Gaffe à vos mots de passe, car c’est grave dangereux tout ce qu’on peut trouver avec Google
Voici quelques exemples trouvé au hasard du web…
| Recherche | Description |
|---|---|
| inurl:/db/main.mdb | ASP-Nuke passwords |
| filetype:cfm « cfapplication name » password | ColdFusion source with potential passwords |
| filetype:pass pass intext:userid | dbman credentials |
| allinurl:auth_user_file.txt | DCForum user passwords |
| eggdrop filetype:user user | Eggdrop IRC user credentials |
| filetype:ini inurl:flashFXP.ini | FlashFXP FTP credentials |
| filetype:url +inurl: »ftp:// » +inurl: »@ » | FTP bookmarks cleartext passwords |
| inurl:zebra.conf intext:password -sample -test -tutorial �??download | GNU Zebra passwords |
| filetype:htpasswd htpasswd | HTTP htpasswd Web user credentials |
| intitle: »Index of » « .htpasswd » « htgroup » -intitle: »dist » -apache -htpasswd.c | HTTP htpasswd Web user credentials |
| intitle: »Index of » « .htpasswd » htpasswd.bak | HTTP htpasswd Web user credentials |
| « http://*:*@www » bob:bob | HTTP passwords (bob is a sample username) |
| « sets mode: +k » | IRC channel keys (passwords) |
| « Your password is * Remember this for later use » | IRC NickServ registration passwords |
| signin filetype:url | JavaScript authentication credentials |
| LeapFTP intitle: »index.of./ » sites.ini modified | LeapFTP client login credentials |
| inurl:lilo.conf filetype:conf password -tatercounter2000 -bootpwd �??man | LILO passwords |
| filetype:config config intext:appSettings « User ID » | Microsoft .NET application credentials |
| filetype:pwd service | Microsoft FrontPage Service Web passwords |
| intitle:index.of administrators.pwd | Microsoft FrontPage Web credentials |
| « # -FrontPage- » inurl:service.pwd | Microsoft FrontPage Web passwords |
| ext:pwd inurl:_vti_pvt inurl:(Service | authors | administrators) | Microsoft FrontPage Web passwords |
| inurl:perform filetype:ini | mIRC nickserv credentials |
| intitle: »index of » intext:connect.inc | mySQL database credentials |
| intitle: »index of » intext:globals.inc | mySQL database credentials |
| filetype:conf oekakibbs | Oekakibss user passwords |
| filetype:dat wand.dat | Opera, �?úMagic Wand,�?ù Web credentials |
| inurl:ospfd.conf intext:password -sample -test -tutorial �??download | OSPF Daemon Passwords |
| index.of passlist | Passlist user credentials |
| inurl:passlist.txt | passlist.txt file user credentials |
| filetype:dat « password.dat » | password.dat files |
| inurl:password.log filetype:log | password.log file reveals usernames, passwords, and hostnames |
| filetype:log inurl: »password.log » | password.log files cleartext passwords |
| inurl:people.lst filetype:lst | People.lst generic password file |
| intitle:index.of config.php | PHP Configuration File database credentials |
| inurl:config.php dbuname dbpass | PHP Configuration File database credentials |
| inurl:nuke filetype:sql | PHP-Nuke credentials |
| filetype:conf inurl:psybnc.conf « USER.PASS= » | psyBNC IRC user credentials |
| filetype:ini ServUDaemon | servU FTP Daemon credentials |
| filetype:conf slapd.conf | slapd configuration files root password |
| inurl: »slapd.conf » intext: »credentials » -manpage - »Manual Page » -man: -sample | slapd LDAP credentials |
| inurl: »slapd.conf » intext: »rootpw » -manpage - »Manual Page » -man: -sample | slapd LDAP root password |
| filetype:sql « IDENTIFIED BY » �??cvs | SQL passwords |
| filetype:sql password | SQL passwords |
| filetype:ini wcx_ftp | Total Commander FTP passwords |
| filetype:netrc password | UNIX .netrc user credentials |
| index.of.etc | UNIX /etc directories contain various credential files |
| intitle: »Index of..etc » passwd | UNIX /etc/passwd user credentials |
| intitle:index.of passwd passwd.bak | UNIX /etc/passwd user credentials |
| intitle: »Index of » pwd.db | UNIX /etc/pwd.db credentials |
| intitle:Index.of etc shadow | UNIX /etc/shadow user credentials |
| intitle:index.of master.passwd | UNIX master.passwd user credentials |
| intitle: »Index of » spwd.db passwd -pam.conf | UNIX spwd.db credentials |
| filetype:bak inurl: »htaccess|passwd|shadow|htusers | UNIX various password file backups |
| filetype:inc dbconn | Various database credentials |
| filetype:inc intext:mysql_connect | Various database credentials, server names |
| filetype:properties inurl:db intext:password | Various database credentials, server names |
| inurl:vtund.conf intext:pass �??cvs | Virtual Tunnel Daemon passwords |
| inurl: »wvdial.conf » intext: »password » | wdial dialup user credentials |
| filetype:mdb wwforum | Web Wiz Forums Web credentials |
| « AutoCreate=TRUE password=* » | Website Access Analyzer user passwords |
| filetype:pwl pwl | Windows Password List user credentials |
| filetype:reg reg +intext: »defaultusername » intext: »defaultpassword » | Windows Registry Keys containing user credentials |
| filetype:reg reg +intext: »internet account manager » | Windows Registry Keys containing user credentials |
| « index of/ » « ws_ftp.ini » « parent directory » | WS_FTP FTP credentials |
| filetype:ini ws_ftp pwd | WS_FTP FTP user credentials |
| inurl:/wwwboard | wwwboard user credentials |
Flippant hein ?
Source Korben
Articles
