信息收集——善用搜索引擎

搜索引擎

Google.com

利用Google收集域名和mail地址：theHarvester神器（baidu看一下）

Google_hack

搜索敏感文件：

site:xxx.com filetype:doc/docx  intext:pass

site:xxx.com filetype:xls/xlsx   intext:pass

site:xxx.com filetype:conf

site:xxx.com filetype:inc

更多baidu一下

搜索mail

site:xxx.com intext:@xx.com

intext:@xxx.com

搜索管理后台

site:xxx.com 管理

site:xxx.com guanli

site:xxx.com admin

site:xxx.com login

site:xxx.com system_login.php/asp

搜索敏感web路径

site:xxx.com  intitle:mongod inurl:28017

site:xxx.com inurl:sql.php

site:xxx.com inurl:phpinfo.php

网络组件搜索

shodanhq.com

zoomeye.com

www.fofa.so

更多资料

http://zone.wooyun.org/content/19386

更更多欢迎评论区补充<script>alert("牛笔")</script>