View and vote on the article here: Add search engines to your hacking toolbox
Add search engines to your hacking toolbox| Category | | | Summary | | Surely you have come across them: google, lycos, ... but, did you know that they have other uses? Read along to see how an inoffensive portal can help you in your way to search vulnerabilities of a server and surf anonimously. |
| | Body | How to find vulnerable machines with default installations of IIS or Apache (very dangerous for their owner!):
- Go to google.com, lycos.com or altavista.com.
- Type "Try the hyperlinks above to see some examples of the content you can publish with Microsoft Internet Information Server" for IIS or "This page is used to test the proper operation of the Apache Web server after it has been installed" for Apache.
- You'll find potential victims which run default installations of this service. Microsoft's IIS is notorious for being extremely unsecure.
Last year, google indexed 9,360 Apache default installations and 2,970 IIS default installations, lycos 2,310 and 105, altavista 6,205 and 3,824.
Using ftp search tools:
- Go to ftpsearchengines.com (it's a good starting point since ftpsearch.lycos.com is temporarily down).
- Try looking for such files as /etc/passwd , /etc/shadow , smdata.dat (CuteFTP) , admpw (Netscape Enterprise Server), .htaccess or .htpasswd.
- With this you will see if a bad configure ftp server is up and you can gain it's control.
Automated ftp search by warez sites scripts are alarming the internet security comunity and many ftp searching engines have filters in their attempt to protect these servers. In the other hand, also many portals still have not set up these filters yet.
Hiding your IP without proxys:
- Translation services can be a good idea for it. If you want to surf anonimously in an english web for example, go to babelfish.altavista.com , select "Web Page", type down the target and ask to translate it from other language (Spanish ;D) to English.
- You'll be surfing and in the server's logs your real IP won't appear.
- FTP search engines can be also a good idea for hidding your IP in your way to find critical files without giving a clue.
Translation engines can protect the translated webs by sending headers like REMOTE_ADDR, HTTP_X_FORWARDED_FOR or HTTP_VIA, but this technique is not yet implemented.
Tutorial by Cpt. dante00 [Cyberarmy] 1/1 |
|
This article was imported from zZine. (original author: dante00)
There are no replies to this post yet.
|