [google.com/Easter/feature_easter.html]

google.com/intl/xx-hacker/ [google.com/intl/xx-hacker/]

google.com/intl/xx-piglatin/ [google.com/intl/xx-piglatin/]

google.com/intl/xx-klingon/ [google.com/intl/xx-klingon/]

google.com/intl/xx-elmer/ [google.com/intl/xx-elmer/]

google.com/bsd [google.com/bsd]

google.com/linux [google.com/linux]

google.com/microsoft [google.com/microsoft]

google.com/mac [google.com/mac]

Google for

answer to life, the universe and everything

It should return answer

answer to life, the universe and everything = 42

If you are using Firefox you can install the Xippee extension, which is a really simple addon for Google Searches, also works in Live Searches...



https://addons.mozilla.org/en-US/firefox/addon/5309

It lets you mark any word on the search results and you can choose if you want more results like this.. A good video is to be found here:

xippee.com/XippeeDemo/XippeeDemo.html [xippee.com/XippeeDemo/XippeeDemo.html]

Here is the Google Labs, which is a page where you can view some nice things on Google..

labs.google.com [labs.google.com]

I found this on Google Labs

google.com/experimental/ [google.com/experimental/]

Google Suggest, shows suggestions as you type..



google.com/webhp [google.com/webhp]


Here are some search tips. Like inurl: and define:

google.com/help/operators.html [google.com/help/operators.html]

GreaseMonkey on Firefox script

Google Image Type Recognition



userscripts.org/scripts/show/9613 [userscripts.org/scripts/show/9613]

Google Pirate



googlepirate.com [googlepirate.com]

AudioRaider



audioraider.com [audioraider.com]

Google StreetView

maps.google.com/help/maps/streetview/ [maps.google.com/help/maps/streetview/]



GoogleFont



googlefont.com [googlefont.com]

The Google Font is CatullŪ BQ which is found in myfonts.com/fonts/berthold/catull-bq/ [myfonts.com/fonts/berthold/catull-bq/]
The font isnīt free and it costs $99.00.

At GoogleMyWay you can create a Google Logo by entering the name you want and then you can save the address and use to search Google.. The aim is if you want to change the Google logo...



googlemyway.com [googlemyway.com]

Just Fucking Google It



Google does not endorse this site, and is not associated with it in any way whatsoever.

justfuckinggoogleit.com [justfuckinggoogleit.com]

justfuckinggoogleit.com/info.html [justfuckinggoogleit.com/info.html]

Google Moon

google.com/moon/ [google.com/moon/]

Some nice pictures...



googlemodules.com [googlemodules.com]


ben76213Dec 28, 2007 5:22am
Search StumbleUpon Groups.




tinyurl.com/3ysgol [tinyurl.com/3ysgol]


dawnkhoganMar 5, 2008 9:23am
Helped me out at work. Finding corporate emails:

*@theirwebsite.com

Pulls up email formats, if you know their name just follow the format.


moookidMar 6, 2008 7:59am
Have some fun with this:

gnucitizen.org/ghdb/ [gnucitizen.org/ghdb/]

You're welcome. :)


Zephyr-The-ZephMar 9, 2008 8:15am
I can safely say that 6 ends the discussion.


olegnepMar 9, 2008 9:34am
i concur
link from 5 - "The online Google Hacking, Ethical Penetration Testing Tool (v1.0a)"
nuff said


Google tips


You need to Sign-up for StumbleUpon to post to this forum