GoOgle Hackz - Its Hacking: gmail hacking

Using Google, and some finely crafted searches we can find a lot of interesting information.
For Example we can find:

Credit Card Numbers Passwords Software / MP3's

...... (and on and on and on) Presented below is just a sample of interesting searches that we can send to google to obtain info that some people might not want us having.. After you get a taste using some of these, try your own crafted searches to find info that you would be interested in.

Try a few of these searches:
More searches which Mother Nature never intended! Most of these are handy for finding security exploits on your own site; simply add a string from your own domain’s URL to check. But really, why limit ourselves? If it has an evil purpose, I’m including it. By the way, there is nothing illegal about typing in a search string; it is up to the website to secure this data. It’s what you DO with this information that you find which makes all of the difference. signin filetype:url - OK, class, this is how we do NOT use Javascript to manage our passwords. Any questions?

“index of /” ( upload.cfm | upload.asp | upload.php | upload.cgi | upload.jsp | upload.pl ) - A great way to find file upload pages on websites. Most of these will be password protected; every now and then you find one that isn’t! Like this German Spanish site…

I guess some civic-minded folk want to provide you with free file storage… (intitle:”WordPress › Setup Configuration File”)|(inurl:”setup-config.php?step=1″) - WordPress has become one of the leading blog systems out there. So you should be aware that if you run WordPress, there are black-hat hackers out there working around the clock to find a vulnerability on your site. Some of the hits returned from this search will be people who never configured it after they installed it, so it’s waiting for anyone to find it and take over. Now that we’re done plowing through all of the boring security research stuff, here’s a couple of cute tricks. In these last two cases, these may not be security violations at all; they might be intentionally giving the stuff away and the worst you’re doing is bypassing an ad or two. DSC00001.JPG - This was in a lot of bookmark sites lately. What you do is search Google images for this string… and if nobody else is looking, turn “safe search” off! What this is is the default naming scheme for image files taken on Sony digital cameras. People post the picture without renaming it. And don’t forget DSC00002.JPG, DSC00003.JPG, and so on. Judging by my browsing so far, the first thing most people photograph is their girlfriend. intitle:”index of” ”last modified” ”parent directory” (wmv|mp3) - At last the one everybody was waiting for: finding free media! Now, this example gives you directories with movie files in either MWV (Windows Media Viewer) or MP3. To find files on a particular subject, just enter the name of that subject. I’ll not speculate on what kind of movies you might be looking for - but I’m sure you’ll think of something! To change that to some other media file, you can try replacing wmv with jpg for images, wav for sounds, etc. The trouble is, this hack is so old that a number of adult porn sites have deliberately set up their web pages to mimic this result, where, of course, you end up with a pop-up demanding credit card data or getting link-jacked to a malware site. Have fun, and remember that I gave you all this handy info in the good faith that you’ll only use it responsibly.

intitle:"Index of" passwords modified
allinurl:auth_user_file.txt
"access denied for user" "using password"
"A syntax error has occurred" filetype:ihtml
allinurl: admin mdb
"ORA-00921: unexpected end of SQL command"
inurl:passlist.txt
"Index of /backup"
"Chatologica MetaSearch" "stack tracking:"

Amex Numbers: 300000000000000..399999999999999
MC Numbers: 5178000000000000..5178999999999999

visa 4356000000000000..4356999999999999

"parent directory " /appz/ -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
"parent directory " DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
"parent directory "Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
"parent directory " Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
"parent directory "MP3-xxx -html -htm -php -shtml -opendivx -md5 -md5sums
"parent directory " Name of Singer or album -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
Notice that I am only changing the word after the parent directory, change it to what you want and you will get a lot of stuff.

METHOD 2

put this string in google search:
?intitle:index.of? mp3

You only need add the name of the song/artist/singer.
Example: ?intitle:index.of? mp3 jackson

METHOD 3

put this string in google search:
inurl:microsoft filetype:iso

You can change the string to watever you want, ex. microsoft to adobe, iso to zip etc…

"# -FrontPage-" inurl:service.pwd

Frontpage passwords.. very nice clean search results listing !!
"AutoCreate=TRUE password=*"
This searches the password for "Website Access Analyzer"
, a Japanese software that creates webstatistics. For those who can read Japanese, check out the author's site at: http://www.coara.or.jp/~passy/
"http://*:*@www" domainname
This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net
"http://*:*@www" bangbus or "http://*:*@www"bangbus
Another way is by just typing
"http://bob:bob@www"
"sets mode: +k"

This search reveals channel keys (passwords) on IRC as revealed from IRC chat logs.
allinurl: admin mdb

Not all of these pages are administrator's access databases containing usernames, passwords and other sensitive information, but many are!
allinurl:auth_user_file.txt

DCForum's password file. This file gives a list of (crackable) passwords, usernames and email addresses for DCForum and for DCShop (a shopping cart program(!!!). Some lists are bigger than others, all are fun, and all belong to googledorks. =)

intitle:"Index of" config.php

This search brings up sites with "config.php" files. To skip the technical discussion, this configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database.
eggdrop filetype:user user
These are eggdrop config files. Avoiding a full-blown descussion about eggdrops and IRC bots, suffice it to say that this file contains usernames and passwords for IRC users.
intitle:index.of.etc

This search gets you access to the etc directory, where many many many types of password files can be found. This link is not as reliable, but crawling etc directories can be really fun!

filetype:bak inurl:"htaccess|passwd|shadow|htusers"

This will search for backup files (*.bak) created by some editors or even by the administrator himself (before activating a new version).

Every attacker knows that changing the extenstion of a file on a webserver can have ugly consequences. Let's pretend you need a serial number for windows xp pro.

In the google search bar type in just like this - "Windows XP Professional" 94FBR

the key is the 94FBR code.. it was included with many MS Office registration codes so this will help you dramatically reduce the amount of 'fake' porn sites that trick you.
or if you want to

find the serial for winzip 8.1 - "Winzip 8.1"

Keep scrolling down it goes Better : RON

While Web-based email is nothing new, Gmail introduces some new and unique concepts. Managing email has become very easy while at the same time having powerful tools to find and review information.

1.) Advertizing:

This is probably the single most controversial aspect of Gmail. Opponents have said that Google's approach to inserting ads based on message content is a huge privacy breach.
Gmail does not "read" your email. Gmail does not breach your privacy. Gmail does not care about your message content. All Gmail is doing is running your message through a "processor" that looks for ad-related keywords so that it can display unobtrusive targeted ads.
Another important point about Gmail's ads is that they are VERY unobtrusive. They are much like the "Sponsored ads" you see on the right of a Google Search results screen. In fact, they don't even show up on every email message that you read, and so far, that's the only place you see the ads: when reading messages. They don't appear in any other screen. Gmail's ads are FAR less annoying than the flashy lights and huge billboards that services like Yahoo Mail and Hotmail use. And, given that the ads are intended to be targeted based on message content, you shouldn't see inapropriate or unrelated ads.

2.) Reading Messages:

Note a couple things: First, no external graphics are displayed. By default, Gmail disables displaying externally referenced graphics. The reason is that many spam messages contain externally referenced graphics. When they are displayed, the email sender can use this to track that you opened the message thus validating your email address for future spam. Clicking on the "Display External Images" link will display the images if you want.
There is one glaring problem: If the original email is HTML or Rich Text formatted, Gmail will strip out ALL formatting including links, fonts, and images. ie: you can only reply in plain text.

3.) Archiving :

One of the first concepts that you have to get used to with Gmail is that of "Archiving". The overall power of Gmail is in its message management, searching and archival capabilities. With 1GB of storage, the average email user will have enough storage space to hold several years worth of emails. Yes, there will always be emails that you simply don't want to keep.
Archiving a message simply tells Gmail to remove the message from your Inbox screen and keep it in your "All Mail" screen. All emails will remain in your inbox until you specifically "Archive" them. Archiving simply removes the message from your inbox screen.But what happens to it? Don't worry, all messages are always accessible through the "All Mail" screen. Archiving simply cleans up your inbox. Once a message has been archived, should you ever want to, you can easily move it back to the inbox, but there really isn't a need for that.

4.) Labels :

A Label is a way of classifying an email. It's similar to "folders" but it goes much farther: You can optionally assign a user-definable Label to any email. Then, when you click on a specific label in the label list on the left of the screen, Gmail displays only those emails under that label. Sounds a lot like folders, right?
The power of Labels shows in being able to assign multiple labels to an email. When you organize emails in folders, an email can reside in only one folder at a time. Say you have one folder called "Family" and another called "Jokes". Your brother sends you a joke email, so where do you put it--the Family folder or the Jokes folder? Gmail's Labels let you assign multiple labels to each email, so you could label your brother's joke email with both "Family" AND "Jokes" labels.
At first, this may not seem too exciting, but after a while, you will see how this could be very powerful, especially with large numbers of accumulated emails.

Gmail Tip #1: All About Labels

You can add a Label to a message in one of two ways:
If you are viewing a message listing, you can just click the checkbox next to the message, click on the "Apply label..." dropdown, and select the Label you want to apply. Gmail will display the Label just to the left of the message's Subject.
If you are viewing a message, just click on the "Apply label..." dropdown, and select the label you want to apply. Gmail will display the new label to the right of the Subject line.
OK, you assigned a Label to a message, but at a later time, you want to remove it. How do you do that? Just select the Label view from the Labels box on the left, "select" the specific message by clicking the checkbox next to the message, and then click on the "Remove label 'xxxx'" button at the top of the listing. Your label has now been removed!

Gmail Tip #2: How to Maintain 'Notes'

Some email providers provide a "Notes" function to let you maintain a list of notes. For example you might keep Web site links, random thoughts, etc. Gmail doesn't offer this feature, but by using some of Gmail's other features, you can set up a very nice, easy to maintain group of notes...
Here's what you do:
First, create a Contact with a Name of "Notes" and an Email Address of "username+Notes@gmail.com"
Next, create a new Label called "Notes"
Finally, create a Filter to add the "Notes" Label any email addressed to "username+Notes@gmail.com". Also, check the "Skip the Inbox (Archive it)" checkbox.
The effect is this:
When you email yourself from an email account other than your own Gmail account, address the email to "username+Notes@gmail.com". When the message arrives in your Gmail account, it will automatically be archived into your "Notes" Label view, bypassing the Inbox. Nice and organized.

Gmail Tip #3: The 'Plus' Side of Gmail

Like many Email providers, Gmail supports the standard "plus" addressing scheme. But just what is it, and how can it help me?
The "plus" method of addressing lets you add additional words to your account name (the "left side" of your email address.) For example, if your email address is "john.doe@gmail.com", you could add "+club" when you give your email address to members of a club to which you belong. So, your email address would now be "john.doe+club@gmail.com". But why would you want to do this? Think of the "plus" word as an extra "keyword" or "tag" that you can use to better manage your messages.
Using our example, say you email an invitation to your friends in a club asking them to rsvp to the invitaion. You ask them to reply to "john.doe+nope@gtmail.com" when sending you a responseif they don't want to come, and reply to "john.doe+ofcourse@gmail.com". Assuming they follow your directions, You can then set up a Gmail Filters to automatically route emails to specific Labels based on the addresses. It's a simple example, but the uses can be numerous.
Another use is when you are shopping online. When asked for an email address, use something like "john.doe+amazon@gmail.com". That way, whenever you get future emails addressed to that address, you'll know that it's either from Amazon directly or from someone to whom they sold your email address. This can be a somewhat effctive way to track spam. Just be aware that not all email systems recognize or accept "plus" addresses. In fact, some spammers even strip it out completely, but it's a cool tool, none the less. The best way is to just try it and see if it works for your application!

Gmail Tip #4: What Happens To Sent Messages?

When you "send" a message, two things happen to it:
it gets copied into your "All Mail" view, and
it is visible in the "Sent Mail" view.
Many email clients and Webmail services let you optionally delete all sent messages by default, but Gmail doesn't offer this feature. Here's why...
One of Gmail's intentions is to get you out of the "trash everything" mindset. This is one of the reasons why they offer 2GB of storage.

Gmail Tip #5: Advanced Search - View Multiple Labels

Gmail has some advanced searching capabilities that, if you take the time to learn, enables you drill down to very specific information.
If you want to search for all messages having a specific label, you can click on the "Show search options" link, click the "Search" dropdown, select the desired Lable, and click the "Search Mail" button.
But a shortcut is to type the Label prefixed with the "label:" query word in any simple search field at the top of any Gmail page:
label:Label1
If you want to view all messages that have selected multiple Labels, for example messages having both 'Label1' and 'Label2', enter the following into the simple search field at the top of any Gmail page:
label:Label1 label:Label2
To see all messages with either 'Label1' or 'Label2', you can enter:
label:Label1 OR label:Label2
Note: the specific label names are NOT case sensitive, but the "OR" operator is case sensitive, and must be in uppercase. The pipe operator '|' can also be used in the same manner as 'OR'.
label:Label1 | label:Label2

Gmail Tip #6: Advanced Search - 'Query Words'

One of Gmail's excellent features is its Search function.Searching can be as simple as entering a keyword or two into the Search field at the top of any page to very complex using Gmail's advanced "Query Words" to better constrain searches.
Clicking the "Show Search Options" link will open up a pane containing several entry fields and dropdowns. This lets you easily specify more detailed search criteria. For example, say you want to search for all email that is unread, regardless of under what Label it is filed. Simply click the "Search:" dropdown, select "Unread Mail" and click the "Search Mail" button. Gmail will display a list of all unread mesasges. Likewise, you can select specific Labels and you can enter specific terms. It's very powerful and useful.
Gmail also provides users the ability to prefix their search keywords with "query words" that instruct Gmail how to search. And there is no need to open the Search Options--these can be entered in the simple search window at the top of any page.
For example, say you want to search for messages containing attachments from your family sent before May 21, 2004? You would simply enter the following advanced search criteria:
label:family has:attachment before:2004/5/21
Yes, this could actually be done in the Search Options pane, but in addition to the available search criteria fields, query words not only let you search using criteria not included in the Search Options pane, (like "cc:" and "bcc:") but you can do "compound" searches otherwise not available in the Search Options pane. For example:
label:doctors label:statements has:attachment before:2004/5/21 in:anywhere
would return all messages with both Labels of "Doctors" and "Statements" containing attachments, sent before May 21, 2004, existing anywhere in my account including the Trash and Spam views.
It's pretty powerful, and fairly intuitive once you get the hang of it.
For more information, you should check the direct link to Gmail's "How do I use advanced search?" help page found [here] (You may need to be logged into your Gmail account to access this page.)

Gmail Tip #7: 'Official' Features and Bugs Status Page

Want to know what features and bugs the Gmail developers are currently working on? Read on to learn how to access Gmail's new "Features, Fixes, & Feedback" page...
First, log into your Gmail account. You must be logged into your account to access the help screens. Next, click on the "Help" link located at the top of any Gmail page. Next, click on the "Send Feedback" link on the left column. You'll be taken to a page detailing features Gmail is working on and bugs being squashed!

Gmail Tip #8: Cleaning Your Contacts

One of Gmail's "features" can leave you with extra entries in your Contacts list. Gmail has a (debatably) nice feature that automatically adds to your Contacts list the email addresses of those to whom you send emails. While this can be helpful at times, just remember that EVERY unique email address you send to gets auto-added.
Log into your Gmail account and click on the "Contacts" link at the top of any Gmail page. A window will open displaying any Contacts you may have. Any you have manually edited will typically have a "Name" and possibly a "Note" associated with it. By default, any Contact Gmail auto-adds and is unedited will not contain any "name" or "note" information, just the email address. Visually scan down the list and look for any that fall into this category. If you find one, determine what to do with it: Delete is, Edit it, or leave it alone. Obviously what you do with it is up to you,

Gmail Tip #9: New feature! Import Contacts

For the best explanation of just how to Import Contacts, log into your Gmail account, click on Contacts, and click on the new "Import Contacts" link at the top of the Contacts screen.
But what can you import and how do you import? Gmail will let you import address books into Contacts from Yahoo!, Orkut, Outlook, and pretty much any other service by uploading CSV (Comma Separated Value) files to your Gmail account. You can even manually edit and create CVS files for importing using Microsoft Excel.
Just remember that currently, Gmail's Contacts fields are limited to just "Name", "Email Address", and "Notes". According to the Help screen, all other fields will be imported into the Notes field.

Gmail Tip #10: Find Your Unread Messages

Want a quick and easy way to view all of your "Unread" messages? If you have assigned Labels and archived unread messages, finding them later can sometines be challenging. Simply create a Gmail Label named "Unread", and you will see all of your unread mail in that folder. Though there are other ways to display unread messages, the nice thing about this method is that it displays the number of unread messages right in the Label list.

Gmail Tip #11: Creating a Pseudo Address Group!

Although Gmail doesn't currently support Groups in your Contacts, you can simulate a Group list by doing the following:
Create a new Contact
In the "Name" field, enter the name of your Group (eg "My Friends")
In the "E-mail" field, enter your list of email addresses in the following format

Gmail Tip #14: Improved and New Contacts Features!

The "Contacts" function has been enhanced to provide some additional functionality, and now adopts the familiar Gmail interface.
Gmail now displays a "Contacts" link in the left column under the "standard views" (Inbox, Starred, etc.) and just above the Labels. Clicking on the link brings up a nicely formatted display that matches the style of the rest og GMail. It displays the contact name, email address, Note, and any additional information (see below). At the top are two "tabs" that display "Frequently Mailed" and "All Contacts". I don't know what the criteria for "Frequently Mailed" is, but it does contain the most-used contacts.
Here are some new or expanded features:
RECENT CONVERSATIONS
Clicking on a contact displays the contact information as well as "Recent Conversations" associated with that contact. Clicking on one of these entries opens it normally with all options available. Very nice.
ADD MORE CONTACT INFO
Clicking on "Edit" allows you to update the basic contact information (Names, Email Address, Note). But there's a new link: "Add More Contact Info" which lets you add additional "Sections" of information. For example, by default there are "Personal" and "Work" sections defined. Each section contains a Section Name field, Two user-selectable "fields" and an "Address" block. Each User Field has a drop-down label containing the following selectable labels: Phone, Mobile, FAX, Pager, Email, IM, Company, Title, Other. You can also add additional fields as needed.
SEARCH CONTACTS
Near the top of the Contacts screen is a Search field and a "Search Contacts" button. Entering text into this field and clicking the button returns all contacts that BEGINS WITH the text. This is important to know because it will search ALL contact fields (even the :extended fields) for words beginning with the entered text. For example, entering "Ste" would return "Stephanie", "Steve", and "Stewart" but entering "phani" would not return "Stephanie". Obviously, it would be nice to have extended search capabilities, but this is an excellent start!

Gmail Tip #15: Auto-forward received Gmail!

Want to use your Gmail account as your main email account but have some or all email auto-forwarded to other email accounts? Well, now you can!
Gmail has added tha ability to forward received emails in two ways: "All" or "Selective"
"ALL" FORWARDING
This is a "global" setting that lets you optionally forward all received email to another email address. Click on the "Settings" link, and click on the new "Forwarding" tab. In there, you have the option do Disable or Enable email forwarding. Click on Enable, enter the email address to which you want to forward, and then select one of the following self-explanatory actions from the associated dropdown:
-keep Gmail's copy in the Inbox
-archive Gmail's copy
-trash Gmail's copy
This setting will forward all received email to another email address and take the appropriate action on the received email.
"SELECTIVE" FORWARDING
Filters have also been enhanced with a new "Forward it to: emailaddress" action letting you selectivly forward emails based on filter criteria. You can use the same or different email addresss for each filter if you choose providing very powerful email management. For example, I may get statement notifications from a bank and want to auto-copy it to my wife. I just set up a filter to select emails with the bank's sending email address and then select the "Forward it to:" action and enter my wife's email address. Now, she'll get notified also!

Gmail Tip #16: Google Gmail Minibrowser

"The Google Deskbar includes a minibrowser that you can use to quickly open your Gmail account in convenient window that automatically hides and can be accessed with a keyboard shortcut. Read on for more information about this tool...
The Google Deskbar is a little Google search tool for Windows taskbar. It can do most of the Google searches using shortcut keys too. (See the link for a picture.) It also include Google's "Minibrowser" which is fast and cute. If you press Ctrl-Alt-G—by default, you can turn it off—you'll go right to the bar. Typing a search, by default, will open in the mini browser—again you can turn it off if you want or have it use your default browser (Firefox, etc).
So here's the tip: Go to Options > Customized Searches > Add. Name it "Gmail" and put in the url: http://gmail.google.com/gmail. For the shortcut I used Ctrl M. So if I press Ctrl alt G, then Ctrl M, instant GMail window in the Google Minibrowser! Awesome.
(Google Desktop isn't included in the default searches either. (Yet!) But you can also add it in the customize dialogue to search your desktop just as easily. Since the minibrowser vanishes automatically it's tres convenient to find a file!)

GoOgle Hackz - Its Hacking

Wednesday, October 3, 2007

Internet Stuff Tricks n Hacks

Friday, September 28, 2007

Google Hacking

Tips and Tricks about GMAIL

About Me

Blog Archive