![]() |
|
Tutorial Using Google For Hacking - Printable Version +- Sinisterly (https://sinister.li) +-- Forum: Hacking (https://sinister.li/Forum-Hacking) +--- Forum: Tutorials (https://sinister.li/Forum-Tutorials) +--- Thread: Tutorial Using Google For Hacking (/Thread-Tutorial-Using-Google-For-Hacking) |
Using Google For Hacking - Terminal - 07-30-2013 Hello everyone, My name is Terminal, Today I am going to be sharing with you the most powerful tool on the internet for doing so many things, This tool is something you use everyday but you may not be aware of the powerful abilities it really has. Things you can do with google
1. Find botnets and hide your botnet Spoiler:This first one is pretty simple and I have compiled a table of what you need to search for to view each botnet panel. Botnet Name - Dork - Default Pass Andromeda - intitle:Andromeda bot webpanel - N/A Cythosia - intitle:Cythosia V2 Bot Webpanel - Login - admin BlackShades HTTP - intitle:Blackshades Bot - N/A UmbraLoader - inurl:"/Panel/Ext.ux.form.CheckboxCombo/" - admin:admin VetrexNet - allintext:"VertexNet - Loader coded by DarkCoderSc" - N/A All you need to do is type in the dork in google click a result and try the password or you can bruteforce it. To prevent this is rather simple open up your botnet source in your favourite text editor and look for the <title></title> tags and change this to something other than *insert botnet name here* for instance <title>Free WebMail Client</title> this should fix most dorks but I'm not really sure of a way to hide Umbra without editing the whole source and renaming folders 2. Finding Info and DoXing Spoiler:This one is pretty simple, you need to find one or two email addresses or usernames and google this intext:emailoruserhere this will bring up more results open all of them up and look through each one until you find another username linked to it then simply repeat until you have a social network account or a full dox. You can even do intext:phonenumberorrealname However if you know their real name do intext:username,realname This is not a tutorial on doxing, it is simply explaining what you can do with google. 3. Find Vulnerable Sites Spoiler:There is quite a few ways to discover hackable sites, one of the first we will cover is finding websites that have not yet been set up properly, so you can configure them yourself. PHPMyAdmin "Welcome to phpMyAdmin" AND " Create new database" Password Finding inurl:-cfg intext:"enable password" filetype:ini "[FFFTP]” (pass|passwd|password|pwd) filetype ql “phpmyAdmin SQL Dump” (pass|password|passwd|pwd)filetype ql “PostgreSQL database dump” (pass|password|passwd|pwd)inurl:htpasswd filetype:htpasswd inurl ervice.pwdallinurl:authuserfile.txt SQLi Vuln Sites inurl:index.php?id= inurl:trainers.php?id= inurl:buy.php?category= inurl:article.php?ID= inurl:lay_old.php?id= inurl:declaration_more.php?decl_id= inurl:age.php?id= inurl:games.php?id= inurl:age.php?file= inurl:newsDetail.php?id= inurl:gallery.php?id= inurl:article.php?id= inurl how.php?id=inurl taff_id=inurl:newsitem.php?num= inurl:readnews.php?id= inurl:top10.php?cat= inurl:historialeer.php?num= inurl:reagir.php?num= inurl:tray-Questions-View.php?num= inurl:forum_bds.php?num= inurl:game.php?id= inurl:view_product.php?id= inurl:newsone.php?id= inurl w_comment.php?id=inurl:news.php?id= inurl:avd_start.php?avd= inurl:event.php?id= inurlroduct-item.php?id= inurl ql.php?id=inurl:news_view.php?id= inurl elect_biblio.php?id=inurl:humor.php?id= inurl:aboutbook.php?id= inurl:fiche_spectacle.php?id= inurl:communique_detail.php?id= inurl em.php3?id=inurl:kategorie.php4?id= inurl:news.php?id= inurl:index.php?id= inurl:faq2.php?id= inurl how_an.php?id=inurlreview.php?id= inurl:loadpsb.php?id= inurl pr.php?id=inurl:ages.php?id= inurl:announce.php?id= inurl:clanek.php4?id= inurl:participant.php?id= inurl:download.php?id= inurl:main.php?id= inurl:review.php?id= inurl:chappies.php?id= inurl:read.php?id= inurl:rod_detail.php?id= inurl:viewphoto.php?id= inurl:article.php?id= inurl:person.php?id= inurl:productinfo.php?id= inurl howimg.php?id=inurl:view.php?id= inurl:website.php?id= inurl:hosting_info.php?id= inurl:gallery.php?id=, inurl:rub.php?idr= inurl:view_faq.php?id= inurl:artikelinfo.php?id= inurl:detail.php?ID= inurl:index.php?= inurl:profile_view.php?id= inurl:category.php?id= inurl:publications.php?id= inurl:fellows.php?id= inurl:downloads_info.php?id= inurl:rod_info.php?id= inurl hop.php?do=part&id=inurl:productinfo.php?id= inurl:collectionitem.php?id= inurl:band_info.php?id= inurl:product.php?id= inurl:releases.php?id= inurl:ray.php?id= inurl:produit.php?id= inurl:pop.php?id= inurl hopping.php?id=inurl:productdetail.php?id= inurl:ost.php?id= inurl:viewshowdetail.php?id= inurl:clubpage.php?id= inurl:memberInfo.php?id= inurl ection.php?id=inurl:theme.php?id= inurl hredder-categories.php?id=inurl:tradeCategory.php?id= inurl:product_ranges_view.php?ID= inurl hop_category.php?id=inurl:transcript.php?id= inurl:channel_id= inurl:item_id= inurl:newsid= inurl:trainers.php?id= inurl:news-full.php?id= inurl:news_display.php?getid= inurl:index2.php?option= inurl:readnews.php?id= inurl:top10.php?cat= inurl:newsone.php?id= inurl:event.php?id= inurl:product-item.php?id= inurl ql.php?id=inurl:aboutbook.php?id= inurl:review.php?id= inurl:loadpsb.php?id= inurl:ages.php?id= inurl:material.php?id= inurl:clanek.php4?id= inurl:announce.php?id= inurl:chappies.php?id= inurl:read.php?id= inurl:viewapp.php?id= inurl:viewphoto.php?id= inurl:rub.php?idr= inurl:galeri_info.php?l= inurl:review.php?id= inurl:iniziativa.php?in= inurl:curriculum.php?id= inurl:labels.php?id= inurl tory.php?id=inurl:look.php?ID= inurl:newsone.php?id= inurl:aboutbook.php?id= inurl:material.php?id= inurl:opinions.php?id= inurl:announce.php?id= inurl:rub.php?idr= inurl:galeri_info.php?l= inurl:tekst.php?idt= inurl:newscat.php?id= inurl:newsticker_info.php?idn= inurl:rubrika.php?idr= inurl:rubp.php?idr= inurl:offer.php?idf= inurl:art.php?idm= inurl:title.php?id= inurl:"id=" & intext:"Warning: mysql_fetch_assoc() inurl:"id=" & intext:"Warning: mysql_fetch_array() inurl:"id=" & intext:"Warning: mysql_num_rows() inurl:"id=" & intext:"Warning: session_start() inurl:"id=" & intext:"Warning: getimagesize() inurl:"id=" & intext:"Warning: is_writable() inurl:"id=" & intext:"Warning: getimagesize() inurl:"id=" & intext:"Warning: Unknown() inurl:"id=" & intext:"Warning: session_start() inurl:"id=" & intext:"Warning: mysql_result() inurl:"id=" & intext:"Warning: pg_exec() inurl:"id=" & intext:"Warning: mysql_result() inurl:"id=" & intext:"Warning: mysql_num_rows() inurl:"id=" & intext:"Warning: mysql_query() inurl:"id=" & intext:"Warning: array_merge() inurl:"id=" & intext:"Warning: preg_match() inurl:"id=" & intext:"Warning: ilesize() inurl:"id=" & intext:"Warning: filesize() inurl:"id=" & intext:"Warning: filesize() inurl:"id=" & intext:"Warning: require() I just came across this one inurl:"/root/etc/passwd" intext:"home/*:" I tried a few results and quite a few seem to 403 but you may be able to find something with this. 4. Find Deleted Files Or Sites Spoiler:This one is really simple it shows you things that have been removed from the internet, there is a few ways to do this but this is the one I have found most helpful. I've only managed to get this to work in google chrome but the dork is cache iteurlhere.comI find this helps greatly when looking at removed pastebin entries 5. Finding Things You're Not Supposed To Spoiler:I personally love this kind of dork as you can find so much useful info allintitle: restricted filetype:doc site:gov Will show you some interesting documents hosted on .gov sites. You can easily do this with your favorite site for instance allintitle: Secret filetype:txt site:mysite.com Should show you everything on mysite.com with the word secret in the title with the extension .txt You can also look at online security cameras. intitle:”Live View / – AXIS” | inurl:view/view.shtml^ inurl:ViewerFrame?Mode= inurl:ViewerFrame?Mode=Refresh inurl:axis-cgi/jpg inurl:axis-cgi/mjpg (motion-JPEG) inurl:view/indexFrame.shtml inurl:view/index.shtml inurl:view/view.shtml liveapplet intitle:”live view” intitle:axis intitle:liveapplet allintitle:”Network Camera NetworkCamera” intitle:axis intitle:”video server” intitle:liveapplet inurl:LvAppl intitle:”EvoCam” inurl:”webcam.html” intitle:”Live NetSnap Cam-Server feed” intitle:”Live View / – AXIS” intitle:”Live View / – AXIS 206M” intitle:”Live View / – AXIS 206W” intitle:”Live View / – AXIS 210? inurl:indexFrame.shtml Axis inurl:”MultiCameraFrame?Mode=Motion” intitle tart inurl:cgistartintitle:”WJ-NT104 Main Page” intext:”MOBOTIX M1? intext:”Open Menu” intext:”MOBOTIX M10? intext:”Open Menu” intext:”MOBOTIX D10? intext:”Open Menu” intitle nc-z20 inurl:home/intitle nc-cs3 inurl:home/intitle nc-rz30 inurl:home/intitle:”sony network camera snc-p1? intitle:”sony network camera snc-m1? site:.viewnetcam.com -www.viewnetcam.com intitle:”Toshiba Network Camera” user login intitle:”netcam live image” intitle:”i-Catcher Console – Web Monitor” 6. Obtaining things for free Spoiler:This one is in my opinion the best as who doesn't like free stuff? 6.1 - Free Music This very simple dork can get you free downloads to music 1 - intitle ongnamehere.mp32 - intitle ongnamehere filetype.mp36.2 - Paid Stuff For Free This other simple dork can find pages that people are taken too after they purchase a product site:*.com intitle:”Thank You For Your Purchase” intext:Click Here to Download Play about with this one a bit there's quite a few variations. 6.3 - Free Movies and Games Each of these dorks could be useful it may not be though they all respond to things I have seen people call their folders to contian things like this “parent directory ” /appz/ -xxx -html -htm -php -shtml -opendivx -md5 -md5sums “parent directory ” DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums “parent directory “Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums “parent directory ” Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums “parent directory ” MP3 -xxx -html -htm -php -shtml -opendivx -md5 -md5sums Thats the end guys, I hope you have enjoyed this guide and you take something from it. Note I have not created or originaly discovered any of these dorks, I have been building up a collection for some time now and I thought I might as well make a thread about them I am the original poster of this guide on HF, I am just sharing it here to contribute to the community. -Terminal RE: Using Google For Hacking - Nil - 07-30-2013 Thanks Terminal. I liked it. RE: Using Google For Hacking - Terminal - 07-30-2013 (07-30-2013, 03:46 PM)God Wrote: Thanks Terminal. I liked it. All good man, Thanks for posting. -Terminal RE: Using Google For Hacking - 3SidedSquare - 07-30-2013 Nice tutorial, well laid out and such. I'm going to leave this here, just because it's relevant. What all the symbols in the example dorks do RE: Using Google For Hacking - Mustnabs - 07-30-2013 Very nice tutorial, thanks mate
RE: Using Google For Hacking - Complibur - 07-30-2013 Nice guide you have here. BTW any open botnets probably will have no bots
RE: Using Google For Hacking - 303315 - 07-30-2013 Loved it. Learned a new method
RE: Using Google For Hacking - Sirius - 07-30-2013 Really nice tutorial, if one time I really need it I will use it. RE: Using Google For Hacking - Terminal - 07-31-2013 (07-30-2013, 09:09 PM)3SidedSquare Wrote: Nice tutorial, well laid out and such.Thanks very much man, If you like I can include a link to your thread on my thread for people to check out? -Terminal RE: Using Google For Hacking - 3SidedSquare - 08-01-2013 (07-31-2013, 11:27 AM)Terminal Wrote: Thanks very much man, Sure thing! Always happy to help
|