kod

allinurl: "proxylist.txt"

allinurl: "proxy.txt"

"index of/root"

"auth_user_file.txt"

"index of/root"

"Index of /admin"

"Index of /password"

"Index of /mail"

"Index of /" +passwd

"Index of /" +password.txt

"Index of /" +.htaccess

index of ftp +.mdb allinurl:/cgi-bin/ +mailto

administrators.pwd.index

authors.pwd.index

service.pwd.index

filetype:config web

gobal.asax index

allintitle: "index of/admin"

allintitle: "index of/root"

allintitle: sensitive filetype oc

allintitle: restricted filetype :mail

allintitle: restricted filetype oc site:gov

for IIS server exlpoit

allinurl: winnt/system32/

and u’ll get many IIS server exploitsъ

intitle:r57shell

intitle:"Index of" .sh_history

intitle:"Index of" .bash_history

intitle:"index of" passwd

intitle:"index of" people.lst

intitle:"index of" pwd.db

intitle:"index of" etc/shadow

intitle:"index of" spwd

intitle:"index of" master.passwd

intitle:"index of" htpasswd

intitle:"index of" members OR accounts

intitle:"index of" user_carts OR user_cart

_vti_inf.html

service.pwd

users.pwd

authors.pwd

administrators.pwd

shtml.dll

shtml.exe

fpcount.exe

default.asp

showcode.asp

sendmail.cfm

getFile.cfm

imagemap.exe

test.bat

msadcs.dll

htimage.exe

counter.exe

browser.inc

hello.bat

default.asp\

dvwssr.dll

cart32.exe

add.exe

index.jsp

SessionServlet

glimpse

man.sh

AT-admin.cgi

AT-generate.cgi

inurl:/adpassword.txt

inurl:admin.dat

and even for shop sites:

inurl:/shop/db/

intitle:"index of/ shop" +db

intitle:"index of/" +shopping_cart