There is a lot of information on the Internet hosted on Amazon drives that is accessible but is hard to find, this can be found using Google Dorks.
site:http://s3.amazonaws.com confidential OR “top secret” |
This Google Dork will find many publically accessible documents hosted on Amazon AWS. Since security does not exist on the Internet, this is easy to use. You may even find Department of Defence documents easily. Because Amazon only has as much security as the users could be bothered to implement, it becomes so easy to access confidential documents over the Internet.
This Google Dork will find HVAC systems connected to the Internet, this can be very interesting, especially if you know the default username and password…
intitle:"Status & Control" + "Thermostat Status" +"HVAC Settings" +"Zone Temperature" |
use this Google Dork to find database backups containing password strings.
inurl:/wp-content/uploads/wp-file-manager-pro/fm_backup |
This can be good if you find an SQL backup. Since people store SQL backups on their websites in full view, you might as well download them and have a look.
And you may also find Hitron Technologies routers connected to the Internet.
inurl:"/login.htm" "Hitron Technologies" |
These can be interesting if the default password is still set.
If a curious user wishes to find cool files to download, then use this example.
allinurl:foldercontent.html?folder= |
This will find Iomega storage drives connected to the Internet.
The above screenshot shows an HVAC system connected to the Internet. This was protected by a password, but you can still tweak the settings, you cannot apply them.
Use this Google Dork to access this.
intext:"default values: admin/1234" |
Find VertrigoServ instances on the Internet, these give information about which versions of web software are running on a server, this can be invaluable when researching a website.
intitle:"VertrigoServ" + "Welcome to VertrigoServ" |