Hymoo
# A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Go Back Hymoo > Hacking Cracking Forum > Google Hacking
 
LinkBack Thread Tools
Old 06-09-2009, 07:45 AM
mrlincoln's Avatar
Forum Manager
Join Date: Jun 2009
Posts: 31
iTrader: 0 / 0%
Hymoo Points: 0.2
mrlincoln is on a distinguished road
Send a message via Yahoo to mrlincoln
Default Google Hacking

Here is a video tutorial on using Google to hack for "live cams"... kinda fun, as you can actually control the cameras.


Last edited by mrlincoln; 06-09-2009 at 07:52 AM.

1 out of 1 members found this post helpful.
Old 06-09-2009, 07:51 AM
mrlincoln's Avatar
Forum Manager
Join Date: Jun 2009
Posts: 31
iTrader: 0 / 0%
Hymoo Points: 0.2
mrlincoln is on a distinguished road
Send a message via Yahoo to mrlincoln
Default

Another, for searching for MP3s:

Old 06-09-2009, 10:33 AM
4RESTER's Avatar
Forum Manager
Join Date: May 2009
Posts: 737
iTrader: 0 / 0%
Hymoo Points: 13.8
4RESTER will become famous soon enough4RESTER will become famous soon enough
Send a message via ICQ to 4RESTER Send a message via Skype™ to 4RESTER
Default

Quote:
Originally Posted by mrlincoln View Post
Here is a video tutorial on using Google to hack for "live cams"... kinda fun, as you can actually control the cameras.
1. Open up your web browser. Browsers that support tabbing (such as Firefox, and newer versions of Internet Explorer) are better, because you can have quick access to many open webpages, instead of having to always open a new instance of the web browser.
2. Using the browser, go to a search engine of your choice, and input any of the following search queries:
* inurl:"CgiStart?page="
* inurl:/view.shtml
* intitle:”Live View / - AXIS
* inurl:view/view.shtml
* inurl:ViewerFrame?Mode=
* inurl:ViewerFrame?Mode=Refresh
* inurl:axis-cgi/jpg
* inurl:axis-cgi/mjpg (motion-JPEG) (disconnected)
* inurl:view/indexFrame.shtml
* inurl:view/index.shtml
* inurl:view/view.shtml
* liveapplet
* intitle:”live view” intitle:axis
* intitle:liveapplet
* allintitle:”Network Camera NetworkCamera” (disconnected)
* intitle:axis intitle:”video server”
* intitle:liveapplet inurl:LvAppl
* intitle:”EvoCam” inurl:”webcam.html”
* intitle:”Live NetSnap Cam-Server feed”
* intitle:”Live View / - AXIS”
* intitle:”Live View / - AXIS 206M”
* intitle:”Live View / - AXIS 206W”
* intitle:”Live View / - AXIS 210″
* inurl:indexFrame.shtml Axis
* inurl:”MultiCameraFrame?Mode=Motion” (disconnected)
* intitle:start inurl:cgistart
* intitle:”WJ-NT104 Main Page”
* intitle:snc-z20 inurl:home/
* intitle:snc-cs3 inurl:home/
* intitle:snc-rz30 inurl:home/
* intitle:”sony network camera snc-p1″
* intitle:”sony network camera snc-m1″
* site:.viewnetcam.com -www.viewnetcam.com
* intitle:”Toshiba Network Camera” user login
* intitle:”netcam live image” (disconnected)
* intitle:”i-Catcher Console - Web Monitor”
3. After you Google one of these queries, you will see some search results, click on any one of them.
4. Then you will either see a whole bunch of images of a security camera ,or the screen of a single camera.
5. Depending on the type of camera that you have access too, you may be able to zoom, pan, and tilt the camera to see what you want to.
6. If you want, you can use a screen capture program to take images and store them to your computer (or you can do this by pressing 'print screen' ('print sc') and opening 'Paint', then pasting it (ctrl+v), cropping the image (highlight the section that you want to delete, using the tool on the side and press' delete' or ctrl+x) and saving the image), or using a screen recording program do record the video stream. Some camera control panels will have image exporting options built in.
7. After you get tired of one camera go back and try another, there are thousands.
__________________
See ya!

1 out of 1 members found this post helpful.
Old 06-09-2009, 10:35 AM
4RESTER's Avatar
Forum Manager
Join Date: May 2009
Posts: 737
iTrader: 0 / 0%
Hymoo Points: 13.8
4RESTER will become famous soon enough4RESTER will become famous soon enough
Send a message via ICQ to 4RESTER Send a message via Skype™ to 4RESTER
Default

Quote:
Originally Posted by mrlincoln View Post
Here is a video tutorial on using Google to hack for "live cams"... kinda fun, as you can actually control the cameras.
To GOOGLE:

allintitle: "Network Camera NetworkCamera" Network cameras
intitle:Axis 2400 video server Mostly security cameras, car parks, colleges, clubs, bars, etc.
intitle:axis intitle:"video server" Mostly security cameras, car parks, colleges, bars, ski slopes etc.<
intitle:"EvoCam" inurl:"webcam.html" Mostly European security cameras
intitle:"Live NetSnap Cam-Server feed" Network cameras, private and non private web cameras
intitle:"Live View / - AXIS" Mostly security cameras, car parks, colleges etc.
intitle:"LiveView / - AXIS" | inurl:view/view.shtml Mostly security cameras, car parks, colleges etc.
intitle:liveapplet Mostly security cameras, car parks, colleges, clubs, bars etc.
intitle:snc-cs3 inurl:home/ Mostly security cameras, swimming pools and more etc.
intitle:"snc-rz30 home" Mostly security cameras, shops, car parks
intitle:snc-z20 inurl:home/ Mostly security cameras, swimming pools and more etc.
intitle:"WJ-NT104 Main" Mostly security cameras, shops, car parks
inurl:LvAppl intitle:liveapplet Mostly security cameras, car parks, colleges etc.
inurl:indexFrame.shtml "Axis Video Server" Mostly security cameras, car parks, colleges etc.
inurl:lvappl A huge list of webcams around the world, mostly security cameras, car parks, colleges etc.
inurl:axis-cgi/jpg Mostly security cameras
inurl:indexFrame.shtml Axis Mostly security cameras, car parks, colleges etc.
inurl:"MultiCameraFrame?Mode=Motion" Mostly security cameras, pet shops, colleges etc.
inurl:/view.shtml Mostly security cameras, car parks, colleges etc.
inurl:/view/index.shtml Mostly security cameras, airports, car parks, back gardens, traffic cams etc.
inurl:viewerframe?mode= Network cameras, mostly private webcams etc.
inurl:"viewerframe?mode=motion" Network cameras
inurl:ViewerFrame?Mode=Refresh Mostly security cameras, parks, bird tables etc.

Other searches:

control/userimage.html
liveapplet
inurl:indexframe.shtml
inurl:"view/index.shtml"
inurl:"view/indexFrame.shtml"
inurl:view/view.shtml
inurl:/view/view.shtml?videos=
inurl:ViewerFrame?Mode=
inurl:ViewerFrame?Mode=Motion
inurl:ViewerFrame?Mode=Refresh
site:.viewnetcam.com -www.viewnetcam.com
/view/index.shtml

In Title:

intitle:"live view" intitle:axis
intitle:"EvoCam" inurl:"webcam.html"
intitle:"i-Catcher Console - Web Monitor"
intitle:"Live NetSnap Cam-Server feed"
allintitle:liveapplet
intitle:liveapplet
intitle:"netcam live image"
intitle:"snc-rz30 home"
intitle:"WJ-NT104 Main"

In URL:

inurl:axis-cgi/jpg
inurl:indexFrame.shtml Axis
inurl:indexFrame.shtml "Axis Video Server"
inurl:lvappl live webcams
inurl:LvAppl intitle:liveapplet
inurl:"MultiCameraFrame?Mode=Motion"
inurl:/view:shtml
inurl:/view/index.shtml
inurl:view/indexframe.shtml
inurl:view/view.shtml
viewerframe?mode=
inurl:"viewerframe?mode=motion"
inurl:ViewerFrame?Mode=Refresh

Two searches in one order:

intitle:"live view" intitle:axis (two searches in one order)
intitle:axis intitle:"video server"
intitle:liveapplet inurl:LvAppl
intitle:"Live View / - AXIS" | inurl:view/view.shtml
intitle:start inurl:cgistart

Aquarium in Dresden



Salzgitter-Lebenstedt (Germany) Shop




Advertizing (USA) somewhere in California



Ruprecht-Karls-Universitдt in Heidelberg (Germany) Foucault Pendulum



Wedding in Delft Townhall?


Combination:

camera linksys inurl:main.cgi
Display Cameras intitle:"Express6 Live Image"
intitle:"active webcam page"
intitle:"EvoCam" inurl:"webcam.html"
inurl:LvAppl intitle:liveapplet
intitle:"Live View / - AXIS"
intitle:liveapplet inurl:LvAppl
intitle:"my webcamXP server!" inurl:":8080"
intitle:"Network Camera" inurl:ViewerFrame
intitle:snc-z20 inurl:home/
intitle:snc-rz30 inurl:home/
intitle:"toshiba network camera - User Login"
intitle:"Live View / - AXIS" | inurl:view/view.shtml
tilt intitle:"Live View / - AXIS" | inurl:view/view.shtml
intitle:"WJ-NT104 Main Page"

Restrict the search to a country, specialized URL a.s.o.:

Sometimes your order gives hundreds of URLs. You can restrict your search by adding a country, a specialized URL or another message:
Add: site:nl and your search is restricted to nl (The Netherlands). Like: intitle:"live view" intitle:axis site:nl
Other examples:
site:de (Restricted to de (Germany)
site:be (Restricted to be (Belgium)
site:com (Restricted to com (com)
site:net (Restricted to net (net)
and so on.

CAMERAS

Axis Cameras

indexFrame.html axis
intitle:"Live View / - AXIS"
intitle:"Live View / - AXIS 206M"
intitle:"Live View / - AXIS 210"
intitle:Axis 2400 video server
intitle:axis intitle:"video server"
"adding live video to one of your own pages a very easy task with an AXIS 2100 Network Camera"
"Live web imaging unleashed"
"Your browser has JavaScript turned off.For the user interface to work effectively"

Canon Cameras

sample/LvAppl/

MOBOTIX Cameras

control/userimage.html

JVC Cameras

"(c)copyright 1999-2003 VICTOR COMPANY OF JAPAN, LIMITED. All rights reserved"
"V.Networks [Motion Picture(Java)"
"Control the Pan/Tilt and move to the Preset Position"

FlexWatch Cameras

/app/idxas.html
"Saving & Retrieving Mode"

Panasonic Cameras

/ViewerFrame?Mode=Motion

Sony Cameras

intitle:"sony network camera snc-ml?
intitle:"sony network camera snc-pl?
intitle:snc-cs3 inurl:home/
intitle:snc-z20 inurl:home/
intitle:"snc-rz30 home"
intitle:snc-rz30 inurl:home/

Toshiba Cameras

"TOSHIBA Network Camera - User Login"
/home/homeJ.html

WebcamXP Software

"my webcamXP server!"

Control this cam:

A house in Finland

Links (images behind the URL):

http://200.76.65.165/view/index.shtml Computershop Germany
http://eyet-tech.homeip.net/view/index.shtml?videos=one
http://mozart.amadeus-hotel.com:81/v...tml?videos=one Hotellobby Haarlem, The Netherlands
Live view - AXIS 231D+ Network Dome Camera Blanton Bottling Hall, Buffalo, USA
http://213.141.95.146/view/index.shtml?videos=one Computerdesk, Gдvle, Sweden
http://216.66.37.162:8000/view/index.shtml?videos=one Lobby?
http://www.admgor.nnov.ru:8023/view/index.shtml
Live view / - AXIS 205 version 4.03 Awards shop, Pompano, Fort Lauderdale, Florida, USA
http://64.21.226.243/view/index.shtml Woodland Resort Bait Shop (Fishing), Devils Lake, North Dakota, USA
http://207.59.215.18/view/index.shtml Biesse America E-Channel, woodworking systems and plants, Charlotte, North Carolina, USA
Live view / - AXIS 205 Network Camera version 4.04 Osteria & Cucina (Paticceria), Genoma del Friuli, Italy
http://160.36.60.7004/view/index.shtml
http://office.vermason.co.uk090/view/index.shtml
http://65.7.199.200000/view/index.shtml
Live view - AXIS 206 Network Camera Tallinn (Estonia) Technikaьli
http://88.247.218.2/view/index.shtml
http://8.10.120.42/view/index.shtml NOC (?)
http://87.245.84.101:81/axis-cgi/mjpg/video.cgi Schaffhausen (Switzerland) Brasserie Bahnhof
Poolcam at Nes-cafй (Amsterdam). Click view to see the match at Windows Media Player
Live webcam in Aurora, United States Passage near museum? USA
SPACE Welcome desk Space.com.mx, Colonia La Pax, Mexico (webcams), with Galeria AXIS cams
Live webcam in Washington, United States George Washington University Radio poop, Washington DC, USA
Live webcam in westport, United States Synergy Online, Westport, Connecticut, USA
Live webcam in United States University of Maine, USA, stairs
Live webcam in Japan flower shop, Japan
Live webcam in Port Mansfield, United States computer control room
__________________
See ya!

1 out of 1 members found this post helpful.
Old 06-09-2009, 11:03 AM
mrlincoln's Avatar
Forum Manager
Join Date: Jun 2009
Posts: 31
iTrader: 0 / 0%
Hymoo Points: 0.2
mrlincoln is on a distinguished road
Send a message via Yahoo to mrlincoln
Default

Nice, thanks!

Old 06-09-2009, 02:47 PM
Ali's Avatar
Ali
Forum Manager
Join Date: May 2009
Posts: 206
iTrader: 0 / 0%
Hymoo Points: 1.1
Ali is on a distinguished road
Send a message via MSN to Ali
Default

Pretty much all your doing is looking for sites that use the same lame encryption system and that most certainly is not hacking.

Old 06-11-2009, 12:44 PM
Forum Manager
Join Date: Jun 2009
Posts: 8
iTrader: 0 / 0%
Hymoo Points: 0.0
Jazzy22 is on a distinguished road
Default

very interesting, thanks

Old 06-12-2009, 12:24 PM
mrlincoln's Avatar
Forum Manager
Join Date: Jun 2009
Posts: 31
iTrader: 0 / 0%
Hymoo Points: 0.2
mrlincoln is on a distinguished road
Send a message via Yahoo to mrlincoln
Default

Some more:

Google Hacking


Application security vendor Fortify reported in 2006 that 20 percent to 30 percent of the attacks it recorded as part of a six-month study came as a result of some form of search engine hacking.

Google is not particularly enamored by the efforts of some of its users to use its index for malicious gain.

"As part of Google's efforts to index all of the information online we find that on occasion malicious executable files become available to users through Google Web search," Megan Quinn, a Google spokeswoman, told internetnews.com. "We deplore these malicious efforts to violate our users' security.

"When possible, we endeavor to shield our users from these executable files," Quinn added. "However we always encourage users to keep their security software up-to-date to ensure the safest Web surfing experience."

But what kind of Codes are available I hear you all ask;

Well here's just a few of them I've found out about. . .

Interesting Searches…
* Source I-Hacked.com Taking Advantage Of Technology - Google Hacking
* intitle:"Index of" passwords modified
* allinurl:auth_user_file.txt
* "access denied for user" "using password“
* "A syntax error has occurred" filetype:ihtml
* allinurl: admin mdb
* "ORA-00921: unexpected end of SQL command“
* inurl:passlist.txt
* "Index of /backup“
* "Chatologica MetaSearch" "stack tracking:"
* inurl:passwd.txt
…and this one is just priceless…
* “login: *” “password= *” filetype:xls

Listings of what you want
* change the word after the parent directory to what you want
* "parent directory " DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
* "parent directory "Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
* "parent directory " Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
* "parent directory " MP3 -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
* "parent directory " Name of Singer or album” -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

Music (*this is already posted in another thread)
* You only need add the name of the song/artist/singer.
* Example: intitle:index.of mp3 jackson

CD Images
* inurl:microsoft filetype:iso
* You can change the string to whatever you want, ex. Microsoft to Adobe, .iso to .zip etc…

Passwords
* "# -FrontPage-" inurl:service.pwd FrontPage passwords.. very nice clean search results listing !!

* "AutoCreate=TRUE password=*" This searches the password for "Website Access Analyzer", a Japanese software that creates webstatistics. For those who can read Japanese, check out the author's site at: http://www.coara.or.jp/~passy/

Passwords in the URL
* "http://*:*@www" domainname This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the domain name without the .com or .net
* "http://*:*@www" gamespy or http://*:*@www”gamespy
* Another way is by just typing "http://bob:bob@www"

IRC Passwords
* "sets mode: +k" This search reveals channel keys (passwords) on IRC as revealed from IRC chat logs.
* eggdrop filetype:user user These are eggdrop config files. Avoiding a full-blown discussion about eggdrops and IRC bots, suffice it to say that this file contains usernames and passwords for IRC users.

Access Database Passwords
* allinurl: admin mdb Not all of these pages are administrator's access databases containing usernames, passwords and other sensitive information, but many are!

DCForum Passwords
* allinurl:auth_user_file.txt DCForum's password file. This file gives a list of (crackable) passwords, usernames and email addresses for DCForum and for DCShop (a shopping cart program(!!!). Some lists are bigger than others, all are fun, and all belong to googledorks.

MySQL Passwords
* intitle:"Index of" config.php
* This search brings up sites with "config.php" files. To skip the technical discussion, this configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database.

The ETC Directory
* intitle:index.of.etc
* This search gets you access to the etc directory, where many, many, many types of password files can be found. This link is not as reliable, but crawling etc directories can be really fun!

Passwords in backup files
*filetype:bak inurl:"htaccess|passwd|shadow|htusers
* " This will search for backup files (*.bak) created by some editors or even by the administrator himself (before activating a new version). Every attacker knows that changing the extension of a file on a web server can have ugly consequences.

Serial Numbers
* Let's pretend you need a serial number for Windows XP Pro.
* In the Google search bar type in just like this - "Windows XP Professional" 94FBR
* the key is the 94FBR code.. it was included with many MS Office registration codes so this will help you dramatically reduce the amount of 'fake' sites (usually pornography) that trick you.
* or if you want to find the serial for WinZip 8.1 - "WinZip 8.1" 94FBR

These are only a sample of some of the fun things you can do with the wrong kind of Google search. Such strings return very random results, and are of very little use for targeted attacks. But for random hacking of peoples Frontpage password's, it's priceless.

* inurlservice | authors | administrators | users) ext:pwd "# -FrontPage-"
__________________
My Forum:
http://www.hymoo.com/hacking-cracking-forum/


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


Share This Thread
  • Submit Thread to Twitter
  • Submit Thread to StumbleUpon
  • Submit Thread to Digg
  • Submit Thread to Reddit
  • Submit Thread to del.icio.us

mrlincoln's Threads
Similar Threads
Newest Threads
Latest Posts
©2010 Hymoo