--- Searching URLs :
The "allinurl" command is used to search for a particular string
present in the URL.Goto google.com and type this in the search box:
allinurl:wwwboard/passwd.txt
Wow! 139 results and allmost every result displays a file containing a
string in the form of --->
username:password (password is encrypted using DES crypto and can be
cracked using john the ripper)
"WWWBOARD" is a CGI message board which saves it's password by default
in a filename called "passwd.txt".This is a very outdated message
board script but many new types of CGI/PHP/ASP messages boards and
scripts save their passwords in a text file (some are not encrypted
i.e. in plain text !! and the rest can most of the time be cracked
with john the ripper)....
Code:
http://www.linuxexposed.com/index.php?option=com_content&task=view&id=192&Itemid=1