Web Hack Komutları

sid=19770;channel=22647;w=336;h=280;wmid=9627;doma in ="starhackz.com";kategori ="0";gosterim="BF";adsrv=1;arkaplan="FFFFFF";basli k="000000";aciklama="000000";kenarlik="123456";jsa i="35eb6b3e3c73c60d";


belki işinize yarar bunlar


A syntax error has occurred" filetype**html
"access denied for user" "using password"
"A syntax error has occurred" filetype**html
"access denied for user" "using password"
"Can’t connect to local" intitle:warning
"detected an internal error [IBM][CLI Driver][DB2/6000]"
"Fatal error: Call to undefined function"
"Incorrect syntax near"
"ORA-00933: SQL command not properly ended"
"PostgreSQL query failed: ERROR: parser: parse error"
"Supplied argument is not a valid MySQL result resource"
"Syntax error in query expression "
"Unclosed quotation mark before the character string"
"Warning: Cannot modify header information - headers already sent"
An unexpected token "END-OF-STATEMENT" was found
Coldfusion Error Pages
filetype:asp "Custom Error Message" Category Source
Internal Server Error
intitle:"Error Occurred" "The error occurred in" filetype:cfm
intitle:"Execution of this scri*t not permitted"
intitle:"Under construction" "does not currently have"
MYSQL error message: supplied argument....
mysql error with query
ORA-00921: unexpected end of SQL command
ORA-00936: missing expression
sitebuildercontent
sitebuilderfiles
sitebuilderpictures
SQL syntax error
Supplied argument is not a valid PostgreSQL result
warning "error on line" php sablotron

Kullanıcı İsimleri-Açıklama yapmaya gerek var mı? Kullanıcı isimlerini buluyor.
"index of" / lck
+intext:"webalizer" +intext:"Total Usernames" +intext:"Usage Statistics for"
bash_history files
filetypef inurlroftpd.conf -sample
filetype:log username putty
filetype:reg reg +intext:"internet account manager
filetype:reg reg HKEY_CURRENT_USER username
index.of perform.ini
inurl:admin filetype:asp inurl:userlist
inurl:admin inurl:userlist
inurlhp inurl:hlstats intext:"Server Username"
sh_history files

Şifreler-En önemli ayrıntılar...
allinurl: admin mdb
auth_user_file.txt
config.php
eggdrop filetype:user user
etc (index.of)
filetype:cfm "cfapplication name" password
filetypef slapd.conf
filetype:dat "password.dat"
filetype**nc intext:mysql_connect
filetype:log inurl:"password.log"
filetypeem intextrivate
filetyperoperties inurl:db intextassword
filetype:reg reg +intext:"defaultusername" +intext:"defaultpassword"
filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS
filetype:url +inurl:"ftp://" +inurl:";@"
filetype:xls username password email
htpasswd
htpasswd / htgroup
htpasswd / htpasswd.bak
intitle:"index of" intextnect.inc
intitle:"index of" intext:globals.inc
intitle**ndex.of administrators.pwd
intitle:Index.of etc shadow
intitle**ndex.of secring.pgp
inurl:"wvdial.conf" intext:"password"
inurlfig.php dbuname dbpass
inurlerform filetype**ni
inurl:vtund.conf intextass -cvs
master.passwd
mysql history files
passlist
passlist.txt (a better way)
passwd
passwd / etc (reliable)
people.lst

PGP Keys
pwd.db
spwd.db / passwd
trillian.ini

İlginç bilgiler: kullanıcı ismi ve şifre yok ama site hakkında önemli bilgilere ulaşabilirsiniz
"#mysql dump" filetype:sql
"generated by wwwstat"
"Host Vulnerability Summary Report"
"HTTP_FROM=googlebot" googlebot.com "Server_Software="
"Index of" / "chat/logs"
"Mecury Version" "Infastructure Group"
"Most Submitted Forms and Scripts" "this section"
"Network Vulnerability Assessment Report"
"not for distribution" confidential
"phpMyAdmin" "running on" inurl:"main.php"
"produced by getstats"
"Request Details" "Control Tree" "Server Variables"
"robots.txt" "Disallow:" filetype:txt
"robots.txt" "Disallow:" filetype:txt
"Running in Child mode"
"Thank you for your order" +receipt
"This is a Shareaza Node"
"This report was generated by WebLog"
AIM buddy lists
allinurl:/examples/jsp/snp/snoop.jsp
allinurl:servlet/SnoopServlet
cgiirc.conf
cgiirc.conf
filetype:blt blt +intext:screenname
filetypef inurl:firewall -intitle:cvs
filetype:eml eml +intext:"Subject" +intext:"From" +intext:"To"
filetype:lic lic intext:key
filetype:log access.log -CVS
filetype:mbx mbx intext:Subject
filetype:wab wab
haccess.ctl
ICQ chat logs, please...
iletype:log cron.log
intext:"Tobias Oetiker" "traffic analysis"
intitle:"Big Sister" +"OK Attention Trouble"
intitle:"index of" mysql.conf OR mysql_config
intitle:"statistics of" "advanced web statistics"
intitle:"System Statistics" +"System and Network Information Center"
intitle:"Usage Statistics for" "Generated by Webalizer"
intitle:"wbem" compaq login
intitle:admin intitle:login
intitle**ndex.of "Apache" "server at"
intitle**ndex.of cleanup.log
intitle**ndex.of dead.letter
intitle**ndex.of inbox
intitle**ndex.of inbox dbx
intitle**ndex.of ws_ftp.ini
intitle**ntranet inurl**ntranet +intext:"phone"
inurl:"/cricket/grapher.cgi"
inurl:"cacti" +inurl:"graph_view.php" +"Settings Tree View" -cvs -RPM
inurl:"newsletter/admin/"
inurl:"newsletter/admin/" intitle:"newsletter admin"
inurl:"smb.conf" intext:"workgroup" filetypef conf
inurl:admin filetype:xls
inurl:admin intitle:login
inurl:cgi-bin/printenv
inurl:changepassword.asp
inurl:fcgi-bin/echo
inurl:main.php phpMyAdmin
inurl:main.php Welcome to phpMyAdmin
inurlerl/printenv
inurlhp.ini filetype**ni
inurl:server-info "Apache Server Information"
inurl:server-status "apache"
inurl:tdbin
inurl:vbstats.php "page generated"
ipsec.conf
ipsec.secrets
ipsec.secrets
mt-db-pass.cgi files
mystuff.xml - Trillian data files
"phpinfo.php" -manual
"# phpMyAdmin MySQL-Dump" "INSERT INTO" -"the"
intitle**ndex.of robots.txt
site:edu admin grades
"# Dumping data for table"
"cacheserverreport for" "This analysis was produced by calamaris"
+htpasswd +WS_FTP.LOG filetype:log
intitle:admin intitle:login

Login Portalları-sisteme giriş kapıları
"please log in"
"VNC Desktop" inurl:5800
"Web Control Panel" "Enter your password here"
allinurl:"exchange/logon.asp"
intitle:"ColdFusion Administrator Login"
intitle:"Dell Remote Access Controller"
intitle:"MikroTik RouterOS Managing Webpage"
intitle:"Remote Desktop Web Connection" inurl:tsweb
inurl:":10000" intext:webmin
inurl:/admin/login.asp
inurl:/Citrix/Nfuse17/
inurl:citrix/****framexp/default/login.asp
inurl:login filetype:swf swf
inurl:login.asp
inurl:login.cfm
inurl:names.nsf?opendatabase
url:webadmin" filetype:nsf

Network bilgileri, firewall log’ları, IDS kayıtları
"Network Host Assessment Report" "Internet Scanner"
"SnortSnarf ale*t page"
"This file was generated by Nessus"
"This report lists" "identified by Internet Scanner"
filetypedf "Assessment Report" nessus
filetype:vsd vsd network -samples -examples
inurlhpSysInfo/ "created by phpsysinfo"

Önemli Klasörler
"index of cgi-bin"
"index of" inurl:recycler
"Welcome to phpMyAdmin" " Create new database"
index.of.password
intitle:"Index of c:Windows"
intitle:"Index of" cfide
intitle:"index.of.personal"
intitle**ntranet inurl**ntranet +intext:"human resources"
inurl:/pls/sample/admin_/help/
inurl:/tmp
inurl:backup intitle**ndex.of inurl:admin
inurl:j2ee/examples/jsp
inurljspdemos
"Index of /backup"
index.of.private
index.of.protected
index.of.secret
index.of.secure
index.of.winnt

Güvenlik Açığı Olan Sunucular
"Select a database to view" intitle:"filemaker pro"
"Welcome to Intranet"
"Welcome to PHP-Nuke" congratulations
"YaBB SE Dev Team"
allinurl**nstall/install.php
allinurl**ntranet admin
Gallery in configuration mode
Hassan Consulting’s Shopping Cart Version 1.18
intitle:"Gateway Configuration Menu"
intitle:"osCommerce" inurl:admin filetypehp
intitle:"Remote Desktop Web Connection"
intitle:"Samba Web Administration Tool" intext:"Help Workgroup"
intitle:"Terminal Services Web Connection"
inurl:footer.inc.php
inurl**nfo.inc.php
inurl:ManyServers.htm
inurlls/admin_/gateway.htm
inurl:search.php vbulletin

Web sunucularını öğrenmek
"seeing this instead" intitle:"test page for apache"
aboutprinter.shtml (More Xerox printers on the web!)
allintitle:Netscape FastTrack Server Home Page
intitle:"Apache HTTP Server" intitle:"********ation"
intitle:"Welcome to IIS 4.0"
index_i.shtml Ready (Xerox printers on the web!)
intitle:"300 multiple choices"
intitle:"Test Page for Apache"
intitle:"Test Page for Apache" "It Worked!"
intitle:"Test Page for Apache" "It Worked!" "on this web"
intitle:Snap.Server inurl:Func=
inurl:domcfg.nsf
inurl:tech-support inurl:show Cisco
"powered by openbsd" +"powered by apache"
intitle:"Welcome to Windows 2000 Internet Services

not:bunlar site sonlarına getirilecek kodlar