搜索引擎
Google.com
利用Google收集域名和mail地址:theHarvester神器(baidu看一下)
Google_hack
搜索敏感文件:
site:xxx.com filetype:doc/docx intext:pass
site:xxx.com filetype:xls/xlsx intext:pass
site:xxx.com filetype:conf
site:xxx.com filetype:inc
更多baidu一下
搜索mail
site:xxx.com intext:@xx.com
intext:@xxx.com
搜索管理后台
site:xxx.com 管理
site:xxx.com guanli
site:xxx.com admin
site:xxx.com login
site:xxx.com system_login.php/asp
搜索敏感web路径
site:xxx.com intitle:mongod inurl:28017
site:xxx.com inurl:sql.php
site:xxx.com inurl:phpinfo.php
网络组件搜索
shodanhq.com
zoomeye.com
www.fofa.so
更多资料
http://zone.wooyun.org/content/19386