bratosab
04-28-2008, 12:11 PM
:eek: well here is an article on google hacks tips and tricks:
ORIGINAL article on my website: www.web-help.co.cc
http://www.web-help.co.cc/images/google_hacks.JPG
I) Find and watch web cameras
II) Search for specific files
III) Find passwords
IV) Other Cool stuff
How to find and watch web-cameras:
Type in one of the codes bellow into google.com search engine:
inurl:ViewerFrame?Mode=
inurl:ViewerFrame?Mode=Refresh
inurl:axis-cgi/jpg
inurl:axis-cgi/mjpg
inurl:view/indexFrame.shtml
inurl:view/index.shtml
inurl:view/view.shtml
liveapplet
intitle:”live view” intitle:axis
intitle:liveapplet
allintitle:”Network Camera NetworkCamera”
intitle:axis intitle:”video server”
intitle:liveapplet inurl:LvAppl
intitle:”EvoCam” inurl:”webcam.html”
intitle:”Live NetSnap Cam-Server feed”
intitle:”Live View / - AXIS”
intitle:”Live View / - AXIS 206M”
intitle:”Live View / - AXIS 206W”
intitle:”Live View / - AXIS 210”
inurl:indexFrame.shtml Axis
inurl:”MultiCameraFrame?Mode=Motion”
intitle:start inurl:cgistart
intitle:”WJ-NT104 Main Page”
intext:”MOBOTIX M1” intext:”Open Menu”
intext:”MOBOTIX M10” intext:”Open Menu”
intext:”MOBOTIX D10” intext:”Open Menu”
intitle:snc-z20 inurl:home/
intitle:snc-cs3 inurl:home/
intitle:snc-rz30 inurl:home/
intitle:”sony network camera snc-p1”
intitle:”sony network camera snc-m1”
site:.viewnetcam.com -www.viewnetcam.com
intitle:”Toshiba Network Camera” user login
intitle:”netcam live image”
intitle:”i-Catcher Console - Web Monitor”
To search for a specific file, use these searches:
Method 1:
intitle:"Index of" yourfilehere.extension
This search is the best while looking for mp3’s avi’s and all downloads…
Method 2
“parent directory “ /appz/ -xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “ DVDRip –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “Xvid –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “ Gamez –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “ MP3 –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “ Name of Singer or album –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
Notice that I am only changing the word after the parent directory, change it to what you want and you will get a lot of stuff.
Method 3
Put this string in google.com search:
?intitle:index.of? mp3
You only need add the name of the song/artist/singer.
Example: ?intitle:index.of? mp3 jackson
Method 4
inurl:microsoft filetype:iso
You can change the string to whatever you want, ex. Microsoft to adobe, iso to zip etc…
To search for a passwords, password files, forum passwords, users use these searches:
METHOD 1
intitle:"Index of" passwords modified
allinurl:auth_user_file.txt
"access denied for user" "using password"
"A syntax error has occurred" filetype:ihtml
allinurl: admin mdb
"ORA-00921: unexpected end of SQL command"
inurl:passlist.txt
"Index of /backup"
"Chatologica MetaSearch" "stack tracking:"
Amex Numbers: 300000000000000..399999999999999
MC Numbers: 5178000000000000..5178999999999999
visa 4356000000000000..4356999999999999
METHOD 2
"# -FrontPage-" inurl:service.pwd
Frontpage passwords.. very nice clean search results listing !!
"AutoCreate=TRUE password=*"
This searches the password for "Website Access Analyzer", a Japanese software that creates webstatistics. For those who can read Japanese, check out the author's site at: http://www.coara.or.jp/~passy/
"http://*:*@www" domainname
This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net
Another way is by just typing
"http://bob:bob@www"
"sets mode: +k"
This search reveals channel keys (passwords) on IRC as revealed from IRC chat logs.
allinurl: admin mdb
Not all of these pages are administrator's access databases containing usernames, passwords and other sensitive information, but many are!
allinurl:auth_user_file.txt
DCForum's password file. This file gives a list of (crackable) passwords, usernames and email addresses for DCForum and for DCShop (a shopping cart program!. Some lists are bigger than others.
intitle:"Index of" config.php
This search brings up sites with "config.php" files. To skip the technical discussion, this configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database.
eggdrop filetype:user user
These are eggdrop config files. Avoiding a full-blown descussion about eggdrops and IRC bots, suffice it to say that this file contains usernames and passwords for IRC users.
intitle:index.of.etc
This search gets you access to the etc directory, where many types of password files can be found. This link is not as reliable, but crawling etc directories can be really fun!
filetype:bak inurl:"htaccess|passwd|shadow|htusers"
This will search for backup files (*.bak) created by some editors or even by the administrator himself (before activating a new version).
Every attacker knows that changing the extenstion of a file on a webserver can have ugly consequences.
Let's pretend you need a serial number for windows xp pro.
In the google search bar type in just like this - "Windows XP Professional" 94FBR
the key is the 94FBR code.. it was included with many MS Office registration codes so this will help you dramatically reduce the amount of 'fake' crack sites that trick you…
or if you want to find the serial for winzip 8.1 - "Winzip 8.1" 94FBR
And to finish here are some cool stuff you can do in a party or something…:
Type in google search then press ‘I’m feeling lucky’:
Google easter egg
Google france
Google “your country’ and it will take you to google of your country, intresting….
google bearshare
google loco
google gothic
google linux
google l33t
google ewmew
xx-klingon
xx-piglatin
google bsd
google easter egg
answer to life the universe and everything
google mozilla
google gizoogle
Type in google search then press search:
answer to life, the universe and everything
Yup google has the answer to life, the universe and everything…
You can also visit: www.googleloco.com
Well, HAVE FUN!
ORIGINAL article on my website: www.web-help.co.cc
http://www.web-help.co.cc/images/google_hacks.JPG
I) Find and watch web cameras
II) Search for specific files
III) Find passwords
IV) Other Cool stuff
How to find and watch web-cameras:
Type in one of the codes bellow into google.com search engine:
inurl:ViewerFrame?Mode=
inurl:ViewerFrame?Mode=Refresh
inurl:axis-cgi/jpg
inurl:axis-cgi/mjpg
inurl:view/indexFrame.shtml
inurl:view/index.shtml
inurl:view/view.shtml
liveapplet
intitle:”live view” intitle:axis
intitle:liveapplet
allintitle:”Network Camera NetworkCamera”
intitle:axis intitle:”video server”
intitle:liveapplet inurl:LvAppl
intitle:”EvoCam” inurl:”webcam.html”
intitle:”Live NetSnap Cam-Server feed”
intitle:”Live View / - AXIS”
intitle:”Live View / - AXIS 206M”
intitle:”Live View / - AXIS 206W”
intitle:”Live View / - AXIS 210”
inurl:indexFrame.shtml Axis
inurl:”MultiCameraFrame?Mode=Motion”
intitle:start inurl:cgistart
intitle:”WJ-NT104 Main Page”
intext:”MOBOTIX M1” intext:”Open Menu”
intext:”MOBOTIX M10” intext:”Open Menu”
intext:”MOBOTIX D10” intext:”Open Menu”
intitle:snc-z20 inurl:home/
intitle:snc-cs3 inurl:home/
intitle:snc-rz30 inurl:home/
intitle:”sony network camera snc-p1”
intitle:”sony network camera snc-m1”
site:.viewnetcam.com -www.viewnetcam.com
intitle:”Toshiba Network Camera” user login
intitle:”netcam live image”
intitle:”i-Catcher Console - Web Monitor”
To search for a specific file, use these searches:
Method 1:
intitle:"Index of" yourfilehere.extension
This search is the best while looking for mp3’s avi’s and all downloads…
Method 2
“parent directory “ /appz/ -xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “ DVDRip –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “Xvid –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “ Gamez –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “ MP3 –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
“parent directory “ Name of Singer or album –xxx –html –htm –php –shtml –opendivx –md5 –md5sums
Notice that I am only changing the word after the parent directory, change it to what you want and you will get a lot of stuff.
Method 3
Put this string in google.com search:
?intitle:index.of? mp3
You only need add the name of the song/artist/singer.
Example: ?intitle:index.of? mp3 jackson
Method 4
inurl:microsoft filetype:iso
You can change the string to whatever you want, ex. Microsoft to adobe, iso to zip etc…
To search for a passwords, password files, forum passwords, users use these searches:
METHOD 1
intitle:"Index of" passwords modified
allinurl:auth_user_file.txt
"access denied for user" "using password"
"A syntax error has occurred" filetype:ihtml
allinurl: admin mdb
"ORA-00921: unexpected end of SQL command"
inurl:passlist.txt
"Index of /backup"
"Chatologica MetaSearch" "stack tracking:"
Amex Numbers: 300000000000000..399999999999999
MC Numbers: 5178000000000000..5178999999999999
visa 4356000000000000..4356999999999999
METHOD 2
"# -FrontPage-" inurl:service.pwd
Frontpage passwords.. very nice clean search results listing !!
"AutoCreate=TRUE password=*"
This searches the password for "Website Access Analyzer", a Japanese software that creates webstatistics. For those who can read Japanese, check out the author's site at: http://www.coara.or.jp/~passy/
"http://*:*@www" domainname
This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net
Another way is by just typing
"http://bob:bob@www"
"sets mode: +k"
This search reveals channel keys (passwords) on IRC as revealed from IRC chat logs.
allinurl: admin mdb
Not all of these pages are administrator's access databases containing usernames, passwords and other sensitive information, but many are!
allinurl:auth_user_file.txt
DCForum's password file. This file gives a list of (crackable) passwords, usernames and email addresses for DCForum and for DCShop (a shopping cart program!. Some lists are bigger than others.
intitle:"Index of" config.php
This search brings up sites with "config.php" files. To skip the technical discussion, this configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database.
eggdrop filetype:user user
These are eggdrop config files. Avoiding a full-blown descussion about eggdrops and IRC bots, suffice it to say that this file contains usernames and passwords for IRC users.
intitle:index.of.etc
This search gets you access to the etc directory, where many types of password files can be found. This link is not as reliable, but crawling etc directories can be really fun!
filetype:bak inurl:"htaccess|passwd|shadow|htusers"
This will search for backup files (*.bak) created by some editors or even by the administrator himself (before activating a new version).
Every attacker knows that changing the extenstion of a file on a webserver can have ugly consequences.
Let's pretend you need a serial number for windows xp pro.
In the google search bar type in just like this - "Windows XP Professional" 94FBR
the key is the 94FBR code.. it was included with many MS Office registration codes so this will help you dramatically reduce the amount of 'fake' crack sites that trick you…
or if you want to find the serial for winzip 8.1 - "Winzip 8.1" 94FBR
And to finish here are some cool stuff you can do in a party or something…:
Type in google search then press ‘I’m feeling lucky’:
Google easter egg
Google france
Google “your country’ and it will take you to google of your country, intresting….
google bearshare
google loco
google gothic
google linux
google l33t
google ewmew
xx-klingon
xx-piglatin
google bsd
google easter egg
answer to life the universe and everything
google mozilla
google gizoogle
Type in google search then press search:
answer to life, the universe and everything
Yup google has the answer to life, the universe and everything…
You can also visit: www.googleloco.com
Well, HAVE FUN!