Scribd Logo
Upload

Welcome to Scribd!

  • STEP 1:: Inurl:ftp "Password" Filetype:xls

    Uploaded by

    Nurul Izzah II
    71 views5 pages
    This document provides instructions for finding passwords in unsecured files online. It describes searching for Excel files containing FTP usernames and passwords using a Google query. It also explains searching Google for source code files with database login credentials by looking for files with a ".yml" extension that contain database configuration details. The goal is to find credentials that allow accessing systems without authorization.

    Original Description:

    Original Title

    Asg 1 Hacking

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document provides instructions for finding passwords in unsecured files online. It describes searching for Excel files containing FTP usernames and passwords using a Google query. It also explains searching Google for source code files with database login credentials by looking for files with a ".yml" extension that contain database configuration details. The goal is to find credentials that allow accessing systems without authorization.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as docx, pdf, or txt
    71 views5 pages

    STEP 1:: Inurl:ftp "Password" Filetype:xls

    Uploaded by

    Nurul Izzah II
    This document provides instructions for finding passwords in unsecured files online. It describes searching for Excel files containing FTP usernames and passwords using a Google query. It also explains searching Google for source code files with database login credentials by looking for files with a ".yml" extension that contain database configuration details. The goal is to find credentials that allow accessing systems without authorization.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as docx, pdf, or txt
    of 5

    FILE CONTAINING PASSWORD Contain username,passwords,hashes.

    s. This string may be used to find many low hanging fruit on FTP sites recently indexed by google. Locates files containing ftp username and password This returns xls files containing login names and passwords. It works by showing all the xls files with password. 1. STEP 1 : http://www.exploit-db.com/ghdb/3742/

    2. Google search: inurl:ftp "password" filetype:xls

    3. Choose the target system : ftp://nas.takming.edu.tw/upload/DocFolder/F200503230157.xls 4. Save file

    5. Open the database

    SOURCE CODE CONTAINING PASSWORD Google search for web site build with symfony framework. This file contains the login / password for the databases. In some case, the pages are examples that are found in discussion forum. However, in many cases these pages contain live sourcecode with usernames, database names or password in plaintext.

    1. http://www.exploit-db.com/ghdb/3669/

    2. Google search: inurl:config/databases.yml -trac -trunk -"Google Code" -source -repository

    3. https://svn.univ-metz.fr/svnweb/index.cgi/.../config/databases.yml

    You might also like