Google tricks & Other Tutorials: Google Secrets

Google Secrets - Part 2

Tuesday, July 24, 2007 by Madhukar Hiranya

Try these new secrets in google... copy the code to google search bar... u will be taken to new world of google....

--------------------------------------------------------------------------------------------------------------------

CODE

intitle:index.of "extension" +"filename" -htm -html -php -asp "Last Modified"

Replace the filename & extension by anything like songs name,...,etc.
This code makes google as file locator...
Use it download lot of premium softwares for free...
Note:
filename is case sensitive...
--------------------------------------------------------------------------------------------------------------------

CODE

intitle:"BadBlue: the file-sharing web server anyone can use"

Badblue file sharing web server detection
--------------------------------------------------------------------------------------------------------------------

CODE

"About Mac OS Personal Web Sharing"

Mac OS Personal Web Sharing allows Mac OS users to share Folders over the Web.
If you open this page you will shown the system's major version as requirement.
--------------------------------------------------------------------------------------------------------------------

CODE

Hit Jammer is a Unix compatible script that allows you to manage the content and traffic exchange and
make web changes, all without needing HTML. It is typicaly used by the underground sites on the Net
who "pay for surfing ads" and advertise spam services or software. An attacker can find these sites by
searching for the typical "powered by hit jammer !" frase on the bottom of the main page. Then if he
changes the URL to www.target.com/admin/admin.php he is taken to the admin panel. Hit Jammer
administrators are warned to protect this page with the .htaccess logon procedure, but many fail to do
just that. In such cases, customer information like email addresses and passwords are in clear view of
the attacker. Since human beings often use one simple password for many things this is a very dangerous
practice.
--------------------------------------------------------------------------------------------------------------------

CODE

intitle:"index of" trillian.ini

Trillian pulls together all sort of messaging clients like AIM MSN, Yahoo, IRC, ICQ, etc. The various
ini files that trillian uses include files like aim.ini and msn.ini. These ini files contain encoded passwords,
usernames, buddy lists, and all sorts of other fun things.
--------------------------------------------------------------------------------------------------------------------

CODE

inurl:passlist.txt

Cleartext passwords. No decryption required!
--------------------------------------------------------------------------------------------------------------------

CODE

filetype:dat "password.dat"

This file contains plaintext usernames and password. Deadly information in the hands of an attacker.

--------------------------------------------------------------------------------------------------------------------

CODE

"adding new user" inurl:addnewuser -"there are no domains"

Allows an attacker to create an account on a server running Argosoft mail server pro for windows with
unlimited disk quota (but a 5mb per message limit should you use your account to send mail).
--------------------------------------------------------------------------------------------------------------------

CODE

filetype:php HAXPLORER "Server Files Browser"

Haxplorer is a webbased filemanager which enables the user to browse files on the webserver. You can
rename, delete, copy, download and upload files. As the script's name says it is mostly installed by hackers
--------------------------------------------------------------------------------------------------------------------

CODE

intitle:MyShell 1.1.0 build 20010923

MyShell is a php program, allows you to execute commands remotely on whichever server it's hosted on.
--------------------------------------------------------------------------------------------------------------------

CODE

inurl:polly/CP

You can get into admin panel without logging.
--------------------------------------------------------------------------------------------------------------------

CODE

Searches for scripts that let you upload files which you can then execute on the server.
--------------------------------------------------------------------------------------------------------------------

CODE

(intitle:"SHOUTcast Administrator")|(intext:"U SHOUTcast D.N.A.S. Status")

SHOUTcast is a free-of-charge audio homesteading solution. It permits anyone on the internet to broadcast
audio from their PC to listeners across the Internet or any other IP-based network (Office LANs, college
campuses, etc.). SHOUTcast's underlying technology for audio delivery is MPEG Layer 3, also known as
MP3 technology. The SHOUTcast system can deliver audio in a live situation, or can deliver audio on-demand
for archived broadcasts.
--------------------------------------------------------------------------------------------------------------------

CODE

(inurl:81/cgi-bin/.cobalt/) | (intext:"Welcome to the Cobalt RaQ")

The famous Sun linux appliance. The default page displays this text: "Congratulations on Choosing a Cobalt
RaQ - the premier server appliance platform for web hosting. This page can easily be replaced with your own
page. To replace this page, transfer your new content to the directory /home/sites/home/web".

----------------------------

RELATED POST:-

Google secrets-Part1

http://goolge-search.blogspot.com/2007/06/google-secrets.html

20 Great Google Secrets

http://goolge-search.blogspot.com/2007/06/20-great-google-secrets.html

----------------------------