tailieunhanh - Google hacking for penetration tester - part 47

Tài liệu này liệt kê tên người dùng và mật khẩu cho các tài liệu đã được lưu trữ khác nhau trên một trang web, có lẽ để cho phép chủ sở hữu dễ dàng truy cập từ xa với nó. Tuy nhiên, tại một số điểm vị trí của tài liệu được công bố, và chu đáo của Google thu thập thông tin đó. | Google Hacking Showcase Chapter 11 461 This file also reveals the product key of the installed software which could be re-used to install the software illegally. Last but not least check out Figure submitted by CP. Figure Hey Can I Get All Your Web Passwords p Q Google COMPANY WEB LOCATION USERNAME PASSWORD This document lists usernames and passwords for various websites. The document was stored on a website presumably to allow the owner easy remote access to it. However at some point the document s location was made public and Google dutifully crawled it. Remember public websites are generally just that public. Don t combine public and private data without a great deal of forethought. Police Reports From what I understand most police records are a matter of public record. So it doesn t surprise me when I see police reports like the one shown in Figure . 462 Chapter 11 Google Hacking Showcase Figure Police Reports Are Public Record. Okay. However when I find a police report like the one shown in Figure I begin to question the sanity of posting unfiltered police records. Google Hacking Showcase Chapter 11 463 Figure That Means Your Victoria s Secret Account Info Is Too This police report records the details of a theft of a woman s problem is that the contents of the woman s purse are listed in great detail including the account number of her Victoria s Secret card This is not the only occurrence of such a detailed police report found on the web. Figure shows another more revealing report. Figure Robbed Twice Thanks To Open Police .