Google-Hack-Db Interesting_Info

Readme:
SecPoint.com Google Penetration Testing Hack Database v 1.5

Database of Google Hacks and a tool for manipulating it.
Database is separated to files by categories. You could use DB alone, or
make some manipulations using our tool like generating URLs for Google
search engine or generating pretty HTML output with links. The tool
could also help in analysing your own site by adding site search option
to all queries.

This tool will take source file (file with a list of queries) and generate
website-specific queries (-s option) by adding site:sitename.com to each
query. Not only queries, but full Google URLs could be generated for each
query (-q). Output could be saved to file in text format (-o) or in HTML with
links format (-t) which will automatically create URLs list.

run as
./googleDB-tool.py <source file> <options>

   <source file>        queries source file from GoogleDB (files in db directory)

Options are:
    -o output.txt       save output to file
    -s sitename.com     generate queries for this site only
    -q                  generate google query urls for each line
    -t                  generate output in HTML format (implies -q)
    -m LISTFILE		generate queries for multiple sites listed in LISTFILE


Command line examples:
    1-generate list of search strings for finding login pages
    ./googleDB-tool.py "login_pages.txt"

    2-generate list of Google queries for finding login pages
    ./googleDB-tool.py "login_pages.txt" -q

    3-same as 2, but in HTML format
    ./googleDB-tool.py "login_pages.txt" -q -t

    4-same as 3, but save to "OUT.html"
    ./googleDB-tool.py "login_pages.txt" -q -t -o "OUT.html"

    5-generate queries as in 4, but only for site.com
    ./googleDB-tool.py "login_pages.txt" -q -t -o "OUT.html" -s site.com

    6-all of the above, for multiple sites from "sites.txt" list
    ./googleDB-tool.py "login_pages.txt" -q -t -o OUT.html -s site.com -m sites.txt



History:
# ## 1.0 initial release
# ## 1.1 google query generating option (-q)
# ## 1.2 generating HTML output (-t)
# ## 1.3 added support for multiple sites generation (-m option), database update - 7824 records
# ## 1.5 friendly output and examples, database update

Copy Paste At Google:
Interesting_Info:

"""# Dumping data for table (username|user|users|password)"""
"""# Dumping data for table"""
"""# phpMyAdmin MySQL-Dump"" ""INSERT INTO"" -""the"""
"""# phpMyAdmin MySQL-Dump"" filetype:txt"
"""#mysql dump"" filetype:sql 21232f297a57a5a743894a0e4a801fc3"
"""#mysql dump"" filetype:sql"
"""Certificate Practice Statement"" inurl:(PDF | DOC)"
"""Cisco PIX Security Appliance Software Version"" + ""Serial Number"" + ""show ver"" -inurl "
"""Generated by phpSystem"""
"""HTTP_FROM=googlebot""  googlebot.com ""Server_Software="""
"""Host Vulnerability Summary Report"""
"""Index of"" / ""chat/logs"""
"""Installed Objects Scanner"" inurl:default.asp"
"""MacHTTP"" filetype:log inurl:machttp.log"
"""Mecury Version"" ""Infastructure Group"""
"""Microsoft (R) Windows * (TM) Version * DrWtsn32 Copyright (C)"" ext:log"
"""Most Submitted Forms and Scripts"" ""this section"""
"""Network Vulnerability Assessment Report"""
"""Request Details"" ""Control Tree"" ""Server Variables"""
"""Running in Child mode"""
"""Thank you for your order"" +receipt"
"""These statistics were produced by getstats"""
"""This is a Shareaza Node"""
"""This report was generated by WebLog"""
"""This summary was generated by wwwstat"""
"""allow_call_time_pass_reference"" ""PATH_INFO"""
"""cacheserverreport for"" ""This analysis was produced by calamaris"""
"""not for distribution"" confidential"
"""not for public release"" -.edu -.gov -.mil"
"""phone  * * *"" ""address *"" ""e-mail"" intitle:""curriculum vitae"""
"""phpMyAdmin"" ""running on"" inurl:""main.php"""
"""robots.txt"" ""Disallow:"" filetype:txt"
"""sets mode: +p"""
"""sets mode: +s"""
"(intitle:""PRTG Traffic Grapher"" inurl:""allsensors"")|(intitle:""PRTG Traffic Grapher - Monitoring Results"")"
"(intitle:WebStatistica inurl:main.php) | (intitle:""WebSTATISTICA server"") -inurl:statsoft -inurl:statsoftsa -inurl:statsoftinc.com -edu -software -rob"
"(inurl:""robot.txt"" | inurl:""robots.txt"" ) intext:disallow filetype:txt"
"+"":8080"" +"":3128"" +"":80"" filetype:txt"
"+""HSTSNR"" -""netop.com"""
"+intext:""AWSTATS DATA FILE"" filetype:txt"
"-site:php.net -""The PHP Group"" inurl:source  inurl:url ext:pHp"
"94FBR ""ADOBE PHOTOSHOP"""
"allinurl:""weblog/referrers"""
"ext:(doc | pdf | xls | txt | ps | rtf | odt | sxw | psw | ppt | pps | xml) (intext:confidential salary | intext:""budget approved"") inurl:confidential"
"ext:log ""Software: Microsoft Internet Information Services *.*"""
"ext:reg ""username=*"" putty"
"ext:txt ""Final encryption key"""
"filetype: log inurl:""access.log"" +intext:""HTTP/1.1"""
"filetype:asp DBQ="" * Server.MapPath(""*.mdb"")"
"filetype:blt ""buddylist"""
"filetype:ctt ""msn"""
"filetype:eml eml +intext:""Subject"" +intext:""From"""
"filetype:fp5 fp5 -site:gov -site:mil -""cvs log"""
"filetype:ini ""Bootstrap.php"" (pass|passwd|password|pwd)"
"filetype:pem ""Microsoft"""
"filetype:pst inurl:""outlook.pst"""
"filetype:reg ""Terminal Server Client"""
"filetype:xls inurl:""email.xls"""
"intext:""Session Start * * * *:*:* *"" filetype:log"
"intext:""Tobias Oetiker"" ""traffic analysis"""
"intitle:""ASP Stats Generator *.*"" ""ASP Stats Generator"" ""2003-2004 weppos"""
"intitle:""Apache::Status"" (inurl:server-status | inurl:status.html | inurl:apache.html)"
"intitle:""AppServ Open Project *"" ""AppServ is a merging open source software installer package"" -phpbb"
"intitle:""AppServ Open Project"" -site:www.appservnetwork.com"
"intitle:""Big Sister"" +""OK Attention Trouble"""
"intitle:""DocuShare"" inurl:""docushare/dsweb/"" -faq"
"intitle:""FTP root at"""
"intitle:""Ganglia"" ""Cluster Report for"""
"intitle:""Index Of"" -inurl:maillog  maillog size"
"intitle:""Index Of"" cookies.txt ""size"""
"intitle:""Index of"" dbconvert.exe chats"
"intitle:""Index of"" finance.xls"
"intitle:""Index of"" upload size parent directory"
"intitle:""Joomla - Web Installer"""
"intitle:""LOGREP - Log file reporting system"" -site:itefix.no"
"intitle:""Multimon UPS status page"""
"intitle:""PHP Advanced Transfer"" (inurl:index.php | inurl:showrecent.php )"
"intitle:""PhpMyExplorer"" inurl:""index.php"" -cvs"
"intitle:""System Statistics"" +""System and Network Information Center"""
"intitle:""Usage Statistics for"" ""Generated by Webalizer"""
"intitle:""Web Server Statistics for ****"""
"intitle:""Welcome to F-Secure Policy Manager Server Welcome Page"""
"intitle:""Welcome to ntop!"""
"intitle:""admin panel"" +""Powered by RedKernel"""
"intitle:""curriculum vitae"" filetype:doc"
"intitle:""edna:streaming mp3 server"" -forums"
"intitle:""index of"" +myd size"
"intitle:""index of"" mysql.conf OR mysql_config"
"intitle:""index.of *"" admin news.asp configview.asp"
"intitle:""index.of"" .diz .nfo last modified"
"intitle:""statistics of"" ""advanced web statistics"""
"intitle:""urchin (5|3|admin)"" ext:cgi"
"intitle:""wbem"" compaq login ""Compaq Information Technologies Group"""
"intitle:""web server status"" SSH Telnet"
"intitle:""welcome.to.squeezebox"""
"intitle:Bookmarks inurl:bookmarks.html ""Bookmarks"
"intitle:index.of ""Apache"" ""server at"""
"intitle:intranet inurl:intranet +intext:""phone"""
"intitle:phpinfo ""PHP Version"""
"inurl:""/axs/ax-admin.pl"" -script"
"inurl:""/cricket/grapher.cgi"""
"inurl:""/includes/config.php"""
"inurl:""/names.nsf?OpenDatabase"""
"inurl:""bookmark.htm"""
"inurl:""cacti"" +inurl:""graph_view.php"" +""Settings Tree View"" -cvs -RPM"
"inurl:""config.php.new"" +vbulletin"
"inurl:""newsletter/admin/"" intitle:""newsletter admin"""
"inurl:""newsletter/admin/"""
"inurl:""putty.reg"""
"inurl:""smb.conf"" intext:""workgroup"" filetype:conf"
"inurl:""trace.axd"" ext:axd ""Application Trace"""
"inurl:/push/ .pem apns -""push notifications"" ""bag attributes"""
"inurl:cgi-bin/testcgi.exe ""Please distribute TestCGI"""
"inurl:ipsec.secrets ""holds shared secrets"""
"inurl:preferences.ini ""[emule]"""
"inurl:report ""EVEREST Home Edition """
"inurl:server-info ""Apache Server Information"""
"inurl:server-info intitle:""Server Information"" Apache Server Information"
"inurl:server-status ""apache"""
"inurl:vbstats.php ""page generated"""
"inurl:wp-mail.php  + ""There doesn't seem to be any new mail."""
"php-addressbook  ""This is the addressbook for *"" -warning"
( filetype:mail | filetype:eml | filetype:mbox | filetype:mbx ) intext:password|subject
BEGIN (CERTIFICATE|DSA|RSA) filetype:csr
BEGIN (CERTIFICATE|DSA|RSA) filetype:key
allinurl:/examples/jsp/snp/snoop.jsp
allinurl:/xampp/security.php
allinurl:cdkey.txt
allinurl:http://www.google.co.in/latitude/apps/badge/api?user=
allinurl:servlet/SnoopServlet
buddylist.blt
contacts ext:wml
data filetype:mdb -site:gov -site:mil
e-mail address filetype:csv csv
ext:CDX CDX
ext:DBF DBF
ext:DCA DCA
ext:asp inurl:pathto.asp
ext:ccm ccm -catacomb
ext:cgi inurl:editcgi.cgi inurl:file=
ext:conf NoCatAuth -cvs
ext:conf inurl:rsyncd.conf -cvs -man
ext:dat bpk.dat
ext:gho gho
ext:ics ics
ext:ini intext:env.ini
ext:jbf jbf
ext:ldif ldif
ext:mdb inurl:*.mdb  inurl:fpdb shop.mdb
ext:nsf nsf -gov -mil
ext:plist filetype:plist inurl:bookmarks.plist
ext:pqi pqi -database
ext:txt inurl:dxdiag
ext:vmdk vmdk
ext:vmx vmx
filetype:PS ps
filetype:QBW qbw
filetype:QDF QDF
filetype:bkf bkf
filetype:blt blt +intext:screenname
filetype:cfg auto_inst.cfg
filetype:cnf inurl:_vti_pvt access.cnf
filetype:conf inurl:firewall -intitle:cvs
filetype:conf inurl:unrealircd.conf -cvs -gentoo
filetype:config web.config -CVS
filetype:ctl Basic
filetype:ctt Contact
filetype:ctt ctt messenger
filetype:fp3 fp3
filetype:fp7 fp7
filetype:inf inurl:capolicy.inf
filetype:lic lic intext:key
filetype:log access.log -CVS
filetype:log cron.log
filetype:mbx mbx intext:Subject
filetype:mny mny
filetype:myd myd -CVS
filetype:ns1 ns1
filetype:old (define)(DB_USER|DB_PASS|DB_NAME)
filetype:old (mysql_connect) ()
filetype:ora ora
filetype:ora tnsnames
filetype:pdb pdb backup (Pilot | Pluckerdb)
filetype:php inurl:index inurl:phpicalendar -site:sourceforge.net
filetype:pot inurl:john.pot
filetype:pst pst -from -to -date
filetype:qbb qbb
filetype:rdp rdp
filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS
filetype:vcs vcs
filetype:wab wab
filetype:xls + password + inurl:.com
filetype:xls -site:gov inurl:contact
intext:(password | passcode) intext:(username | userid | user)   filetype:csv
intext:SQLiteManager inurl:main.php
intext:ViewCVS inurl:Settings.php
intext:db_pass inurl:settings.ini
intext:gmail invite intext:http://gmail.google.com/gmail/a
intitle:admin intitle:login
intitle:index.of cgiirc.config
intitle:index.of dead.letter
intitle:index.of finances.xls
intitle:index.of haccess.ctl
intitle:index.of inbox
intitle:index.of inbox dbx
intitle:index.of mt-db-pass.cgi
intitle:index.of mystuff.xml
intitle:index.of robots.txt
intitle:index.of ws_ftp.ini
intitle:index.of? configuration.php.zip
inurl:*db filetype:mdb
inurl:/_layouts/settings
inurl:/cgi-bin/pass.txt
inurl:/public/?Cmd=contents
inurl:XcCDONTS.asp
inurl:admin filetype:xls
inurl:admin intitle:login
inurl:app/etc/local.xml
inurl:backup filetype:mdb
inurl:build.err
inurl:cgi-bin/printenv
inurl:cgiirc.config
inurl:changepassword.asp
inurl:configuration.php-dist
inurl:ds.py
inurl:email filetype:mdb
inurl:fcgi-bin/echo
inurl:forum filetype:mdb
inurl:forward filetype:forward -cvs
inurl:getmsg.html intitle:hotmail
inurl:ipsec.conf -intitle:manpage
inurl:ipsec.secrets -history -bugs
inurl:log.nsf -gov
inurl:main.php Welcome to phpMyAdmin
inurl:main.php phpMyAdmin
inurl:netscape.hst
inurl:netscape.ini
inurl:odbc.ini ext:ini -cvs
inurl:perl/printenv
inurl:php.ini filetype:ini
inurl:phpinfo.php
inurl:profiles filetype:mdb
inurl:sarg inurl:siteuser.html
inurl:snitz_forums_2000.mdb
inurl:ssl.conf filetype:conf
inurl:tdbin
mail filetype:csv -site:gov intext:name
rdbqds -site:.edu -site:.mil -site:.gov
site:dl.dropbox.com filetype:pdf cv OR curriculum vitae OR resume
site:docs.google.com intitle:(cv Or resume OR curriculum vitae)
site:edu admin grades
site:mediafire.com cv Or resume OR curriculum vitae filetype:pdf OR doc
site:stashbox.org cv Or resume OR curriculum vitae filetype:pdf OR doc
site:www.mailinator.com inurl:ShowMail.do