Google Hacking

Ok so google hacking is nothing new. In fact the process is not officially hacking, as everything found through google is open and accessible. Despite the fact that it is not officially hacking there is still a lot of benefits to using specific search queries to find information hiding on servers. You can find passwords, free software, videos, mp3s and more. I have used these queries to find information that some may not want out in the public. For instance I have placed xls and the name of my local city in the following search parameters. I found some interesting stuff. I have found an xls spreadsheet with all the k-12 teachers in Wa. state. This list has included in it names, address, phone numbers and schools in Wa. State. I have also found information on the collage I attend that frankly scares me. Apparently they rendered this school beyond repair in 2004 yet it is still functioning. It would be sad if any of that info found its way to say the local news station. There are many interesting things to be discovered through unorthodox search queries. Try these searches:

intitle:”Index of” passwords modified

allinurl:auth_user_file.txt

“access denied for user” “using password”

“A syntax error has occurred” filetype:ihtml

allinurl: admin mdb

“ORA-00921: unexpected end of SQL command”

inurl:passlist.txt

“Index of /backup”

“Chatologica MetaSearch” “stack tracking:”

Amex Numbers: 300000000000000..399999999999999

MC Numbers: 5178000000000000..5178999999999999

visa 4356000000000000..4356999999999999

“parent directory ” /appz/ -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

“parent directory ” DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

“parent directory “Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

“parent directory ” Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

“parent directory ” MP3 -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

“parent directory ” Name of Singer or album -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

Notice that I am only changing the word after the parent directory, change it to what you want and you will get a lot of stuff.

METHOD 2

put this string in google search:

?intitle:index.of? mp3

You only need add the name of the song/artist/singer.

Example: ?intitle:index.of? mp3 jackson

METHOD 3

put this string in google search:

inurl:microsoft filetype:iso

You can change the string to watever you want, ex. microsoft to adobe, iso to zip etc…

“# -FrontPage-” inurl:service.pwd

Frontpage passwords.. very nice clean search results listing !!

“AutoCreate=TRUE password=*”

This searches the password for “Website Access Analyzer”, a Japanese software that creates webstatistics. For those who can read Japanese, check out the author’s site at: http://www.coara.or.jp/~passy/

With specific search quaries you can find cameras which are linked to a network and/or the internet. Generally these cameras do not require a PC for operations as the cam has a mini-PC in it-self!

A compiled a list of open cameras, you can see this list at www.griffid.com/htm/live_images.htm

Rufus at http://wonder.i.am has put together a nice list of google hacks that we can use to find these cams..

Axis cameras:

* /view/view.shtml axis ‘google’

* “adding live video to one of your own pages a very easy task with an AXIS 2100 Network Camera” ‘google’

* “Live view – / – AXIS” ‘google’

* “Your browser has JavaScript turned off.For the user interface to work effectively” ‘google’

* indexFrame.html axis ‘google’

* “Live web imaging unleashed” ‘google’

~ by hackcraft on July 21, 2006.