tricks and techniques of Google Hacks ws_ftp.ini is a configuration file for a popular FTP client that stores usernames, (weakly) encoded passwords, sites and directories that the user can store for later reference. Theseshould not be on the web!That's some good stuff. Just copy/paste the text into your own WS FTP ini file and you're good as gold (assuming you're using the same version). Don't forget - even if they have taken the file offline, use the"cache:FULL_URL/wsftp.ini" to see the contents.probably one of the best exploits I have seen in a long time, when I did it there were about 20 vulnerable computers, just recently there was 4 so I hope whitehats got to this before anyone else.really nice !!
To see results; just write in the (http://www.google.com/) search engine the code:intitle:index.of ws_ftp.ini
==============================================Frontpage.. very nice clean search results listing !! I magine with me that you can steal or know the password of any web site designed by "Frontpage". But the file containing the password might be encrypted; to decrypt the file download the program " john the ripper".To see results; just write in the (http://www.google.com/) search engine the code:"# -FrontPage-" inurl:service.pwd
==============================================This searches the password for "WebsiteAccess Analyzer", a Japanese software that creates webstatistics.To see results; just write in the (http://www.google.com/) search engine the code:"AutoCreate=TRUE password=*"==============================================
This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the.com or .net.To see results; just write in the (http://www.google.com/) search engine the code:"http://*:*@www" bangbus or "http://*:*@www"bangbusOrhttp://bob:bob@wwwOrhttp://admin:*@www==============================================
0 comments:
Post a Comment