filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www

• SHDB
• 1192 阅读

• 日期：2015-02-09
• 类别：
  • Files Containing Juicy Info
• 作者：anonymous
• 语法：filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www

• Hi,

  This google dork to find sensitive and interesting information under

  WEB-INF directory via ftp protocol, for example:

  * Website map

  * Sensitive information (user name and password for webdave)

  * Deployment descriptor in java (web.xml)

  * Servlet mapping url pattern

  Keyword:

  filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www

  --

  Fahad Altamimi