# Google Dork: site:*/piwik "Sign in" "Matomo" # Matomo login portals. # Date: 12/08/2020 # Exploit Author: Alexandros Pappas
不再关注网络安全
# Google Dork: site:*/piwik "Sign in" "Matomo" # Matomo login portals. # Date: 12/08/2020 # Exploit Author: Alexandros Pappas
Google Dork: intitle:"Microsoft Internet Information Services 8" -IIS Description: This dork detects all IIS version 8 servers in search engine. Author: Sibi Mathew George
Files containing juicy info: "microsoft internet information services" ext:log BR, Reza Abasi(Turku)
Google Dork : allinurl:index.php?db=information_schema Description : This dork bypasses the admin username and password and takesyou directly to information schema table and you can delete data! Author : Anjali Linkedin Profile link :https://www.l...
# Google Dork: -site:"pentest-tools.com" intext:"Scan coverage information" AND "List of tests" ext:PDF # Description: Find reports generated by Pentest-Tools.com vulnerability scanner. # Author: Carlos Ramírez L. (Bi...
Dork: inurl:wp-content/plugins/ultimate-elementor Description: This Google dork lists out Advisories and Vulnerabilities about the Ultimate Elementor Plugin. Ref: https://wpvulndb.com/vulnerabilities/10215 Author: Abhi Chitkara
Category: Various Online Devices inurl:hp/device/deviceinformation inurl:hp/device/firmwareupgrade Nicholas Doropoulos
Description: Unprotected public Hadoop Administration dashboards Dork : intext:"Security is Off" intitle:"Namenode information" Author: Vipin Joshi (@vocuzi)
zsh:no matches found 在zsh使用命令时出现“no matches found”,但在默认终端下是正常的,原因是zsh的兼容问题,解决方法如下: vim ~/.zshrc,文件任意新行加入: setopt no_nomatch 1 setopt no_nomatch 保存并更新配置: ...
BurpSuite AuthMatrix插件 AuthMatrix 是一个Burp Suite扩展,用于检测权限授权问题,设置好session就能进行自动化测试。相似功能的插件还有:BurpSuite Authz。Authz会先访问一遍接口抓包,然后“Send request(s) to Authz”,设置低权限的cookie,“Run”就会使用低权限的cookie去请求,结果会匹配给出相似度百分比,可以查看每个请求的详...