Tools-tools Berbahaya dari Google

Diam diam, site ini memberikan kita tools untuk melakukan hacking yang paling berbahaya se antero dunia, walaupun tools google ini hanya bisa memberikan sampai ke level footprinting ada juga yang bisa sampai ke level selanjutnya. kenapa aku sebut dengan tools ? karna kita menggunakan google untuk mencari media yang unsecure, yang mudah di hack yang bolong, yang belum ter update, karna google memiliki kekuatan untuk itu semua.

dari tutorial ini yang akan didapatkan adalah:

* Bagaimana cara menggunakan google untuk mencari sources dari personal information dan confidential data lainya
* Bagaimana cara mencari informasi tentang vulnerable systems and Web services
* Bagaimana cara mencari publicly available network devices.


Hal pertama dari yang harus di ketahui adalah Google Query Operators
Query operator ini berfungsi kasar sebagai filtering search nya google menjadi lebih spesifik berdasarkan query yang kita inginkan, masing masing query memiliki fungsi sendiri sendiri. berikut keterangan dan contong nya….

site
memfilter berdasarkan domain yang ada
contoh: site:google.com fox —> akan mencari kata fox di situs google.com

intitle
Memfilter dokumen yang memiliki title yang spesifik
contoh: intitle:fox fire —> akan mencari semua site yang ada kata fox dan didalamnya terdapat teks fire

allintitle
Memfilter dokumen untuk mencari intitle intile
contoh: allintitle:fox fire —> akan mencari semua site yang memiliki title fox dan yang memiliki title fire atau = intitle:fox intitle:fire

inurl
Memfilter pencarian dengan url yang spesifik
contoh: inurl:fox fire —> akan mencari kata fire di website yang url nya terdapat fox

allinurl
Sama dengan Allintitle (hanya ini url)

filetype, ext
Memfilter pencarian untuk dokumen yang spesifik
contoh: filetype:pdf fire —> akan mencari file PDF yang didalamnya terdapat kata fire

contoh keren: filetype:doc skripsi IT

numrange
Memfilter dokumen berdasarkan range tertentu
contoh: numrange:1-100 fire —> akan mencari range 1-100 yang terdapat kata fire

link
Memfilter site site yang memiliki link terhadap site tertentu
contoh: link:www.google.com —> akan mencari site site mana aja yang memiliki links ke google.com

inanchor
Memfilter berdasarkan site description yang ada
contoh: inanchor:fire —> akan mencari web yang memiliki deskripsi fire

kira kira itulah query query google yang keren keren, sisanya ada sih, seperti:
/ * - + “” ( ya ini regular ekspression biasa kan, jadi ngga perlu di jelaskan lebih detail )

nah, dari situ, kia bisa kreasikan ke berbagai macam jenis query untuk memfilter sesuatu, bahkan ke sesuatu yang lebih dalam, misalnya file database……

Web Server
untuk mencari target dengan mudah dilakukan google dengan menggunakan sintaks berikut ini:
“Apache/1.3.28 Server at” intitle:index.of
–> Apache 1.3.28

“Apache/2.0 Server at” intitle:index.of
–> Apache 2.0

“Apache/* Server at” intitle:index.of
–> semua versi dari Apache

“Microsoft-IIS/4.0 Server at” intitle:index.of
–> Microsoft Internet Information Services 4.0

“Microsoft-IIS/5.0 Server at” intitle:index.of
–> Microsoft Internet Information Services 5.0

“Microsoft-IIS/6.0 Server at” intitle:index.of
–> Microsoft Internet Information Services 6.0

“Microsoft-IIS/* Server at” intitle:index.of
–> semua versi dari Microsoft Internet Information Services

“Oracle HTTP Server/* Server at” intitle:index.of
–> semua versi dari Oracle HTTP Server

“IBM _ HTTP _ Server/* * Server at” intitle:index.of
–> semua versi dari IBM HTTP Server

“Netscape/* Server at” intitle:index.of
–> semua versi dari Netscape Server

“Red Hat Secure/*” intitle:index.of
–> semua versi dari the Red Hat Secure server

“HP Apache-based Web Server/*” intitle:index.of
–> semua versi dari the HP server

Beberapa Bug pada Skripts dapat ditemukan google:
“Generated by phpSystem”
–> dapat menemukan operating system type and version, hardware configuration, logged users, open connections, free memory dan disk space, mount points

“This summary was generated by wwwstat”
–> web server statistics, system file structure

“These statistics were produced by getstats”
–>web server statistics, system file structure

“This report was generated by WebLog”
–>web server statistics, system file structure

intext:”Tobias Oetiker” “traffic analysis”
–>system performance statistics as MRTG charts, network configuration

intitle:”Apache::Status” (inurl:server-status | inurl:status.html | inurl:apache.html)
–>server version, operating system type, child process list,current connections

intitle:”ASP Stats Generator *.*” ”
–>ASP Stats

Generator” “2003-2004 weppos”
–>web server activity, lots of visitor information

intitle:”Multimon UPS status page”
–>UPS device performance statistics

intitle:”statistics of” “advanced web statistics”
–>web server statistics, visitor information

intitle:”System Statistics” +”System and Network Information Center”
–>system performance statistics as MRTG charts, hardware configuration, running services

intitle:”Usage Statistics for” “Generated by Webalizer”
–>web server statistics, visitor information, system file structure

intitle:”Web Server Statistics for ****”
–>web server statistics, visitor information

inurl:”/axs/ax-admin.pl” -script
–>web server statistics, visitor information

inurl:”/cricket/grapher.cgi”
–>MRTG charts of network interface performance

inurl:server-info “Apache Server Information”
–>web server version and configuration, operating system type, system file structure

“Output produced by SysWatch *”
–>operating system type and version, logged users, free memory and disk space, mount points, running processes,system logs

Error message queries
Salah satu kumpulan error message query, dapat ditemukan sehingga kita bisa mulai melakukan hacking pada tahap selanjutnya.

“A syntax error has occurred” filetype:ihtml
–>Informix database errors, berpotensial untuk mengambil function names, filenames, file structure information, pieces of SQL code and passwords

“Access denied for user” “Using password”
–>authorisation errors, berpotensial untuk mengambil user names, function names, file structure information and pieces of SQL code

“The script whose uid is ” “is not allowed to access”
–>access-related PHP errors, berpotensial untuk mengambil filenames, function names and file structure information

“ORA-00921: unexpected end of SQL command”
–>Oracle database errors, berpotensial untuk mengambil filenames, function names and file structure information

“error found handling the request” cocoon filetype:xml
–>Cocoon errors, berpotensial untuk mengambil Cocoon version information, filenames, function names and file structure information

“Invision Power Board Database Error”
–>Invision Power Board bulletin board errors, berpotensial untuk mengambil function names, filenames, file structure information and piece of SQL code

“Warning: mysql _ query()” “invalid query”
–>MySQL database errors, berpotensial untuk mengambil user names, function names, filenames and file structure information

“Error Message : Error loading required libraries.”
–>CGI script errors, berpotensial untuk mengambil information about operating system and program versions, user names, filenames and file structure information

“#mysql dump” filetype:sql
–>MySQL database errors, berpotensial untuk mengambil informasi database structure dan contents

Google queries untuk mencari lokasi passwords
kumpulan secara garis besar lokasi password sebuah sistem yang dapat diakses oleh google

“http://*:*@www”
site passwords for site, stored as the string

“http://username: password@www…” filetype:bak inurl:”htaccess|passwd|shadow|ht users”
file backups, berpotensial untuk mengambil user names and passwords

filetype:mdb inurl:”account|users|admin|administrators|passwd|password”
mdb files, berpotensial untuk mengambil password information

intitle:”Index of” pwd.db
pwd.db files, berpotensial untuk mengambil user names and encrypted passwords

inurl:admin inurl:backup intitle:index.of
directories whose names contain the words admin and backup

“Index of/” “Parent Directory” “WS _ FTP.ini” filetype:ini WS _ FTP PWD
WS_FTP configuration files, berpotensial untuk mengambil FTP server access passwords

ext:pwd inurl:(service|authors|administrators|users) “# -FrontPage-”
Terdapat Microsoft FrontPage passwords

filetype:sql (”passwd values ****” |”password values ****” | “pass values ****” )
Terdapat SQL code and passwords yang disimpan dalam a database

intitle:index.of trillian.ini
configuration files for the Trillian IM

eggdrop filetype:user
user configuration files for the Eggdrop ircbot

filetype:conf slapd.conf configuration files for OpenLDAP

inurl:”wvdial.conf” intext:”password” configuration files for WV Dial

ext:ini eudora.ini configuration files for the Eudora mail client

filetype:mdb inurl:users.mdb
Microsoft Access files, berpotensial untuk mengambil user account information

intext:”powered by Web Wiz Journal”
websites using Web Wiz Journal, which in its standard configuration allows access to the passwords file – just enter http:///journal/journal.mdb instead of the default http:///journal/

“Powered by DUclassified” -site:duware.com
“Powered by DUcalendar” -site:duware.com
“Powered by DUdirectory” -site:duware.com
“Powered by DUclassmate” -site:duware.com
“Powered by DUdownload” -site:duware.com
“Powered by DUpaypal” -site:duware.com
“Powered by DUforum” -site:duware.com
intitle:dupics inurl:(add.asp | default.asp |view.asp | voting.asp) -site:duware.com
websites yang menggunakan DUclassified, DUcalendar, DUdirectory, DUclassmate, DUdownload, DUpaypal, DUforum or DUpics applications, secara default memungkinkan kita untuk mengambil passwords file
– untuk DUclassified, just enter http:///duClassified/ _private/duclassified.mdb
atau http:///duClassified/

intext:”BiTBOARD v2.0″ “BiTSHiFTERS Bulletin Board”
website yang menggunakan Bitboard2 bulletin board, secara default settings memungkinkan kita untuk mengambil passwords file to be obtained
– dengan cara http:///forum/admin/data _ passwd.dat
atau http:///forum/forum.php

Mencari Dokumen khusus ?
filetype:xls inurl:”email.xls” email.xls
files, berpotensial untuk mengambil contact information

“phone * * *” “address *” “e-mail” intitle:”curriculum vitae”
CVs

“not for distribution”
confidential documents containing the confidential clause

buddylist.blt
AIM contacts list

intitle:index.of mystuff.xml
Trillian IM contacts list

filetype:ctt “msn”
MSN contacts list

filetype:QDF
QDF database files for the Quicken financial application

intitle:index.of finances.xls
finances.xls files, berpotensial untuk mengambil information on bank accounts, financial summaries and credit card numbers

intitle:”Index Of” -inurl:maillog maillog size maillog files, berpotensial untuk mengambil e-mail

“Network Vulnerability Assessment Report”
“Host Vulnerability Summary Report”
filetype:pdf “Assessment Report”
“This file was generated by Nessus”
reports for network security scans, penetration tests etc. On the Net

untuk lebih kreatifnya bisa di coba coba sendiri, okeh

reference:

* http://johnny.ihackstuff.com – largest repository of data on Google hacking,
* http://insecure.org/nmap/ – Nmap network scanner,
* http://thc.org/thc-amap/ – amap network scanner.

Read More..

The Seahorses

Formed in 1996, The Seahorses leaned more towards guitar-driven music than the dancehall rock of Stone Roses. For the band, Squire picked three unknowns. First to join was the bassist Stuart Fletcher who Squire saw standing in for a friend in a York pub band called The Blueflies, next was the lead vocalist Chris Helme (who a friend of Squire's had spotted busking outside Woolworths, also in York), with drummer Andy Watts, who also provided backing vocals, being the last to join.

Their one and only album, Do it Yourself, was produced by Tony Visconti, for Geffen Records in June 1997, and received varied reviews. One of the songs on the album, "Love Me and Leave Me", was co-written with Liam Gallagher of Oasis, with whom the Seahorses toured in 1997.

Shortly before the release of the single "Love Me And Leave Me", it was announced that drummer Andy Watts was leaving the group to spend more time with his family. It was later brought to light in an online interview with Watts that he was asked to leave by the bands lawyer's on behalf of the band, because they didn't approve of the drummer's excessive behavior on tour, and felt he didn't fit in with the desired image for the band. Watts was eventually replaced by Mark Heaney and played several secret gigs showcasing new material destined for a second album. However, the group disbanded in 1999 during recording sessions. A bootleg entitled "2nd Album Recordings" can be found containing many new tracks and demos which were destined for the second Seahorses album which would have been titled either "Minus Blue" or "Motorcade". It is believed Helme showed more interest in pursuing a solo career off the back of his involvement with Squire than working on the 2nd album, and John Squire walked out of the sessions

source : www.wikipedia.com

Read More..

Hacking

Rahasia Google Terbongkar

Mencari di Internet adalah sesuatu yang mudah. Hanya taipkan perkataan yang ingin dicari, semua maklumat akan terhidang di hadapan anda dengan sekelip mata. Tetapi ada kalanya anda tidak menjumpai apa yang diinginkan. Lain yang dicari, lain yang keluar. Lain yang ditaip,lain yang dapat. Oleh itu, bacalah beberapa tips ini utk dijadikan panduan carian dengan menggunakan Search engine pencari yang popular yaitu Google.

Beberapa sub kategori Google yang perlu anda tahu:

Carian Web - http://www.google.com/
Direktori - http://directory.google.com/
Kumpulan Berita - http://groups.google.com/
Imej - http://images.google.com
Berita - http://news.google.com
Katalog - http://catalogs.google.com/
Beli Belah - http://froogle.google.com
Google Lab - http://labs.google.com
Glosari - http://labs1.google.com/glossary
Sets - http://labs1.google.com/sets
Voice - http://labs1.google.com/gvs.html
Keyboard Shortcut - http://labs1.google.com/keys/
Web Quotes - http://labs.google.com/cgi-bin/webquotes/
Viewer - http://labs.google.com/gviewer.html

Read More..

Muse

Matthew was born in Cambridge on the 9th June 1978 and moved to Devon with his family at aged 10. Matthew’s dad was in a band called The Tornadoes, who were the first band from the UK to get a US number 1 record. At the age of 14 Matthew’s parents got divorced. "It was ok at home, middle class, we had money,” Matthew says. “Well until the age of 14. I think I almost got everything I wanted until the age of 14, yes. Then, everything changed, parents got divorced, and I went to live with my grand mother, and there wasn't that much money. I have a sister who's older than me, she's actually my stepsister: my dad had her from a previous marriage, and also a younger brother. Until the age of 14 music was part of my life since it was part of the family circle: my dad was a musician, he had a band, etc. But it's only when I moved in with my grandparents that I started playing music myself. It was like a need to me."

Matthew moved in with his grandmother and then found music was a need for him. He started playing piano at 6, but the absence of his parents turned him towards the guitar when he was 14. His parents and older brother also used an Ouija Board to contact the dead, which Matt discovered when he was wandering downstairs late at night. He then became interested in it after the divorce of his parents. “It was exciting to go to school and to tell 10-year-old kids all about it, as they found it all quite scary and I was quite impressed that I was doing something that was scary to other people but that wasn’t to me. I did get quite into that.” His beliefs changed after one correspondence predicted the first Gulf War a year before it started. “My beliefs in the whole thing changed. I now believe that you’re contacting something in your subconscious, which is quite different. Something that you might not have known was already there. That’s probably more realistic than thinking you’re contacting somebody who’s already dead. And I do practice that.

Dominic was born on the 7th December 1977 in Manchester and also moved to Devon when he was 8 years old. He and his family had no interest in music until Dominic went to high school when he then became interested in a jazz band, and started playing the drums. Chris was born on the 2nd December 1978 in Rotherham, Yorkshire but also moved to Devon (at 11). His mum would buy records regularly. He started by learning the guitar, and then the drums to finally play the bass when he met Dom and Matt.

source :www.wikipedia.com

Download

rar pass: www.NEMESiSMP3.Net / nms

Read More..

The Killers

Before they became a band, all four of them had various jobs. Flowers, who had dropped out of college, was a bellhop for a while at the Gold Coast Hotel in Vegas. David Keuning, who was originally from Pella, Iowa, dropped out of Kirkwood Community College, then University of Iowa, and finally moved to Las Vegas in January of 2000. He began work there at a Banana Republic store, but could not stand the vast amounts of hats. Mark Stoermer, meanwhile, worked as a medical courier, delivering various medical supplies while studying philosophy at UNLV. Ronnie Vannucci was a student of classical percussion at UNLV and worked as a photographer at the Little Chapel of the Flowers and as a pedicab driver at the Desert Passage mall inside the Aladdin Hotel.
The stars begin to align for The Killers, however, in 2001, when Flowers was abandoned by the first band that he was in — a synth pop band known as Blush Response — after he declined to move with the rest of them to Los Angeles, California. Shortly thereafter, Flowers attended an Oasis concert, and realized that he wanted to make the transition from a keyboard band, and began searching for a guitarist. Bandless in Vegas, he responded to an ad that Keuning had placed in the paper that listed, among other things, Oasis as an influence. The two hit it off immediately, and began rehearsing. They were joined by a bassist (Keuning's roommate) and a drummer.

While thinking of band names, they brainstormed the name "The Genius Sex Poets" (which was later featured on the bass drum in the American version of the music video for "Mr. Brightside").[citation needed] The band finally came up with the idea for "The Killers" from a New Order video titled "Crystal." It was featured on the bass drum of a fictional band in the song's video.

Both bassist and drummer quickly moved on to other things, and the drummer would later sue the band, claiming that he wrote "Mr. Brightside".[citation needed] After their departure, Vannucci and Stoermer (who were both in other bands at the time) were approached by Flowers and Keuning with an offer to join The Killers.

After watching a few of their early shows, Vannucci acknowledged that the group was very green and would need a lot of work to become a polished act. Additionally, their fanbase was scarce and they hadn't worked out their image. Yet, Vannucci saw something and was determined to join.

Stoermer was the final hold out, and still saw some of the issues of before. But he and Flowers quickly became friends, and before long he filled the remaining post. They played their first gig as the new band at a club in Vegas called The Junkyard. After Vannucci sold his house, and the boys found themselves without a garage to rehearse in, it was around this time that they took to sneaking into UNLV's music rooms to practice, where Vannucci was attending college

source : www.wikipedia.com

Download

Read More..