{"id":16,"date":"2017-01-18T12:07:28","date_gmt":"2017-01-18T11:07:28","guid":{"rendered":"http:\/\/itsec.andreas-klingler.de\/?p=16"},"modified":"2024-06-08T21:38:05","modified_gmt":"2024-06-08T19:38:05","slug":"information-gathering-via-google","status":"publish","type":"post","link":"https:\/\/infosec.andreas-klingler.de\/?p=16","title":{"rendered":"Information gathering"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">=&gt;<a href=\"https:\/\/www.exploit-db.com\/google-hacking-database\"> https:\/\/www.exploit-db.com\/google-hacking-database<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">=&gt; <a href=\"https:\/\/ahrefs.com\/blog\/google-advanced-search-operators\/\">https:\/\/ahrefs.com\/blog\/google-advanced-search-operators\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">=&gt; <a href=\"https:\/\/searchdns.netcraft.com\/\">https:\/\/searchdns.netcraft.com\/<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Github<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Search for file names with\u00adin repos of&nbsp;users:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">user:megacorpone filename:users<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Tools<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/github.com\/michenriksen\/gitrob\">Gitrob<\/a> \u2014 search\u00ading for sen\u00adsi\u00adtive&nbsp;data<\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/zricethezav\/gitleaks\">Gitleak<\/a> \u2014 scan\u00adning and&nbsp;more<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Google<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for direc\u00adto\u00adry listings:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">site:URL intitle:index.of<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for con\u00adfig\u00adu\u00adra\u00adtion&nbsp;files:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">site:URL ext:xml | ext:conf | ext:cnf | ext:reg | ext:inf | ext:rdp | ext:cfg | ext:txt | ext:ora | ext:ini<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for date\u00adbase&nbsp;files:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">site:URL ext:sql | ext:dbf | ext:mdb<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for log&nbsp;files:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">site:URL ext:log<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for back\u00adup&nbsp;files:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">site:URL ext:bkf | ext:bkp | ext:bak | ext:old | ext:backup<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for login and reg\u00adis\u00adter&nbsp;pages:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">site:URL [inurl:sign_in OR inurl:login OR inurl:signin OR inurl:sign_up OR inurl:register OR inurl:signup]<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for <span class=\"caps\">SQL<\/span> error&nbsp;pages:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">site:URL intext:\"sql syntax near\" | intext:\"syntax error has occurred\" | intext:\"incorrect syntax near\" | intext:\"unexpected end of SQL command\" | intext:\"Warning: mysql_connect()\" | intext:\"Warning: mysql_query()\" | intext:\"Warning: pg_connect()\"<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for some inter\u00adesst\u00ading file suffixes:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">site:URL ext:doc | ext:docx | ext:odt | ext:pdf | ext:rtf | ext:sxw | ext:psw | ext:ppt | ext:pptx | ext:pps | ext:csv<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for php information:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">site:URL ext:php intitle:phpinfo \"published by the PHP Group\"<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Look\u00ading for title&nbsp;match:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">intitle:\"Server Name Version\"<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Further Sources<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/netcraft.com\">Net\u00adcraft<\/a> \u2014 find\u00ading sub\u00addo\u00admains, net\u00adblocks etc.&nbsp;<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/searchdns.netcraft.com\/\">https:\/\/searchdns.netcraft.com\/<\/a> \u2014 Pas\u00adsive sub\u00addo\u00admain search.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>=&gt; https:\/\/www.exploit-db.com\/google-hacking-database =&gt; https:\/\/ahrefs.com\/blog\/google-advanced-search-operators\/ =&gt; https:\/\/searchdns.netcraft.com\/ Github Search for file names with\u00adin repos of&nbsp;users: user:megacorpone filename:users Tools Google Look\u00ading for direc\u00adto\u00adry list\u00adings: site:<span class=\"caps\">URL<\/span> intitle:index.of Look\u00ading for con\u00adfig\u00adu\u00adra\u00adtion&nbsp;files: site:<span class=\"caps\">URL<\/span> ext:xml | ext:conf | ext:cnf | ext:reg | ext:inf | ext:rdp | ext:cfg | ext:txt | ext:ora | ext:ini Look\u00ading for date\u00adbase&nbsp;files: site:<span class=\"caps\">URL<\/span> ext:sql | ext:dbf | [\u2026]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[469],"tags":[273,7,272],"class_list":["post-16","post","type-post","status-publish","format-standard","hentry","category-passive-enum","tag-google","tag-information-gathering","tag-netcraft"],"_links":{"self":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/16","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=16"}],"version-history":[{"count":12,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/16\/revisions"}],"predecessor-version":[{"id":3864,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/16\/revisions\/3864"}],"wp:attachment":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}