Kiến thức Black Hat: dork

Dork for finding admin page

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1nV8Rw-E4ViSBX3RR-KdxMwKD062N6L1PhMSkJVbJ_tp3ALdaB_cuca7QHIkxtL9uOXvuUbVPYlw-OLEb108bPXnNsde2_a9ncqz85Qd9mh5CtmnBPs9iTXPb0HbU62WXLaJdfFBh-EUS/s1600/admin.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="144" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1nV8Rw-E4ViSBX3RR-KdxMwKD062N6L1PhMSkJVbJ_tp3ALdaB_cuca7QHIkxtL9uOXvuUbVPYlw-OLEb108bPXnNsde2_a9ncqz85Qd9mh5CtmnBPs9iTXPb0HbU62WXLaJdfFBh-EUS/s1600/admin.jpg" width="320" /></a></div> <blockquote class="tr_bq">ADMIN1.PHP ADMIN1.HTML ADMIN2.PHP ADMIN2.HTML YONETIM.PHP YONETIM.HTML YONETICI.PHP YONETICI.HTML ADMIN/ACCOUNT.PHP ADMIN/ACCOUNT.HTML ADMIN/INDEX.PHP ADMIN/INDEX.HTML ADMIN/LOGIN.PHP ADMIN/LOGIN.HTML ADMIN/HOME.PHP ADMIN/CONTROLPANEL.HTML ADMIN/CONTROLPANEL.PHP ADMIN.PHP ADMIN.HTML ADMIN/CP.PHP ADMIN/CP.HTML CP.PHP CP.HTML ADMINISTRATOR/ ADMINISTRATOR/INDEX.HTML ADMINISTRATOR/INDEX.PHP ADMINISTRATOR/LOGIN.HTML ADMINISTRATOR/LOGIN.PHP ADMINISTRATOR/ACCOUNT.HTML ADMINISTRATOR/ACCOUNT.PHP ADMINISTRATOR.PHP ADMINISTRATOR.HTML LOGIN.HTML MODELSEARCH/LOGIN.PHP MODERATOR.PHP MODERATOR.HTML MODERATOR/LOGIN.PHP MODERATOR/LOGIN.HTML MODERATOR/ADMIN.PHP MODERATOR/ADMIN.HTML ACCOUNT.PHP ACCOUNT.HTML CONTROLPANEL/ CONTROLPANEL.PHP CONTROLPANEL.HTML ADMINCONTROL.PHP ADMINCONTROL.HTML ADMINPANEL.PHP ADMINPANEL.HTML ADMIN1.ASP ADMIN2.ASP YONETIM.ASP YONETICI.ASP ADMIN/ACCOUNT.ASP ADMIN/INDEX.ASP ADMIN/LOGIN.ASP ADMIN/HOME.ASP ADMIN/CONTROLPANEL.ASP ADMIN.ASP ADMIN/CP.ASP CP.ASP ADMINISTRATOR/INDEX.ASP ADMINISTRATOR/LOGIN.ASP ADMINISTRATOR/ACCOUNT.ASP ADMINISTRATOR.ASP LOGIN.ASP MODELSEARCH/LOGIN.ASP MODERATOR.ASP MODERATOR/LOGIN.ASP MODERATOR/ADMIN.ASP ACCOUNT.ASP CONTROLPANEL.ASP ADMINCONTROL.ASP ADMINPANEL.ASP FILEADMIN/ FILEADMIN.PHP FILEADMIN.ASP FILEADMIN.HTML ADMINISTRATION/ ADMINISTRATION.PHP ADMINISTRATION.HTML SYSADMIN.PHP SYSADMIN.HTML PHPMYADMIN/ MYADMIN/ SYSADMIN.ASP SYSADMIN/ UR-ADMIN.ASP UR-ADMIN.PHP UR-ADMIN.HTML UR-ADMIN/ SERVER.PHP SERVER.HTML SERVER.ASP SERVER/ WP-ADMIN/ ADMINISTR8.PHP ADMINISTR8.HTML ADMINISTR8/ ADMINISTR8.ASP WEBADMIN/ WEBADMIN.PHP WEBADMIN.ASP WEBADMIN.HTML ADMINISTRATIE/ ADMINS/ ADMINS.PHP ADMINS.ASP ADMINS.HTML ADMINISTRIVIA/ DATABASE_ADMINISTRATION/ WEBADMIN/ USERADMIN/ SYSADMINS/ ADMIN1/ SYSTEM-ADMINISTRATION/ ADMINISTRATORS/ PGADMIN/ DIRECTADMIN/ STARADMIN/ SERVERADMINISTRATOR/ SYSADMIN/ ADMINISTER/ LIVEUSER_ADMIN/ SYS-ADMIN/ TYPO3/ PANEL/ CPANEL/ CPANEL/ CPANEL_FILE/ PLATZ_LOGIN/ RCLOGIN/ BLOGINDEX/ FORMSLOGIN/ AUTOLOGIN/ SUPPORT_LOGIN/ META_LOGIN/ MANUALLOGIN/ SIMPLELOGIN/ LOGINFLAT/ UTILITY_LOGIN/ SHOWLOGIN/ MEMLOGIN/ MEMBERS/ LOGIN-REDIRECT/ SUB-LOGIN/ WP-LOGIN/ LOGIN1/ DIR-LOGIN/ LOGIN_DB/ XLOGIN/ SMBLOGIN/ CUSTOMER_LOGIN/ USERLOGIN/ LOGIN-US/ ACCT_LOGIN/ ADMIN_AREA/ BIGADMIN/ PROJECT-ADMINS/ PHPPGADMIN/ PUREADMIN/ SQL-ADMIN/ OPENVPNADMIN/ WIZMYSQLADMIN/ VADMIND/ EZSQLITEADMIN/ HPWEBJETADMIN/ NEWSADMIN/ ADMINPRO/ LOTUS_DOMINO_ADMIN/ BBADMIN/ VMAILADMIN/ CCP14ADMIN/ IRC-MACADMIN/ BANNERADMIN/ SSHADMIN/ PHPLDAPADMIN/ MACADMIN/ ADMINISTRATORACCOUNTS/ ADMIN4_ACCOUNT/ ADMIN4_COLON/ RADMIND-1/ SUPER-ADMIN/ ADMINTOOLS/ CMSADMIN/ PHPSQLITEADMIN/ SERVER_ADMIN_SMALL/ DATABASE_ADMINISTRATION/ SYSTEM_ADMINISTRATION/</blockquote>

Dork for finding admin page

ADMIN1.PHP ADMIN1.HTML ADMIN2.PHP ADMIN2.HTML YONETIM.PHP YONETIM.HTML YONETICI.PHP YONETICI.HTML ADMIN/ACCOUNT.PHP ADMIN/ACCOUNT.HTML ADMIN...

List dork shop new

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjU21cPXfgnC6ZpPA9t72HvigZqhiEtsuuNmZt8yv-bdeMGw2baVloagi_2TajFCIi1bpzzy-vRlo-P4bDMB8np7fij45lHuQVdPNp63rbdo44GYAfmKRd4gvLW5jg6n2vsEHv4F03ug2a0/s1600/google-dork.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjU21cPXfgnC6ZpPA9t72HvigZqhiEtsuuNmZt8yv-bdeMGw2baVloagi_2TajFCIi1bpzzy-vRlo-P4bDMB8np7fij45lHuQVdPNp63rbdo44GYAfmKRd4gvLW5jg6n2vsEHv4F03ug2a0/s1600/google-dork.jpg" /></a></div> <blockquote class="tr_bq">store/description.php?iddesc= shop/category.php?cat_id= shopcafe-shop-product.php?bookId= shop/books_detail.php?bookID= store/index.php?cat_id= store.php?cat_id= storemanager/contents/item.php?page_code= order.asp?lotid= shop_display_products.php?cat_id= Sales/view_item.php?id= buy.asp? shop.asp?a= shop.asp?action= shop.asp?bookid= shop.asp?cartID= shop_details.asp?prodid= shopaddtocart.asp shopaddtocart.asp?catalogid= shopbasket.asp?bookid= shopbycategory.asp?catid= shopcart.asp?title= shopcreatorder.asp shopcurrency.asp?cid= shopdc.asp?bookid= shopdisplaycategories.asp shopdisplayproduct.asp?catalogid= shopdisplayproducts.asp shopexd.asp shopexd.asp?catalogid= shopping_basket.asp?cartID= shopprojectlogin.asp shopquery.asp?catalogid= shopremoveitem.asp?cartid= shopreviewadd.asp?id= shopreviewlist.asp?id= ShopSearch.asp?CategoryID= shoptellafriend.asp?id= shopthanks.asp shopwelcome.asp?title= store.asp?id= store_bycat.asp?id= store_listing.asp?id= store_ViewProducts.asp?Cat= store-details.asp?id= storefront.asp?id= storefronts.asp?title= storeitem.asp?item= StoreRedirect.asp?ID= view_cart.asp?title= view_detail.asp?ID= viewcart.asp?CartId= viewCart.asp?userID= viewCat_h.asp?idCategory= store/index.asp?cat_id= Sales/view_item.asp?id= store/home.asp?cat= shop.cfm?a=         shop.cfm?action=         shop.cfm?bookid=         shop.cfm?cartID=         shop_details.cfm?prodid=         shopaddtocart.cfm         shopaddtocart.cfm?catalogid=         shopbasket.cfm?bookid=         shopbycategory.cfm?catid=         shopcart.cfm?title=         shopcreatorder.cfm         shopcurrency.cfm?cid=         shopdc.cfm?bookid=         shopdisplaycategories.cfm         shopdisplayproduct.cfm?catalogid=         shopdisplayproducts.cfm         shopexd.cfm         shopexd.cfm?catalogid=         shopping_basket.cfm?cartID=         shopprojectlogin.cfm         shopquery.cfm?catalogid=         shopremoveitem.cfm?cartid=         shopreviewadd.cfm?id=         shopreviewlist.cfm?id=         ShopSearch.cfm?CategoryID=         shoptellafriend.cfm?id=         shopthanks.cfm  shopwelcome.cfm?title= specials.cfm?id=         store.cfm?id=         store_bycat.cfm?id=         store_listing.cfm?id=         Store_ViewProducts.cfm?Cat=         store-details.cfm?id=         storefront.cfm?id=         storefronts.cfm?title=         storeitem.cfm?item=         StoreRedirect.cfm?ID= </blockquote>

List dork shop new

store/description.php?iddesc= shop/category.php?cat_id= shopcafe-shop-product.php?bookId= shop/books_detail.php?bookID= store/index.php?cat_...

List dork shop 2015

<blockquote class="tr_bq"> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-1mxg-w1VZegeAqKKjZcJ_LcCKPcAGvk18v-ucnRxOyVE2D0RdQWnGr8Vjnym5RcpP75ZsQu9i7Fj5-JVx8daJjuZwG_cPWPxWlxTS01vJTY_KOLDKYYoxtcDvVy_ThQSwlGIq72YK5rp/s1600/dork.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-1mxg-w1VZegeAqKKjZcJ_LcCKPcAGvk18v-ucnRxOyVE2D0RdQWnGr8Vjnym5RcpP75ZsQu9i7Fj5-JVx8daJjuZwG_cPWPxWlxTS01vJTY_KOLDKYYoxtcDvVy_ThQSwlGIq72YK5rp/s1600/dork.jpg" /></a></div></blockquote> <blockquote class="tr_bq">inurl:".php?catid=" intext:"View cart" inurl:".php?catid=" intext:"Buy Now" inurl:".php?catid=" intext:"add to cart" inurl:".php?catid=" intext:"shopping" inurl:".php?catid=" intext:"boutique" inurl:".php?catid=" intext:"/store/" inurl:".php?catid=" intext:"/shop/" inurl:".php?catid=" intext:"Toys"</blockquote>

List dork shop 2015

inurl:".php?catid=" intext:"View cart" inurl:".php?catid=" intext:"Buy Now" inurl:".php?catid=...

Google Hacking Database 2015

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgALwMHk0ivoxZfzZdLxkESUc9bbygoKEW2dpEw78ho6PdCPOlDkhnhiFT0njCreKhtB6S6Pji_hdQTbsGlygCJPHzibu4dCi-Bv8QD2JmyHNmzJ8bCeukYCQo4C9r0ZZzvXUVEUTRnU9dW/s1600/Google+Hacking+data+Base.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="128" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgALwMHk0ivoxZfzZdLxkESUc9bbygoKEW2dpEw78ho6PdCPOlDkhnhiFT0njCreKhtB6S6Pji_hdQTbsGlygCJPHzibu4dCi-Bv8QD2JmyHNmzJ8bCeukYCQo4C9r0ZZzvXUVEUTRnU9dW/s1600/Google+Hacking+data+Base.PNG" width="400" /></a></div> 1. File chứa mật khẩu <blockquote class="tr_bq">inurl:"security/xamppdirpasswd.txt"inurl:yahoo_site_admin/credentials/ "automatic teller" "operator manual" "password" filetype:pdf inurl:ws_ftp.ini "[WS_FTP]" filetype:ini </blockquote><blockquote>xamppdirpasswd.txt filetype:txt inurl:typo3conf/localconf.php inurl:/backup intitle:index of backup intext:*sql ext:sql intext:@gmail.com intext:password ext:sql intext:@hotmail.com intext :password filetype:config inurl:web.config inurl:ftp</blockquote>  2. Thư mục nhạy cảm <blockquote class="tr_bq">"Config" intitle:"Index of" intext:vpn "jos_users" intitle:"Index of" inurl:/cgi-bin/.cgi allinurl:/hide_my_wp= intitle:"index of" intext:".ds_store" intitle:"index of" myshare</blockquote> 3. Tập tin chứa thông tin nhạy cảm <blockquote class="tr_bq">filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www ext:pem intext:BEGIN CERTIFICATE ext:log telnet intext:password ext:msg OR ext:eml site:gov OR site:edu filetype:log intext:org.apache.hadoop.hdfs "google confidential" filetype:pdf inurl:"/server-info" intext:"Loaded Modules" inurl:"installer-log.txt" intext:"DUPLICATOR INSTALL-LOG" filetype:mobileconfig intext:password OR intext:pass ext:txt inurl:gov intext:"Content-Type: text/plain; charset=utf-8" AND intext:"Received: from " filetype:sql site:gov and "insert into" intext:phpMyAdmin SQL Dump filetype:sql intext:INSERT INTO `admin` (`id`, `user`, `password`) VALUES -github (intext:mail AND intext:samAccountName) AND (filetype:xlsx OR filetype:xls OR filetype:csv OR filetype:txt) inurl:crossdomain filetype:xml intext:allow-access-from</blockquote> 4. Lỗ hổng <blockquote class="tr_bq">inurl:fckeditor -intext:"ConfigIsEnabled = False" intext:ConfigIsEnabled intitle:"pChart 2.x - examples" intext:"2.1.3"</blockquote> 5. Vulnerable Servers <blockquote class="tr_bq">inurl:/elfinder/elfinder.html+intitle:"elFinder 2.0" inurl:robots.txt intext:CHANGELOG.txt intext:disallow ext:txt -site:github.com inurl:CHANGELOG.txt intext:drupal intext:"SA-CORE" -intext:7.32 -site:github.com -site:drupal.org ext:cgi inurl:cgi-bin intext:#!/bin/bash "OpenSSL" AND "1.0.1 Server at" OR "1.0.1a Server at" OR "1.0.1b Server at" OR "1.0.1c Server at" OR "1.0.1d Server at" OR "1.0.1e Server at" OR "1.0.1f Server at" inurl:"/reports/rwservlet" intext:"Oracle"</blockquote>

Google Hacking Database 2015

1. File chứa mật khẩu inurl:"security/xamppdirpasswd.txt"inurl:yahoo_site_admin/credentials/ "automatic teller" "...

SQL Dork List 2015

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNHzy0lFOiLdjPA1jCC0XOPyb3zZIKItS1vrJhhsZJdae6Ktkw0mnW7aCJLhSZVS5cqsckmNWXpGjUZr6dyeiQXh_5ud0QhSGMckLWNGxpm0xFTQ7ngWS-hgqT_BMtJd8T6_mGUxO67fYN/s1600/sql.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNHzy0lFOiLdjPA1jCC0XOPyb3zZIKItS1vrJhhsZJdae6Ktkw0mnW7aCJLhSZVS5cqsckmNWXpGjUZr6dyeiQXh_5ud0QhSGMckLWNGxpm0xFTQ7ngWS-hgqT_BMtJd8T6_mGUxO67fYN/s1600/sql.png" width="320" /></a></div> <div style="text-align: center;"><a href="http://link5s.com/A4N" rel="nofollow" target="_blank">DOWNLOAD</a></div><div style="text-align: center;"> </div><div style="text-align: center;">Pass unrar:  quylevhb.blogspot.com</div>

SQL Dork List 2015

DOWNLOAD Pass unrar: quylevhb.blogspot.com

GOOGLE DORKS USED FOR HACKING

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1YT23nT8t7B14yyZ2wHYr33nEcS4iTxfA2ecVbw4ppPhur5VPjLmokXlN88MF0zriHSRd_nAzcrAeJ6taepfzsLzk5kEQpyM_4Vx3LsnYw_FxWd-LvQ4jAKUQhOf6T0JF-3oGw8DJO42s/s1600/Google-Dorks.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1YT23nT8t7B14yyZ2wHYr33nEcS4iTxfA2ecVbw4ppPhur5VPjLmokXlN88MF0zriHSRd_nAzcrAeJ6taepfzsLzk5kEQpyM_4Vx3LsnYw_FxWd-LvQ4jAKUQhOf6T0JF-3oGw8DJO42s/s1600/Google-Dorks.jpg" /></a></div> Dork to open live Home and office Cameras <blockquote class="tr_bq">intitle:"Live View / - Axis" inurl:indexFrame.shtml "Axis Video Server" inurl:LvAppl Intitle:liveapplet intitle:"WJ-NT104 Main" intitle:"snc-rz30 home"</blockquote> Dork for Un-Spidered Sites <blockquote class="tr_bq">"robots.txt" "disallow:" filetype:txt</blockquote> Dork for Front page user info <blockquote class="tr_bq">inurl:_vti_pvt "services.pwd"</blockquote> Dork for PHP Phot-Album <blockquote class="tr_bq">inurl:"phpphotoalbum/upload"</blockquote> Dork for VNC user info <blockquote class="tr_bq">"vnc desktop" inurl:5800</blockquote> Networked printers <blockquote class="tr_bq">inurl:"port_255" -htm</blockquote> PHP Admin accounts <blockquote class="tr_bq">intitle:phpMyAdmin "Welcome to phpMyAdmin ****"running on * as root@**</blockquote>

GOOGLE DORKS USED FOR HACKING

Dork to open live Home and office Cameras intitle:"Live View / - Axis" inurl:indexFrame.shtml "Axis Video Server" inurl:...