Full Disclosure: RE: Any thoughts on War-Googling?

[jay jay <fd () postmaster co uk>]

> It says something about using Google to target servers by searching 
> paths to vulnerabilities. 
>
> Any thoughts on that?
Hola,

i found out that the Google - " allinurl: " - option is optimal for this:

like:

allinurl: .php file= .txt 
allinurl: .php parse= 

Just do this with stupid common words, a good Web-Programmer would never use
as a parameter in the URL. Then it´s quite simple to view mostly anything
with ../../../ .... - so check your input ! ; ) 

Ciao

Jay


___________________________________________________ 
Reduce your company's IT costs today with Officemaster. Sign up for a free trial!

http://www.officemaster.net

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html