google hack

google hack

/**
  *语法
**/
allintext:验证码 4800
allintitle:后台登陆
cache:bit.edu.cn  //现在不能用了貌似
define:html
filetype:pdf
info:bit.edu.cn
allinurl:movie  //这个也用不了
link:nsfocus.com
site:nsfocus.com
related:nsfocus.com ///
-----
blue grass      //逻辑与
blue -grass     //非
blue or grass
"blue grass"
"bl?e gr?s"
blue grass +com
-----
http://www.googlesyndicatedsearch.com/u/berkeley

/**
 *入侵
**/
绝对的路径 输入保存的路径 输入文件的内容 inurl:diy.asp
inurl:asp?id=
inurl:php?id= site:sohu.com
to parent directory inurl:inetpub
to parent directory mdb -google

///eg
//filetype:mdb
http://proisk.ru/Northwind.mdb

//to parent directory mdb site:edu.cn
http://netcourse.cug.edu.cn:7310/cug/fire_control/INC/_VTI_CNF/
http://netcourse.cug.edu.cn:7310

//to parent directory "conn.asp" site:edu.cn
http://www.tijmu.edu.cn/cn/dxzhx/new/admin/

//inurl:/inc+conn.asp
------

/**
 *防范-----robot.txt
**/
intext:"User-agent:*" inurl:robot.txt
intext:"Mediapartners-Google" inurl:"robots.txt"
intext:"Disallow:" inurl:robots.txt
intext:"Allow:" inurl"robots.txt"

 

/**
 *常用
**/
allinurl:bbs data
filetype:mdb inurl:database/data
filetype:inc conn
intitile:"index of" data/sh_history/bash_history/passwd