1. "Login: *" "password =*" fi letype: xls (searching data command to the system files that are stored in Microsoft Excel) 2. allinurl: auth_user_fi le.txt (to fi nd files auth_user_fi le.txt containing password on server). 3. filetype: xls inurl: "password.xls" (looking for username and password in ms excel format). This command can change with admin.xls) 4. intitle: login password (get link to the login page with the login words on the title and password words anywhere. If you want to the query index more pages, type allintitle) 5. intitle: "Index of" master.passwd (index the master password page) 6. index of / backup (will search the index backup file on server) 7. intitle: index.of people.lst (will find web pages that contain user list). 8. intitle: index.of passwd.bak ( will search the index backup password files) 9. intitle: "Index of" pwd.db (searching database password files). 10. intitle: "Index of .. etc" passwd (this command will index the password sequence page). 11. index.of passlist.txt (will load the page containing password list in the clear text format). 12. index.of.secret (google will bring on the page contains confidential document). This syntax also changed with government query site: gov to search for government secret fi les, including password data) or use syntax: index.of.private 13. filetype: xls username password email (will find spreadsheets filese containing a list of username and password). 14. "# PhpMyAdmin MySQL-Dump" filetype: txt (will index the page containing sensitive data administration that build with php) 15. inurl: ipsec.secrets-history-bugs (contains confi dential data that have only by the super user). or order with inurl: ipsec.secrets "holds shared secrets"
You've reached the end of your free preview.
Want to read all 4 pages?
- Fall '13
- Information Security, Login, fi les, fi letype