tailieunhanh - Google hacking for penetration tester - part 28

Một công dụng thú vị của derivations quản trị là để tìm kiếm cho họ trong các URL của một trang bằng cách sử dụng một tìm kiếm inurl. Nếu từ admin được tìm thấy trong các tên máy, một tên thư mục, hoặc một tên tập tin trong một URL, có một cơ hội khá URL đó có một số chức năng hành chính, làm cho nó thú vị từ một quan điểm bảo mật. | Ten Simple Security Searches That Work Chapter 7 271 Figure admin login Reveals Administrative Login Pages Another interesting use of the administrator derivations is to search for them in the URL of a page using an inurl search. If the word admin is found in the hostname a directory name or a filename within a URL there s a decent chance that the URL has some administrative function making it interesting from a security standpoint. -ext html -ext htm -ext shtml -ext asp -ext php The -ext html -ext htm -ext shtml -ext asp -ext php query uses ext a synonym for the filetype operator and is a negative query. It returns no results when used alone and should be combined with a site operator to work properly. The idea behind this query is to exclude some of the most common Internet file types in an attempt to find files that might be more interesting for our purposes. As you ll see through this book there are certainly lots of HTML PHP and ASP pages that reveal interesting information but this chapter is about cutting to the chase and that s 272 Chapter 7 Ten Simple Security Searches That Work what this query attempts to documents returned by this search often have great potential for document grinding which we ll explore in more detail in Chapter file extensions used in this search were selected very carefully. First one of the Internet s best resources for all known file extensions was consulted to obtain a list of every known file extension. Each entry in the list of over 8000 file extensions was converted into a Google query using the filetype operator. For example if we wanted to search for the PDF extension we might use a query like filetype PDF to get the number of known results on the Internet. This type of Google query was performed for each and every known file extension from which can take quite some time especially when done in accordance with Google Terms of Use agreement. cough Once the results were gathered they