filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www

  • 日期:2015-02-09
  • 类别:
  • 作者:anonymous
  • 语法:filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www
  • Hi,

    This google dork to find sensitive and interesting information under

    WEB-INF directory via ftp protocol, for example:

    * Website map

    * Sensitive information (user name and password for webdave)

    * Deployment descriptor in java (web.xml)

    * Servlet mapping url pattern

    Keyword:

    filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www

    --

    Fahad Altamimi