[Full-Disclosure] RE: Any thoughts on War-Googling?

[jay jay <fd@xxxxxxxxxxxxxxxx>]

>It says something about using Google to target servers by searching 
>paths to vulnerabilities. 
>
>Any thoughts on that?

Hola,

i found out that the Google - " allinurl: " - option is optimal for this:

like:

allinurl: .php file= .txt 
allinurl: .php parse= 

Just do this with stupid common words, a good Web-Programmer would never use
as a parameter in the URL. Then it´s quite simple to view mostly anything
with ../../../ .... - so check your input ! ; ) 

Ciao

Jay


___________________________________________________ 
Reduce your company's IT costs today with Officemaster. Sign up for a free 
trial!

http://www.officemaster.net

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html