UNIVERSIDAD NACIONAL

SANTIAGO ANTNEZ DE MAYOLO

FACULTAD DE CIENCIAS
ESCUELA ACADMICO-PROFESIONAL
INGENIERA DE SISTEMAS E INFORMTICA

DESARROLLO DE MANUALES ACERCA DE GOOGLE

HACKING
TRABAJO PRCTICO

CURSO:

SEGURIDAD Y AUDITORA DE SISTEMAS DE INFORMACIN

PRESENTADO POR:

ZINNIA MEDALIT TINOCO CORPUS

DOCENTE:

Ing JOSEPH DARWIN ALVARADO TOLENTINO

HUARAZ - PERU

2017
1. FICHEROS CON USUARIOS Y CONTRASEAS.
1.1. ext:pwd inurl:(service | authors | administrators | users) # -FrontPage-

1.2. filetype:sql # dumping data for table `PASSWORD` varchar

1.3. intitle:index of Index of / password.txt

1.4. filetype:inc intext:mysql_connect password -please -could -port

1.5. filetype:sql MySQL dump (pass|password|passwd|pwd)

1.6. there are no administrators accounts yet create the Super User
inurl:admin.php
2. PGINAS CON FORMULARIOS DE ACCESO.
2.1. You have requested access to a restricted area of our website. Please
authenticate yourself to continue.

2.2. inurl::10000 webmin

2.3. VNC Desktop inurl:5800

2.4. intitle:vnc viewer for java

2.5. inurl:/admin/login.asp

2.6. allintitle:Outlook Web Access Logon

2.7. best idea is to create the super user now by clicking here

2.8. Wp-admin
3. FICHEROS CON NOMBRES DE USUARIO O MENSAJES DE ERROR QUE
REVELAN EL NOMBRE DE USUARIO.
3.1. access denied for user using password general error -inurl:phpbb sql
error
4. DETECCIN DE LA VERSIN SERVIDOR DE LA WEB O VERSIONES
PRODUCTOS VULNERABLES.
4.1. SquirrelMail version 1.4.4 inurl:src ext:php

4.2. Powered by MercuryBoard [v1

4.3. intitle:Welcome to Windows Small Business Server 2003

4.4. intitle:index.of Apache/* server at

4.5. intitle:index.of Microsoft-IIS/* server at
5. DISPOSITIVOS HARDWARE ONLINE.
5.1. camera linksys inurl:main.cgi

5.2. inurl:ViewerFrame?Mode=
5.3. active webcam page inurl:8080

5.4. intitle:toshiba network camera User Login

5.5. intitle:ivista main page
5.6. intitle:i-catcher console please visit

5.7. inurl:webarch/mainframe.cgi
 5.8. intitle:network print server filetype:shtm

6. FICHEROS CON INFORMACIN SENSIBLE O DIRECTORIOS SENSIBLES

DE UN SERVIDOR.
6.1. phone * * * address * e-mail intitle:curriculum vitae
6.2. filetype:ctt

6.3. robots.txt disallow: filetype:txt

6.4. allintitle:restricted filetype:doc site:gov

6.5. passwords|contraseas|login|contrasea filetype:txt site:web.pe

6.6. inurl:intranet filetype:doc confidential

6.7. Index of / chat/logs

6.8. index.of.dcim 300.000

6.9. intitle:index.of parent directory

6.10. intitle:index of Index of /

6.11. intitle:index of inurl:admin

 6.12. intitle:index.of passwd

7. INFORMACIN DE APOYO AL ACCESO.

7.1. Microsoft (R) Windows * (TM) Version * DrWtsn32 Copyright (C) ext:log
7.2. inurl::8080 -intext:8080

7.3. intitle:index.of ws_ftp.log

7.4. site:sitio.com -site:www.sitio.com

7.5. intitle:the page cannot be found please * * following Internet * Services

7.6. Site Digger

7.7. Wikto

7.8. Athena (de snakeoillabs.com)

7.9. Gooscan
8. HACKEANDO CON GOOGLE CREANDO NUESTROS DORKS.
8.1. Operador lgico NOT (-)

8.2. Operador lgico OR (|)

8.3. Operador lgico AND (+)

8.4. Operador lgico precisin de bsqueda ()