How to use Google to find confidential informations

From: Vincent GAILLOT (vgaillotat_private-lyon.fr)
Date: Fri Nov 16 2001 - 05:08:31 PST

  • Next message: Mariusz Woloszyn: "Re: Where else?"

    Hi, I am a french student and I heard recently about the capacity of google to 
    deal with documents from Word, Excel or Powerpoint.
    Intested in that fact, I decided to experiment some words and expression 
    (with ") to look for (sorry if my english is not perfect..) and I found some 
    combos that give enormous results.
    In google, if you type things like :
    
    1)"Index of /admin"
    2)"Index of /password"
    3)"Index of /mail"
    4)"Index of /" +banques +filetype:xls (for france...)
    5)"Index of /" +passwd
    6)"Index of /" password.txt
    
    And you can continue as long as your imaginatio is active.
    For example of my results, I saw great informations from the central banks of 
    Luxemboug and Switzerland, could admin a SQL server, ...
    
    So, I don't know if it is a great technical bug, but I know about hacking and 
    security (I would like to be a security consultant later..) (and I am looking 
    for a training in security in a foreign country like US or England...) and even 
    if we don't get root access immediatly, it is a great step for social 
    engineering and spying.
    
    I hope you will answer me very soon.
    I love your web site !!!
    



    This archive was generated by hypermail 2b30 : Mon Nov 19 2001 - 08:37:31 PST