Google hack

Teknik membongkar celah di google
------------------------------------------
menjebol privacy no autenticated and all hack


Apapun kesulitan anda google 90% dapat membantu anda, akan menjadi 99% jika anda mau berusaha, dan 100% jika anda memiliki 1% yang beral dari keberuntungan anda. Dengan google kita dapat cari beasiswa, online-store, exploit, literatur, berita, help, program, ataupun mempromosikan website kita. Pada artikel ini saya akan mencoba menerangkan sisi buruk dengan adanya www.google.com yang dapat menyebabkan server kita dapat di ?CRACK? no ?HACK? oleh tangan-tangan baik yang ingin mencari sesuatu yang baru. Kita dapat sangat diuntungkan dengan google tapi dapat pula sangat dirugikan. Tapi saya kira rekan pembaca sekalian ,artikel ini kebanyakan orang yang pengen diuntungkan dengan adanya google ?

---=| ? ? p L F ? ? ? ---

Ready....., siaaapppp, mari kita lihat sisi buruk google dan juga keajaibanya bersama-sama. ok
Yang perlu anda lakukan :

1. Belajar mengetik dan membaca menggunakan computer ?
2. Koneksi internet
3. Program browser terserah, dan program wajib irc untuk konek ke YKPN dan linkhacker buat cari gbt ?
4. Baca berita di bawah ini
------------------------------------------------------------------------------------------------
Karena sulit untuk dijelaskan, maka langsung contoh saja :

Masukkan kata kunci "index of/root"
http://www.google.com/search?hl=en&ie=UTF-...G=Google+Search
akan menghasilkan 4850 halaman yang berisi "index of/root"

keterangan : tanda ? ? digunakan untuk menyertakan semua kata di dalam tanda ? ? dan berurutan untuk mencari
index of/root kemungkinan besar adalah webroot dari suatu server

Ok, dengan kata kunci tersebut anda tahu apa yang anda dapatkan ?. Kata kunci apa saja yang menghasilkan sesuatu yang mendebarkan :

-------------------------------------------------------------------------------------

"Index of /admin"
"Index of /phpshell.php"
"Index of /cgitelnet.pl"
"Index of /album.pl"
"Index of /order"
"Index of /payment"
"Index of /password"
"Index of /mail" <<>
"Index of /" +passwd <<>
"Index of /" +password.txt
"Index of /" +.htaccess
index of ftp +.mdb allinurl:/cgi-bin/ +mailto

dan masih banyak lagi tergantung anda niat apa tidak ?

------------------------------------------------------------------------------------------

Sekarang model kata kunci lainnya :

Masukkan kata kunci inurl:"shop.mdb? ( mencari link dari suatu website yg menyertakan kata shop.mdb )

--------------------------------------------------------------------------------------------

http://www.google.com/search?hl=en&lr=&ie=...A%22shop.mdb%22

akan menghasilkan 47 halaman yang membikin kita penasaran. Beberapa kata kuci yang bikin kita penasaran :


allintitle: "index of/admin"
allintitle: "index of/root"
allintitle: sensitive filetype:doc
allintitle: restricted filetype :mail
allintitle: restricted filetype:doc site:gov
inurl:passwd filetype:txt
inurl:admin filetype:db
inurl:iisadmin
inurl:"auth_user_file.txt"
inurl:"wwwroot/*."
top secret site:mil
confidential site:mil allinurl: winnt/system32/ (get cmd.exe)
allinurl:/bash_history
intitle:"Index of" .sh_history
intitle:"Index of" .bash_history
intitle:"index of" passwd
intitle:"index of" people.lst
intitle:"index of" pwd.db
intitle:"index of" etc/shadow
intitle:"index of" spwd
intitle:"index of" master.passwd
intitle:"index of" htpasswd
intitle:"index of" members OR accounts
intitle:"index of" user_carts OR user_cart



ALTERNATIVE INPUTS====================


_vti_inf.html
service.pwd
users.pwd
authors.pwd
administrators.pwd
shtml.dll
shtml.exe
fpcount.exe
default.asp
showcode.asp
sendmail.cfm
getFile.cfm
imagemap.exe
test.bat
msadcs.dll
htimage.exe
counter.exe
browser.inc
hello.bat
default.asp\
dvwssr.dll
cart32.exe
add.exe
index.jsp
SessionServlet
shtml.dll
index.cfm
page.cfm
shtml.exe
web_store.cgi
shop.cgi
upload.asp
default.asp
pbserver.dll
phf
test-cgi
finger
Count.cgi
jj
php.cgi
php

nph-test-cgi
handler
webdist.cgi
webgais
websendmail
faxsurvey
htmlscript
perl.exe
wwwboard.pl
www-sql
view-source
campas
aglimpse
glimpse
man.sh
AT-admin.cgi
AT-generate.cgi
filemail.pl
maillist.pl
info2www
files.pl
bnbform.cgi
survey.cgi
classifieds.cgi
crap
cgiwrap
edit.pl
perl
names.nsf
webgais
dumpenv.pl
test.cgi
submit.cgi
guestbook.cgi
guestbook.pl
cachemgr.cgi
responder.cgi
perlshop.cgi
query
w3-msql
plusmail
htsearch
infosrch.cgi
publisher
ultraboard.cgi
db.cgi
formmail.cgi
allmanage.pl
ssi
adpassword.txt
redirect.cgi
cvsweb.cgi
login.jsp
dbconnect.inc
admin
htgrep
wais.pl
amadmin.pl
subscribe.pl
news.cgi
auctionweaver.pl
.htpasswd
acid_main.php
access.log
log.htm
log.html
log.txt
logfile
logfile.htm
logfile.html
logfile.txt
logger.html
stat.htm
stats.htm
stats.html
stats.txt
webaccess.htm
wwwstats.html
source.asp
perl
mailto.cgi
YaBB.pl
mailform.pl
cached_feed.cgi
global.cgi
Search.pl
build.cgi
common.php
show
global.inc
ad.cgi
WSFTP.LOG
index.html~
index.php~
index.html.bak
index.php.bak
print.cgi
register.cgi
webdriver
bbs_forum.cgi
mysql.class
sendmail.inc
CrazyWWWBoard.cgi
search.pl
way-board.cgi
webpage.cgi
pwd.dat
adcycle
post-query
help.cgi

masih kurang friend.....^_^, ni wa tambahin
-------------------------------------
------------------------------------= Index--------------------------------------

0) Key
1) Directories
2) Xitami Servers
3) Directory Listing
4) Andromeda Servers
5) Zina Artists
6) Apache mp3 Servers
7) Individual Songs

------------------------------------= Section 0 - KEY--------------------------------------

You this are just some definitions I will use below.[Directory String] can be any of the following :
1) "index of"
2) "last modified"
3) "parent of"
[file type] can be any of the following :
1) "mp3"
2) "shn"
3) "wma"
[mp3 name] can be any of the following :
1) the name of the album in quotes
2) the name of the artist in quotes
3) be daring and leave it blank and have lots of links
4) be creative!
[limitors]
1) -html -htm -php -asp -txt -pls
(inurl:) is optional and may be omitted and in fact most beomitted if not using a search tool other than google.
(intitle:) can be used in place of
(inurl:) and has a similar effectagain you must be useing google.
(-filetype:txt) adding this to the end of your search string canfilter some false positives.
(-playlist) adding this to the end of your search string canfilter some false positives.

------------------------------------= Section 1 - Directories--------------------------------------

These are the most common way that mp3s are stored on the www, youshould try these strings first.
String Format :
Type 1 : [Directory String] + (inurl:)[file type] + [mp3 name]
Type 2 : [Directory String] + (intitle:)[file type] + [mp3 name]
Type 3 : [Directory String] + [file type] + [mp3 name] + [limitors]

Example Strings :
- intitle:index.of + mp3 + "grandaddy" -html -htm -php -asp -txt -pls
- "index of" + "mp3" + "radiohead" -html -htm -php
- "index of" + mp3 + "grandaddy"
- "index of" + inurl:mp3 + "beatles" -txt -pls
- "index of" + intitle:mp3 + beatles
- "last modified" + "shn" + "dylan"
- "last modified" + inurl:shn + "bob dylan"
- "parent of" + inurl:wma + "grandaddy"
Suggestions :
- Try (intitle:index.of + "mp3" + "band name" -htm -html -php -asp)
first it is usually the most effective.

Another Little Trick:
- If you have been getting alot of results on google but the pages don't seem
to be there try adding dates and the "apache" string to your search i.e.

- intitle:index.of + mp3 + "grandaddy" -html -htm -php -asp apache feb-2005
- intitle:index.of + mp3 + "grandaddy" -html -htm -php -asp apache 2005

or if you just want a big list of mp3' doing a search like this everymonth
- intitle:index.of + mp3 + -html -htm -php -asp apache mar

------------------------------------= Section 2 - Xitami Servers--------------------------------------

String Format :
Type 1 : "xitami web server" + (inurl:)[file type] + [mp3 name]
Type 2 : "xitami web server" + (intitle:)[file type] + [mp3 name]

Example Strings :
- "xitami web server" + "mp3" + "radiohead"
- "xitami web server" + intitle:shn + "beatles"
- "xitami web server" + inurl:mp3 + "magnetic fields"

------------------------------------= Section 3 - Directory Listing--------------------------------------

String Format :
Type 1 : "directory listings" + (inurl:)[file type] + [mp3 name]
Type 2 : "directory listings" + (intitle:)[file type] + [mp3 name]
Type 3 : "directory listings of" + (inurl:)[file type] + [mp3 name]
Type 4 : "directory listings of" + (intitle:)[file type] + [mp3 name]

Example Strings
- "directory listings" + "mp3" + "radiohead"
- "directory listings" + intitle:shn + "beatles"
- "directory listings" + inurl:mp3 + "magnetic fields"
- "directory listings of" + "mp3" + "radiohead"
- "directory listings of" + intitle:shn + "beatles"
- "directory listings of" + inurl:mp3 + "magnetic fields"

------------------------------------= Section 4 - Andromeda Servers--------------------------------------

String Format :
Type 1 : "scott matthews" + andromeda + [mp3 name]
Type 2 : "scott matthews" + andromeda + [file type] + [mp3 name]
Type 3 : "powered by andromeda" + [mp3 name]
Type 4 : "powered by andromeda" + [file type] + [mp3 name]
Type 5 : inurl:andromeda.php + [mp3 name]
Type 6 : inurl:anromeda.php + [file type] + [mp3 name]
Type 7 : "scott matthews"
Type 8 : "powered by andromeda"
Type 9 : inurl:andromeda.php

Examples :
- "scott matthews" + andromeda + "radiohead"
- "scott matthews" + andromeda + "mp3" + "fitter"
- "powered by andromeda" + "gradaddy"
- "powered by andromeda" + "mp3" + "just like women"
- inurl:andromeda.php + "shn"
- inurl:anromeda.php + "wma" + "dylan"- "scott matthews"
- "powered by andromeda"- inurl:andromeda.php

------------------------------------= Section 5 - Zina Artists--------------------------------------

String Format :
Type 1 : "zina artists"

Examples :- "zina artists"

------------------------------------= Section 6 - Apache mp3 Servers--------------------------------------

String Format :
Type 1 : "stream all" + apache + [mp3 name]
Type 2 : "stream all" + apache
Type 3 : "shuffle all" + apache + [mp3 name]
Type 4 : "shuffle all" + apache

Examples :
- "stream all" + apache- "stream all" "shuffle all" mp3
- "stream all" + apache + radiohead
- "shuffle all" + beatles

------------------------------------= Section 7 - Individual Songs--------------------------------------

Format : [mp3 name].mp3 -playlist -filetype:txt

Examples :
- "ok_computer_live.mp3" -playlist -filetype:txt
- "*ok_computer*.mp3" -playlist -filetype:txt
- kid*a.mp3 -playlist -filetype:txtGOOD LUCK!!email me at






++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++
================================================================================
======
Google hacking at its finest.. ( teori trik carding dalam google " tidak disarankan )

Using Google, and some finely crafted searches we can find a lot of interesting information.

For Example we can find:
Credit Card Numbers
Passwords
Software / MP3's
...... (and on and on and on) Presented below is just a sample of interesting searches that we can send to google to obtain info that some people might not want us having.. After you get a taste using some of these, try your own crafted searches to find info that you would be interested in.

Try a few of these searches:
intitle:"Index of" passwords modified
allinurl:auth_user_file.txt
"access denied for user" "using password"
"A syntax error has occurred" filetype:ihtml
allinurl: admin mdb
"ORA-00921: unexpected end of SQL command"
inurl:passlist.txt
"Index of /backup"
"Chatologica MetaSearch" "stack tracking:"


Amex Numbers: 300000000000000..399999999999999
MC Numbers: 5178000000000000..5178999999999999
visa 4356000000000000..4356999999999999


"parent directory " /appz/ -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory "Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " MP3 -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

"parent directory " Name of Singer or album -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

Notice that I am only changing the word after the parent directory, change it to what you want and you will get a lot of stuff.

METHOD 2

put this string in google search:

?intitle:index.of? mp3

You only need add the name of the song/artist/singer.

Example: ?intitle:index.of? mp3 jackson

METHOD 3

put this string in google search:

inurl:mikocok filetype:iso

You can change the string to watever you want, ex. mikocok to adobe, iso to zip etc?


"# -FrontPage-" inurl:service.pwd
Frontpage passwords.. very nice clean search results listing !!

"AutoCreate=TRUE password=*"
This searches the password for "Website Access Analyzer", a Japanese software that creates webstatistics. For those who can read Japanese, check out the author's site at: http://www.coara.or.jp/~passy/

"http://*:*@www" domainname
This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net

"http://*:*@www" bangbus or "http://*:*@www"bangbus

Another way is by just typing
"http://bob:bob@www"

"sets mode: +k"
This search reveals channel keys (passwords) on IRC as revealed from IRC chat logs.

allinurl: admin mdb
Not all of these pages are administrator's access databases containing usernames, passwords and other sensitive information, but many are!

allinurl:auth_user_file.txt
DCForum's password file. This file gives a list of (crackable) passwords, usernames and email addresses for DCForum and for DCShop (a shopping cart program(!!!). Some lists are bigger than others, all are fun, and all belong to googledorks. =)


intitle:"Index of" config.php
This search brings up sites with "config.php" files. To skip the technical discussion, this configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database.

eggdrop filetype:user user
These are eggdrop config files. Avoiding a full-blown descussion about eggdrops and IRC bots, suffice it to say that this file contains usernames and passwords for IRC users.

intitle:index.of.etc
This search gets you access to the etc directory, where many many many types of password files can be found. This link is not as reliable, but crawling etc directories can be really fun!

filetype:bak inurl:"htaccess|passwd|shadow|htusers"
This will search for backup files (*.bak) created by some editors or even by the administrator himself (before activating a new version).
Every attacker knows that changing the extenstion of a file on a webserver can have ugly consequences.


Let's pretend you need a serial number for windows xp pro.

In the google search bar type in just like this - "Windows XP Professional" 94FBR

the key is the 94FBR code.. it was included with many MS Office registration codes so this will help you dramatically reduce the amount of 'fake' porn sites that trick you.




++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++

Tips of the day #12 - Converting .rm To .mp3
Ok for the people having problems with Streambox ripper Ill make it simple for you.

What you Need to Convert Real Audio Files
-------------
1. Either Real G2 Player(Dl Here)
http://software-dl.real.com/291e6043451322...r32_g20_3sm.exe
2. RealPlayer 10*(Dl Here)
http://www.real.com/
3. Streambox Ripper(Dl Here)
http://www.geocities.com/rmrippers/Streambox_Ripper.zip

Ok Lets get started install all programs(If you are using realplayer 10 check the bottom for streambox fix)



Ok Now this is the front of the ripper, now there are 2 ways to convert..Track by Track or Batch Files

1st: Track By Track
----------------
A. Drag the File over the front of the Ripper, then click convert.

2nd: Batch
----------------
A. Click the Batch button.lol



Ok Now this is where you should be at now

1. Track By Track:
----------------
A.) Change the Destination Directory to wherever you want the mp3 to go.
B.) Change the Encode output to Mp3
C.) Sampling Rate to 44100
D.) Channels to Stereo
E.) Birate 192(For best quality)
F.) Click ok......Done

2. Batch:
----------------
A.) Change the Input to the folder where the Files are
B.) Change the Output folder you want the Mp3s to go
C.) Put a Check in RM, RA, RMM
D.) Change the output to Mp3
E.) Custom Quality
F.) Rate 44100
G.) Birate 192
H.) Channels Stereo
I.) Click ok....Done
-----------------

Ok now you can encode to Wav and burn straight to cd, but if you want quality, convert to mp3, then Wav using burner software.
**RAM FILE EXTENTIONS ARE STILL REAL AUDIO, BUT STREAMBOX RIPPER DOES NOT BATCH CONVERT THESE, YOU MUST DO THEM TRACK BY TRACK**

*If your using realplayer 10 you have to follow these steps for streambox to run*
-------------------
1. Open Folder C:Program FilesCommon FilesRealCodecs
2. Right Click on cook.dll and click copy
3. Now paste the copy in the same folder
4. Rename the copy to cook3260.dll
5. Now refresh and it should work fine.

-------------------

semoga uraian saya bermanfaat...pergunakan yang baik2 aja ya

peace , love , invinity