Use Google to get the PWD information Security issues revealed

Noobs,don't go crazy messing up people sites,this is to make awareness of how negligent can an administrator be.

1- Why deface when you can own it?
Go to Google and type this:
intitle:PhpMyAdmin "Welcome to phpMyAdmin***" running on * as root@*"

This will give you tons of no passworded phpMyAdmin,means you'll have access to all files,can make changes ect.
======================================
To find websites Admin Password type the following in the Google bar:
inurl:vti_pvt "service.pwd"
(password will be encrypted) "convert encrypted password to md5 hash then use milw0rm

Also You can You use this codes when you have free time..enjoy

Google Search strings
-------------------------

• inurl:/db/main.mdb |ASP-Nuke passwords
• filetype:cfm "cfapplication |ColdFusion source with potential passwords name" password
• filetype:pass |dbman credentials pass intext:userid
• allinurl:auth_user_file.txt |DCForum user passwords
• eggdrop filetype:user user |Eggdrop IRC user credentials
• filetype:ini inurl:flashFXP.ini |FlashFXP FTP credentials
• filetype:url +inurl:"ftp://" |FTP bookmarks cleartext passwords
  +inurl:"@"
• inurl:zebra.conf intext: |GNU Zebra passwords
  password -sample -test
  -tutorial –download
• filetype:htpasswd htpasswd |HTTP htpasswd Web user credentials
• intitle:"Index of" ".htpasswd" |HTTP htpasswd Web user credentials
  "htgroup" -intitle:"dist"
  -apache -htpasswd.c
• intitle:"Index of" ".htpasswd" |HTTP htpasswd Web user credentials
  htpasswd.bak
• "http://*:*@www" bob:bob |HTTP passwords (bob is a sample username)
• "sets mode: +k" |IRC channel keys (passwords)
• "Your password is * |Remember IRC NickServ registration passwords
  this for later use"
• signin filetype:url |JavaScript authentication credentials
• LeapFTP intitle:"index.of./" |LeapFTP client login credentials
  sites.ini modified
• inurl:lilo.conf filetype:conf |LILO passwords
  password -tatercounter2000
  -bootpwd –man
• filetype:config config intext: |Mcft .NET application credentials
  appSettings "User ID"
• filetype:pwd service |Mcft FrontPage Service Web passwords
• intitle:index.of |Mcft FrontPage Web credentials
  administrators.pwd
• "# -FrontPage-" |Mcft FrontPage Web passwords
  inurl:service.pwd
  ext:pwd inurl:_vti_pvt inurl: |Mcft FrontPage Web passwords
  (Service | authors | administrators)
• inurl:perform filetype:ini |mIRC nickserv credentials
• intitle:"index of" intext: |mySQL database credentials
  connect.inc
• intitle:"index of" intext: |mySQL database credentials
  globals.inc
• filetype:conf oekakibbs |Oekakibss user passwords
• filetype:dat wand.dat |Opera‚ ÄúMagic Wand‚Äù Web credentials
• inurl:ospfd.conf intext: |OSPF Daemon Passwords
  password -sample -test
  -tutorial –download
• index.of passlist |Passlist user credentials
• inurl:passlist.txt |passlist.txt file user credentials
• filetype:dat "password.dat" |password.dat files
• inurl:password.log filetype:log |password.log file reveals usernames,
  |passwords,and hostnames
• filetype:log inurl:"password.log" |password.log files cleartext
  |passwords
• inurl:people.lst filetype:lst |People.lst generic password file
• intitle:index.of config.php |PHP Configuration File database
  |credentials
• inurl:config.php dbuname dbpass |PHP Configuration File database
  |credentials
• inurl:nuke filetype:sql |PHP-Nuke credentials
• filetype:conf inurl:psybnc.conf |psyBNC IRC user credentials
  "USER.PASS="
• filetype:ini ServUDaemon |servU FTP Daemon credentials
• filetype:conf slapd.conf |slapd configuration files root password
• inurl:"slapd.conf" intext: |slapd LDAP credentials
  "credentials" -manpage
  -"Manual Page" -man: -sample
• inurl:"slapd.conf" intext: |slapd LDAP root password
  "rootpw" -manpage
  -"Manual Page" -man: -sample
• filetype:sql "IDENTIFIED BY" –cvs |SQL passwords
• filetype:sql password |SQL passwords
• filetype:ini wcx_ftp |Total Commander FTP passwords
• filetype:netrc password |UNIX .netrc user credentials
• index.of.etc |UNIX /etc directories contain
  |various credential files
• intitle:"Index of..etc" passwd |UNIX /etc/passwd user credentials
• intitle:index.of passwd |UNIX /etc/passwd user credentials
  passwd.bak
• intitle:"Index of" pwd.db |UNIX /etc/pwd.db credentials
• intitle:Index.of etc shadow |UNIX /etc/shadow user credentials
• intitle:index.of master.passwd |UNIX master.passwd user credentials
• intitle:"Index of" spwd.db |UNIX spwd.db credentials
  passwd -pam.conf
• filetype:bak inurl:"htaccess| |UNIX various password file backups
  passwd|shadow|htusers
• filetype:inc dbconn |Various database credentials
• filetype:inc intext:mysql_ |Various database credentials, server names
  connect
• filetype:properties inurl:db |Various database credentials, server names
  intext:password
• inurl:vtund.conf intext:pass –cvs |Virtual Tunnel Daemon passwords
• inurl:"wvdial.conf" intext: |wdial dialup user credentials
  "password"
• filetype:mdb wwforum |Web Wiz Forums Web credentials
• "AutoCreate=TRUE password=*" |Website Access Analyzer user passwords
• filetype:pwl pwl |Windows Password List user credentials
• filetype:reg reg +intext: |Windows Registry Keys containing user
  "defaultusername" intext: |credentials
  "defaultpassword"
• filetype:reg reg +intext: |Windows Registry Keys containing user
  "internet account manager" |credentials
• "index of/" "ws_ftp.ini" |WS_FTP FTP credentials
  "parent directory"
• filetype:ini ws_ftp pwd |WS_FTP FTP user credentials
• inurl:admin filetype: |asp Generic userlist files
  inurl:userlist |
• inurl:php inurl: |Half-life statistics file, lists username and
  hlstats intext: |other information
  Server Username |
• filetype:ctl |
  inurl:haccess. |Mcft FrontPage equivalent of htaccess
  ctl Basic |shows Web user credentials
• filetype:reg |
  reg intext: |Mcft Internet Account Manager can
• "internet account manager" |reveal usernames and more
  filetype:wab wab |Mcft Outlook Express Mail address
  |books
• filetype:mdb inurl:profiles |Mcft Access databases containing
  |profiles.
• index.of perform.ini |mIRC IRC ini file can list IRC usernames and
  |other information
• inurl:root.asp?acs=anon |Outlook Mail Web Access directory can be
  |used to discover usernames
• filetype:conf inurl:proftpd. |PROFTP FTP server configuration file
  conf –sample |reveals
  |username and server information
• filetype:log username putty |PUTTY SSH client logs can reveal
  |usernames
  |and server information
• filetype:rdp rdp |Remote Desktop Connection files reveal user
  |credentials
• intitle:index.of |UNIX bash shell history reveals commands
  .bash_history |typed at a bash command prompt; usernames
  |are often typed as argument strings
• intitle:index.of |UNIX shell history reveals commands typed at
  .sh_history |a shell command prompt; usernames are
  |often typed as argument strings
• "index of " lck |Various lock files list the user currently using
  |a file
• +intext:webalizer +intext: |Webalizer Web statistics page lists Web user-
  Total Usernames +intext: |names and statistical information
  "Usage Statistics for"
• filetype:reg reg HKEY_ |Windows Registry exports can reveal
  CURRENT_USER |username usernames and other information

Other Sites passwords Revealing through Google

also visit my other blogs from

visit this link

Pay attention to your passwords, you can't imagine what can be discovered with google, some people ask me how to recover their blog or website because it was hacked, remember to always backup your files.

here are some examples you can try by yourself in google (just type the left part into Google's search box:

nurl:/db/main.mdb
style='mso-spacerun:yes'>
ASP-Nuke passwords



filetype:cfm “cfapplication
name” password
ColdFusion source with potential
passwords



filetype:pass pass
intext:userid
dbman credentials



allinurl:auth_user_file.txt
style='mso-spacerun:yes'>
DCForum user passwords



eggdrop filetype:user
user
Eggdrop IRC user credentials



filetype:ini
inurl:flashFXP.ini
FlashFXP FTP credentials



filetype:url +inurl:”ftp://”
+inurl:”@”
FTP bookmarks cleartext passwords



inurl:zebra.conf
intext:password -sample -test -tutorial –download
style='mso-spacerun:yes'>
GNU Zebra passwords



filetype:htpasswd
htpasswd
HTTP htpasswd Web user credentials



intitle:”Index of” “.htpasswd”
“htgroup” -intitle:”dist” -apache -htpasswd.c
style='mso-spacerun:yes'>
HTTP htpasswd Web user credentials



intitle:”Index of” “.htpasswd”
htpasswd.bak
HTTP htpasswd Web user credentials



“http://*:*@www” bob:bob
style='mso-spacerun:yes'>
HTTP passwords (bob is a sample
username)



“sets mode: +k”
style='mso-spacerun:yes'>
IRC channel keys (passwords)



“Your password is * Remember
this for later use”
IRC NickServ registration passwords



signin filetype:url
style='mso-spacerun:yes'>
JavaScript authentication
credentials



LeapFTP intitle:”index.of./”
sites.ini modified
LeapFTP client login credentials



inurl:lilo.conf filetype:conf
password -tatercounter2000 -bootpwd –man
style='mso-spacerun:yes'>
LILO passwords



filetype:config config
intext:appSettings “User ID”
Microsoft .NET application
credentials



filetype:pwd service
style='mso-spacerun:yes'>
Microsoft FrontPage Service Web
passwords



intitle:index.of
administrators.pwd
Microsoft FrontPage Web credentials



“# -FrontPage-”
inurl:service.pwd
Microsoft FrontPage Web passwords



ext:pwd inurl:_vti_pvt
inurl:(Service | authors | administrators)
style='mso-spacerun:yes'>
Microsoft FrontPage Web passwords



inurl:perform
filetype:ini
mIRC nickserv credentials



intitle:”index of”
intext:connect.inc
mySQL database credentials



intitle:”index of”
intext:globals.inc
mySQL database credentials



filetype:conf oekakibbs
style='mso-spacerun:yes'>
Oekakibss user passwords



filetype:dat wand.dat
style='mso-spacerun:yes'>
Opera, ÅúMagic Wand,Åù Web
credentials



inurl:ospfd.conf
intext:password -sample -test -tutorial –download
style='mso-spacerun:yes'>
OSPF Daemon Passwords



index.of passlist
style='mso-spacerun:yes'>
Passlist user credentials



inurl:passlist.txt
style='mso-spacerun:yes'>
passlist.txt file user credentials



filetype:dat
“password.dat”
password.dat files



inurl:password.log
filetype:log
password.log file reveals usernames,
passwords, and hostnames


filetype:log
inurl:”password.log”
password.log files cleartext
passwords



inurl:people.lst
filetype:lst
People.lst generic password file



intitle:index.of
config.php
PHP Configuration File database
credentials



inurl:config.php dbuname
dbpass
PHP Configuration File database
credentials



inurl:nuke filetype:sql
style='mso-spacerun:yes'>
PHP-Nuke credentials



filetype:conf
inurl:psybnc.conf “USER.PASS=”
psyBNC IRC user credentials



filetype:ini ServUDaemon
style='mso-spacerun:yes'>
servU FTP Daemon credentials



filetype:conf slapd.conf
style='mso-spacerun:yes'>
slapd configuration files root
password



inurl:”slapd.conf”
intext:”credentials” -manpage -”Manual Page” -man: -sample
style='mso-spacerun:yes'>
slapd LDAP credentials



inurl:”slapd.conf”
intext:”rootpw” -manpage -”Manual Page” -man: -sample
style='mso-spacerun:yes'>
slapd LDAP root password



filetype:sql “IDENTIFIED BY”
–cvs
SQL passwords



filetype:sql password
style='mso-spacerun:yes'>
SQL passwords



filetype:ini wcx_ftp
style='mso-spacerun:yes'>
Total Commander FTP passwords



filetype:netrc password
style='mso-spacerun:yes'>
UNIX .netrc user credentials



index.of.etc
style='mso-spacerun:yes'>
UNIX /etc directories contain
various credential files



intitle:”Index of..etc”
passwd
UNIX /etc/passwd user credentials



intitle:index.of passwd
passwd.bak
UNIX /etc/passwd user credentials



intitle:”Index of” pwd.db
style='mso-spacerun:yes'>
UNIX /etc/pwd.db credentials



intitle:Index.of etc
shadow
UNIX /etc/shadow user credentials



intitle:index.of
master.passwd
UNIX master.passwd user credentials



intitle:”Index of” spwd.db
passwd -pam.conf
UNIX spwd.db credentials



filetype:bak
inurl:”htaccess|passwd|shadow|htusers
UNIX various password file backups



filetype:inc dbconn
style='mso-spacerun:yes'>
Various database credentials



filetype:inc
intext:mysql_connect
Various database credentials, server
names



filetype:properties inurl:db
intext:password
Various database credentials, server
names



inurl:vtund.conf intext:pass
–cvs
Virtual Tunnel Daemon passwords



inurl:”wvdial.conf”
intext:”password”
wdial dialup user credentials



filetype:mdb wwforum
style='mso-spacerun:yes'>
Web Wiz Forums Web credentials



“AutoCreate=TRUE
password=*”
Website Access Analyzer user
passwords



filetype:pwl pwl
style='mso-spacerun:yes'>
Windows Password List user
credentials



filetype:reg reg
+intext:”defaultusername” intext:”defaultpassword”
style='mso-spacerun:yes'>
Windows Registry Keys containing
user credentials



filetype:reg reg
+intext:”internet account manager”
Windows Registry Keys containing
user credentials



“index of/” “ws_ftp.ini”
“parent directory”
WS_FTP FTP credentials



filetype:ini ws_ftp pwd
style='mso-spacerun:yes'>
WS_FTP FTP user credentials



inurl:/wwwboard
style='mso-spacerun:yes'>
wwwboard user credentials

Use China Mobile to Access Internet via AIRTEL GPRS

Accessing Internet on China Mobile ( AIRTEL )

You have to first activate the GPRS of Airtel

i.e send SMS to

GPRSZERO ACTIVE

to 121 (tollfree)

this is used to activate the GPRS for Zero monthly rental and only charged when you use the internet and this tariff will be per kilobytes

So after successfully activating GPRS

Now you have to install the settings which you will receive when you send another SMS message i.e


MO

to 52678

But for the china mobile you dont receive any setting as there is no support presently by the Airtel Provider, dont worry here are the settings you need to do after successfully activating the GPRS.

-------------------------------------------------------------
This I tested on China Mobile (Touchlife model)

Unlock the Mobile

-> Enter into the SERVICES
-> Here select the DATA ACCOUNT
-> Then select GPRS
-> In the GPRS you will see different Account Names so you can get one of them or take the empty one
-> If you selected the previous one then empty all fields then provide the following data

Account Name: AJR
APN: airtelgprs.com (when you call 121 you will get 'APN' info from customercare person)

Ok Done

-> Now go back to first step and select the SERVICES
-> Select the WAP
-> Then edit the Settings
-> Then again Edit Profile
-> In that you can see the Default Profiles which are there in the Chinese language
-> So edit that profile
-> Select DAta Account
-> And set this to account name of 'AJR' (You previously created i.e APN in that)
-> Then below select the Connect Type
-> Instead of 'WAP' select the 'HTTP'
-> For this you can call the customer care 121 and ask for the ipaddress (proxy ip, port)
For me it worked with the following ip : 202.056.231.117 port: 8080
-> and come to previous screen and select the Home Page
-> Done