數(shù)據(jù)庫(kù)報(bào)錯(cuò):
site:xx.com
intext:"sql syntax near"
intext:"syntax error has occurred"
intext:"incorrect syntax near"
intext:"unexpected end of SQL command"
intext:"Warning: mysql_connect()"
intext:"Warning: mysql_query()"
intext:"Warning: pg_connect()"
找后臺(tái):
site:heimian.com intext:管理|后臺(tái)|登陸|用戶名|密碼|驗(yàn)證碼|系統(tǒng)|帳號(hào)|manage|admin|login|system
site:heimian.com inurl:login|admin|manage|manager|admin_login|login_admin|system
site:heimian.com intitle:管理|后臺(tái)|登陸|管理員|登錄
找敏感文件
filetype:doc|docx|pdf|xls|txt|mdb|ppt
inurl:.doc|.docx|.pdf|.xls|.txt|.mdb|.ppt
intext:.doc|.docx|.pdf|.xls|.txt|.mdb|.ppt
找目錄遍歷漏洞
intext:轉(zhuǎn)到父目錄
intext:index of
intitle:index of
intext:Parent Directory