CVE Certified
GHDB

Google Hacking Database

Files containing passwords

PASSWORDS, for the LOVE OF GOD!!! Google found PASSWORDS!

DATE Title Summary
2005-07-27 [WFClient] Password= filetype:ica The WinFrame-Client infos needed by users to connect toCitrix Application Servers (e.g. Metafra...
2005-06-24 inurl:cgi-bin inurl:calendar.cfg CGI Calendar (Perl) configuration file reveals information including passwords for the program....
2005-06-05 intitle:"phpinfo()" +"mysql.default... This will look throught default phpinfo pages for ones that have a default mysql password....
2005-06-04 inurl:pass.dat Accesses passwords mostly in cgibin but not all the timeCan find passwords + usernames (sometim...
2005-06-06 inurl:perform.ini filetype:ini mIRC Passwords For Nicks & Channels in channel\[chanfolder] section of mirc.ini you can fin...
2005-05-11 intext:"powered by EZGuestbook" HTMLJunction EZGuestbook is prone to a database disclosure vulnerability. Remote users may down...
2005-05-06 inurl:server.cfg rcon password Counter strike rcon passwords, saved in the server.cfg....
2005-05-02 !Host=*.* intext:enc_UserPassword=* ext:pcf some people actually keep their VPN profiles on the internet...omg... Simply donwload the pcf f...
2005-03-28 wwwboard WebAdmin inurl:passwd.txt wwwboard|webad... This is a filtered version of previous 'inurl:passwd' searches, focusing on WWWBoard [1]. Ther...
2005-03-20 filetype:inf sysprep sysprep is used to drive unanttended MS Windows installations. The files contain all informatio...
2005-03-20 ext:txt inurl:unattend.txt the unattend.txt is used to drive unanttended MS Windows installations. The files contain all i...
2005-02-23 filetype:sql ("passwd values" | ... Find insert statements where the field (or table name) preceding the operator VALUES will be '...
2005-02-23 filetype:sql ("values * MD5" | "val... Locate insert statements making use of some builtin function to encrypt a password. PASSWORD(),...
2005-02-10 intitle:"Index of" sc_serv.conf sc_serv ... This dork lists sc_serv.conf files. These files contain information for Shoutcast servers and o...
2005-02-15 "Powered by Link Department" Link management script with advanced yet easy to use admin control panel, fully template driven...
2005-02-07 "Powered by DUpaypal" -site:duwa... Here is another DUware product, DUpaypal. Once you get hold of the database it contains the adm...
2005-02-09 filetype:inc mysql_connect OR mysql_pconnect INC files have PHP code within them that contain unencrypted usernames, passwords, and addresse...
2005-01-27 ext:ini Version=4.0.0.4 password The servU FTP Daemon ini file contains setting and session information including usernames, pas...
2004-12-19 ext:ini eudora.ini Well, this is the configuration file for Eudora...may contain sensitive information like pop se...
2004-12-13 intext:"powered by Web Wiz Journal" Web Wiz Journal ASP Blog. The MDB database is mostly unprotected and can be downloaded directly...