Показать сообщение отдельно

  #2  
Старый 25.05.2011, 17:41
foozzi
Новичок
Регистрация: 13.04.2010
Сообщений: 0
Провел на форуме:
1350

Репутация: 0
По умолчанию

Ах да забыл мини фак

First of, this isn't such a great google hack, it's simply searching for known

keywords, wich you can get from viewing the PHP shell in action or just look at

the source code. So, this is the magic:

Titles - Most PHP shell's have an unique title, or part of the title. So we use

the google filter "intitle:".

Examples - intitle:r57shell

intitle:" - c99shell"

intitle:"MyShell 1.1.0 build 20010923"

URL's - People often use the original filename of the shell. Maybe for lazyness,

maybe to recognize what's that file is about or to remember the url.

Again, let's use a filter, "inurl:"

Examples - inurl:r57.php

inurl:c99.php

Keywords - That's the simplest yet an effective search. We check the PHP shell for

pretty unique strings, like the menu of an shell. Just put that in quotes

and fire it up.

Examples - "[ phpinfo ] [ php.ini ] [ cpu ] [ mem ] [ users ] [ tmp ] [ delete ]"

"Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout"

"[ Main Menu ] [ PHPKonsole ] [ Haxplorer ]"
 
Ответить с цитированием