CVE Certified
GHDB

Google Hacking Database

Files containing passwords

PASSWORDS, for the LOVE OF GOD!!! Google found PASSWORDS!

DATE Title Summary
2006-08-10 ext:php intext:"$dbms""$dbhost"... Hacking a phpBB forum. Here you can gather the mySQL connection information for their forum dat...
2006-03-21 inurl:"calendarscript/users.txt" CalenderScript is an overpriced online calender system written in perl. The passwords are encry...
2006-03-06 filetype:sql "insert into" (pass|passwd|... Looks for SQL dumps containing cleartext or encrypted passwords....
2006-02-05 filetype:reg reg +intext:â€Ã... This can be used to get encoded vnc passwords which can otherwise be obtained by a local regist...
2006-01-02 ext:asa | ext:bak intext:uid intext:pwd -"uid... search for plaintext database credentials in ASA and BAK files....
2006-01-02 enable password | secret "current configurati... Another Cisco configuration search. This one is cleaner, gives complete configuration files and...
2006-01-02 ext:passwd -intext:the -sample -example Various encrypted passwords, some plaintext passwords and some private keys are revealed by thi...
2006-01-02 inurl:"editor/list.asp" | inurl:"da... This search finds CLEARTEXT usernames/passwords for the Results Database Editor. The log in po...
2006-01-01 filetype:bak createobject sa This query searches for files that have been renamed to a .bak extension (obviously), but inclu...
2005-12-19 inurl:ventrilo_srv.ini adminpassword This search reveals the ventrilo (voice communication program used by many online gamers) passw...
2005-11-30 "parent directory" +proftpdpasswd User names and password hashes from web server backups generated by cpanel for ProFTPd. Passwo...
2005-11-14 ext:yml database inurl:config Ruby on Rails is a MVC full-stack framework for development of web applications. There's a conf...
2005-11-03 inurl:"Sites.dat"+"PASS=" FlashFXP has the ability to import a Sites.dat file into its current Sites.dat file, using this...
2005-10-30 server-dbs "intitle:index of" Yes, people actually post their teamspeak servers on websites. Just look for the words superadm...
2005-09-28 inurl:/yabb/Members/Admin.dat This search will show you the Administrator password (very first line) on YaBB forums whose own...
2005-09-25 "admin account info" filetype:log searches for logs containing admin server account information such as username and password....
2005-09-24 "your password is" filetype:log This search finds log files containing the phrase (Your password is). These files often contain...
2005-09-18 intitle:rapidshare intext:login Rapidshare login passwords....
2005-09-13 intext:"enable password 7" some people are that stupid to keep their Cisco routers config files on site. You can easly fin...
2005-09-13 filetype:dat inurl:Sites.dat If you want to find out FTP passwords from FlashFXP Client, just type this query in google and ...