CVE Certified
GHDB

Google Hacking Database

Files containing passwords

PASSWORDS, for the LOVE OF GOD!!! Google found PASSWORDS!

DATE Title Summary
2004-05-12 filetype:url +inurl:"ftp://" +inurl:&qu... These are FTP Bookmarks, some of which contain plaintext login names and passwords....
2004-05-12 inurl:vtund.conf intext:pass -cvs Theses are vtund configuration files (http://vtun.sourceforge.net). Vtund is an encrypted tunne...
2004-05-11 filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS This search reveals SSH host key fro the Windows Registry. These files contain information abou...
2004-05-07 filetype:reg reg +intext:"defaultusername&quo... These pages display windows registry keys which reveal passwords and/or usernames....
2004-05-05 filetype:inc intext:mysql_connect INC files have PHP code within them that contain unencrypted usernames, passwords, and addresse...
2004-05-04 filetype:properties inurl:db intext:password The db.properties file contains usernames, decrypted passwords and even hostnames and ip addres...
2004-05-03 intitle:"index of" intext:globals.inc contains plaintext user/pass for mysql database...
2004-05-03 inurl:perform filetype:ini Displays the perform.ini file used by the popular irc client mIRC. Often times has channel pass...
2004-04-26 intitle:"index of" intext:connect.inc These files often contain usernames and passwords for connection to mysql databases. In many ca...
2004-04-26 eggdrop filetype:user user These are eggdrop config files. Avoiding a full-blown descussion about eggdrops and IRC bots, s...
2004-04-19 filetype:cfm "cfapplication name" passwo... These files contain ColdFusion source code. In some cases, the pages are examples that are foun...
2004-04-16 allinurl: admin mdb Not all of these pages are administrator's access databases containing usernames, passwords and...
2004-03-04 intitle:Index.of etc shadow This file contains usernames and (lame) encrypted passwords! Armed with this file and a decent ...
2004-03-04 inurl:secring ext:skr | ext:pgp | ext:bak This file is the secret keyring for PGP encryption. Armed with this file (and perhaps a passphr...
2004-03-04 intitle:index.of administrators.pwd This file contains administrative user names and (weakly) encrypted password for Microsoft Fron...
2004-03-04 htpasswd This is a nifty way to find htpasswd files. Htpasswd files contain usernames and crackable pass...
2004-01-23 passlist.txt (a better way) Cleartext passwords. No decryption required!...
2003-08-19 trillian.ini Trillian pulls together all sort of messaging clients like AIM MSN, Yahoo, IRC, ICQ, etc. The v...
2003-07-29 inurl:config.php dbuname dbpass The old config.php script. This puppy should be held very closely. It should never be viewable ...
2003-07-11 auth_user_file.txt DCForum's password file. This file gives a list of (crackable) passwords, usernames and email a...