Scribd
Upload
845 views5 pages

STEP 1:: Inurl:ftp "Password" Filetype:xls

This document provides instructions for finding passwords in unsecured files online. It describes searching for Excel files containing FTP usernames and passwords using a Google query. It also explains searching Google for source code files with database login credentials by looking for files with a ".yml" extension that contain database configuration details. The goal is to find credentials that allow accessing systems without authorization.

Uploaded by

Nurul Izzah II
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
845 views5 pages

STEP 1:: Inurl:ftp "Password" Filetype:xls

This document provides instructions for finding passwords in unsecured files online. It describes searching for Excel files containing FTP usernames and passwords using a Google query. It also explains searching Google for source code files with database login credentials by looking for files with a ".yml" extension that contain database configuration details. The goal is to find credentials that allow accessing systems without authorization.

Uploaded by

Nurul Izzah II
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 5

FILE CONTAINING PASSWORD Contain username,passwords,hashes.

s. This string may be used to find many low hanging fruit on FTP sites recently indexed by google. Locates files containing ftp username and password This returns xls files containing login names and passwords. It works by showing all the xls files with password. 1. STEP 1 : http://www.exploit-db.com/ghdb/3742/

2. Google search: inurl:ftp "password" filetype:xls

3. Choose the target system : ftp://nas.takming.edu.tw/upload/DocFolder/F200503230157.xls 4. Save file

5. Open the database

SOURCE CODE CONTAINING PASSWORD Google search for web site build with symfony framework. This file contains the login / password for the databases. In some case, the pages are examples that are found in discussion forum. However, in many cases these pages contain live sourcecode with usernames, database names or password in plaintext.

1. http://www.exploit-db.com/ghdb/3669/

2. Google search: inurl:config/databases.yml -trac -trunk -"Google Code" -source -repository

3. https://svn.univ-metz.fr/svnweb/index.cgi/.../config/databases.yml

You might also like