GHDB

GOOGLE HACKING FOR PENTESTER BY SR.SYST3M

1. The user name and password

“create table” insert into” “pass|passwd|password” (ext:sql | ext:dump | ext:txt)
“your password * is” (ext:csv | ext.doc | ext:txt)

2. Key

“index of” slave_datatrans OR from_master

3. Privacy Password

“Begin (DSA | RSA)” ext:key
“index of” “secring.gpg”

4. An encrypted message
-“public | pubring | pubkeysignature | pgp | and | or |release” ext:gpg
-intext:”and” (ext:enc | ext:axx)
“ciphervalue” ext:xml

5. Chat Logs

“session start” “session ident” thomas ext:txt

6. Personal letters / e-mail
“index of” inbox.dbx
“To parent directory” inurl:”Identities”

7. Confidential files and directories

“index of” (private | secure | geheim | gizli)
“robots.txt” “User-agent” ext:txt
“this document is private | confidential | secret” ext:doc | ext:pdf | ext:xls
intitle:”index of” “jpg | png | bmp” inurl”personal | inurl:private

8. Online Webcam

intitle:”live View/ -AXIS” | inurl:view/view.shtml
inurl:”ViewFrame?Mode=”
inurl:”MultiCameraFrame?Mode=”
inturl:”axis-cgi/mjpg”
intext:”MOBOTIX M1″
intext:”Open Menu”
inurl:”view/index.shtml”

9. Description Identification private information

allintext: name email phone address intext:”thomas fischer” ext:pdf
   Twiki inurl:”View/Main” “thomas fischer”
intitle:CV OR intitle:Lebenslauf “thomas fischer”
   intitle:CV OR intitle:Lebenslauf ext:pdf OR ext:doc
10. username

ntitle:”usage Statistics for” intext:”Total Unique Usernames”

11. Unreliable procedures to disclose information

“php version” intitle:phpinfo inurl:info.php

12. SQL injection vulnerabilities and weak opening path

“advanced guestbook * powered” inurl:addentry.php
intitle:”View img” inurl:viewimg.php
13. Security Scan Report

“Assessment report” “nessus” filetype:pdf

14. Database program and error files

“Welcome to phpmyadmin ***” “running on * as root@*” intitle:phpmyadmin
“mysql error with query”
15. find records of these sites robots.txt screening

“robots.txt” “disallow:” filetype:txt
16. Use this search string, you can get a lot of passwords and login account, search for these files password and account have not had encrypted

nurl:_vti_pvt “service.pwd”

17. VNC user info

“vnc desktop” inurl:5800
18. View public network shared printer, you can check their status, set up, you can use some of them to print their own stuff

nurl:”port_255″ -htm

19. php admin access

intitle:phpMyAdmin “Welcome to phpMyAdmin ***” running on * as root@*”