RetroNet

Google dorks: hackear usando google

Podríamos definir Google Dorks como búsquedas avanzadas mediante el uso de operadores complejos que google pone a nuestra disposición, mediante el uso de estas facilidades podemos ahorrarnos el trabajo de buscar vulnerabilidades y dejar que google nos muestra las que encontró y tiene indexadas.

Veamos algunos ejemplos, para probarlos tenemos que poner en la entrada de texto de google alguna de las siguientes cadenas de busqueda.

Advertencias, estos datos solo se proveen con fines didácticos, el mal uso de los mismos es pura responsabilidad de cada uno. Advertencia II: hay muchos honey pots preparados para responder positivamente a estas búsquedas, podes quedar pegado

Dorks para hacking de contraseñas:

filetype:htpasswd htpasswd intitle:"Index of” “.htpasswd” -intitle:"dist” -apache -htpasswd.c index.of.private (algo privado) intitle:index.of master.passwd inurlasslist.txt (para encontrar listas de passwords) intitle:"Index of..etc” passwd intitle:admin intitle:login “Incorrect syntax near” (SQL script error) intitle:"the page cannot be found” inetmgr (debilidad en IIS4) intitle:index.of ws_ftp.ini “Supplied arguments is not a valid PostgreSQL result” (possible debilidad SQL) _vti_pvt password intitle:index.of (Frontpage) inurl:backup intitle:index.of inurl:admin “Index of /backup” index.of.password index.of.winnt


inurl:"auth_user_file.txt”

“Index of /admin”

“Index of /password”

“Index of /mail”

“Index of /” +passwd

Index of /” +.htaccess

Index of ftp +.mdb allinurl:/cgi-bin/ +mailto

allintitle: “index of/admin”

allintitle: “index of/root”

allintitle: sensitive filetypeoc

allintitle: restricted filetype :mail

allintitle: restricted filetypeoc site:gov

administrator.pwd.index

authors.pwd.index

service.pwd.index

filetype:config web

gobal.asax index

inurlasswd filetype:txt

inurl:admin filetypeb

inurl:iisadmin

inurl:"auth_user_file.txt”

inurl:"wwwroot/*.”

allinurl: winnt/system32/ (get cmd.exe)

allinurl:/bash_history

intitle:"Index of” .sh_history

intitle:"Index of” .bash_history

intitle:"Index of” passwd

intitle:"Index of” people.1st

intitle:"Index of” pwd.db

intitle:"Index of” etc/shadow

intitle:"Index of” spwd

intitle:"Index of” master.passwd

intitle:"Index of” htpasswd

intitle:"Index of” members OR accounts

intitle:"Index of” user_carts OR user _cart

Dorks para busqueda de shells:

safe-mode: off (not secure) drwxrwxrwx c99shell inurl:c99.php inurl:c99.php uid=0(root) root c99.php "Captain Crunch Security Team" inurl:c99 download c99.php download c99.php download c99.php inurl:c99.php inurl:c99.php allinurl: c99.php inurl:c99.php allinurl: c99.php inurl:"/c99.php" allinurl: c99.php inurl:c99.php inurl:"c99.php" c99shell inurl:c99.php uid=0(root) c99shell powered by admin c99shell powered by admin inurl:"/c99.php" inurl:c99.php inurl:c99.php inurl:c99.php c99 shell v.1.0 (roots) inurl:c99.php allintitle: "c99shell" inurl:"c99.php inurl:"c99.php allinurl: "c99.php" inurl:c99.php intitle:C99Shell v. 1.0 pre-release +uname intitle:C99Shell v. 1.0 pre-release +uname allinurl: "c99.php" inurl:c99.php inurl:"c99.php" inurl:"c99.php" inurl:c99.php inurl:c99.php inurl:c99.php inurl:c99.php inurl:"c99.php" c99shell inurl:c99.php inurl:"c99.php" allinurl:c99.php inurl:"/c99.php inurl:c99.php? inurl:/c99.php+uname allinurl:"c99.php" allinurl:c99.php inurl:"c99.php" inurl:"c99.php" allinurl:c99.php allinurl:c99.php? allinurl:c99.php? allinurl:c99.php? "inurl:c99..php" allinurl:c99.php c99shell [file on secure ok ]? inurl:c99.php inurl:c99.php inurl:c99.php inurl:c99.php inurl:c99.php inurl:c99.php inurl:c99.php inurl:c99.php powered by Captain Crunch Security Team allinurl:c99.php "c99.php" filetype:php allinurl:c99.php inurl:c99.php allinurl:.c99.php "inurl:c99.php" c99. PHP-code Feedback Self remove allinurl:c99.php download c99.php allinurl:c99.php inurl:c99.php allinurl: "c99.php" allinurl:c99.php allinurl:c99.php c99shell inurl:c99.php inurl:c99.php intitle:C99Shell v. 1.0 pre-release +uname allinurl:"c99.php" inurl:c99.php inurl:c99.php inurl:c99.php inurl:c99.php safe-mode: off (not secure) drwxrwxrwx c99shell inurl:/c99.php inurl:"c99.php" inurl:c99.php inurl:c99.php c99.php download inurl:c99.php inurl:"c99.php" inurl:/c99.php inurl:"c99.php?" inurl:c99.php inurl:c99.php files/c99.php c99shell filetype:php -echo c99shell powered by admin inurl:c99.php inurl:c99.php inurl:"c99.php" inurl:c99.php uid=0(root) allinurl:c99.php inurl:"c99.php" inurl:"c99.php" inurl:"/c99.php" intitle:"C99shell" inurl:"/c99.php" intitle:"C99shell" inurl:"/c99.php" intitle:"C99shell" C99Shell v. 1.0 pre-release build #5 inurl:c99.php inurl:c99.php --[ c99shell v. 1.0 pre-release build #16 c99shell linux infong c99shell linux infong C99Shell v. 1.0 pre-release build !C99Shell v. 1.0 beta! Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout !c99shell v. 1+Safe-mode: OFF (not secure) "C99Shell v. 1.0 pre-release build " intitle:c99shell +filetype:php inurl:c99.php intitle:C99Shell v. 1.0 pre-release +uname "Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout intitle:!C99Shell v. 1.0 pre-release build #16! root !C99Shell v. 1.0 pre-release build #5! inurl:"c99.php" C99Shell v. 1.0 pre-release build #16! c99shell v. 1.0 pre-release build #16 intitle:c99shell intext:uname allintext:C99Shell v. 1.0 pre-release build #12 c99shell v. 1.0 pre-release build #16 --[ c99shell v. 1.0 pre-release build #15 | Powered by ]-- allinurl: "c99.php" allinurl: "c99.php" Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout "c99shell v 1.0" ftp apache inurl:c99.php c99shell+v.+1.0 16 C99Shell v. 1.0 pre-release build #16 download intitle:c99shell "Software: Apache" allinurl: c99.php allintext: Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout powered by Captain Crunch Security Team powered by Captain Crunch Security Team !C99Shell v. 1.0 pre-release build #5! c99shell v. 1.0 release security c99shell v. 1.0 pre-release build inurl:c99.php c99shell [file on secure ok ]? C99Shell v. 1.3 Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout inurl:c99.php uid=0(root) powered by Captain Crunch Security Team C99Shell v. 1.0 pre-release build #16 c99shell[on file]ok c99shell[file on ]ok Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout inurl:c99.php "C99Shell v. 1.0 pre" =C99Shell v. 1.0 pre-release Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout c99shell v. pre-release build inurl:c99.php c99 shell inurl:c99.php c99 shell powered by Captain Crunch Security Team inurl:c99.php inurl:c99.php !C99Shell v. 1.0 pre-release build #5! intitle:"c99shell" filetype:php root intitle:"c99shell" Linux infong 2.4 C99Shell v. 1.0 beta ! C99Shell v. 1.0 pre-release build # inurl:"c99.php" allintext:C99Shell v. 1.0 pre-release build #12 "C99Shell v. 1.0 pre" powered by Captain Crunch Security Team Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout inurl:/c99.php? allinurl:c99.php intitle:C99Shell pre-release inurl:"c99.php" powered by Captain Crunch Security Team inurl:c99.php C99Shell v. 1.0 pre-release build #16! allinurl:c99.php C99Shell v. 1.0 pre-release build #16 administrator intitle:c99shell filetype:php powered by Captain Crunch Security Team powered by Captain Crunch Security Team C99Shell v. 1.0 pre-release build #12 c99shell v.1.0 allinurl:c99.php "c99shell v. 1.0 pre-release build" inurl:"c99.php" filetype:php "c99shell v. 1.0 " ok c99.php Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout c99shell v. 1.0 pre-release build #16 | !C99Shell v. 1.0 pre-release build #5! !C99Shell v. 1.0 pre-release build #5! allinurl:/c99.php powered by Captain Crunch Security Team inurl:c99.php Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout inurl:c99.php powered by Captain Crunch Security Team inurl:c99.php C99Shell v. 1.0 pre-release inurl:c99.php inurl:c99.php ext:php inurl:"c99.php" allinurl:"c99.php" Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout powered by Captain Crunch Security Team Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout" C99Shell v. 1.0 pre-release build #16 software apache Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout "c99shell v 1.0" inurl:"c99.php" allintitle: C99shell filetype:php C99Shell v. 1.0 pre-release build #16! "c99shell v. 1.0 pre-release" c99shell v. 1.0 pre-release build #5 allinurl:"c99.php" filetype:php Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout !C99Shell v. 1.0 pre-release build #16! inurl:c99.php intitle:C99Shell v. 1.0 pre-release +uname inurl:c99.php c99shell v. 1.0 allinurl: c99.php --[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | ]-- inurl:"/c99.php" c99shell +uname c99shell php + uname c99shell php + uname --[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | ]-- allinurl:c99.php !C99Shell v. 1.0 pre-release build #5! C99Shell v.1.0 pre-release Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout inurl:c99.php intitle:c99shell filetype:php "Encoder Tools Proc. FTP brute" "c99" filetype:php intext:"Safe-Mode: OFF" c99shell v. 1.0 pre inurl:c99.php intitle:c99shell uname -bbpress intitle:"index.of" c99.php inurl:admin/files/ intitle:"index of /" "c99.php" intitle:"index of" intext:c99.php intitle:index.of c99.php intitle:"index of" + c99.php