Bảng 8,9 tiếp tục truy vấn đó Xác định vị trí Cổng thông tin Đăng nhập Đăng nhập Webmail Webmail Portal Webmin WebMyStyle Truy vấn intitle: IMP inurl: imp/ intitle: "Đăng nhập vào @ Mail" (ext: pl | inurl: "index") inurl-dwaffleman: intext: "10000": webmin | Tracking Down Web Servers Login Portals and Network Hardware Chapter 8 321 Table continued Queries That Locate Login Portals Login Portal Query Webmail intitle IMP inurl imp Webmail intitle Login to @Mail ext pl inurl index -dwaffleman Webmin inurl 10000 intext webmin WebMyStyle intitle WmSC e-Cart Administration intitle WebMyStyle e-Cart Administration WEBppliance inurl ocw_login_username WebSTAR WebSTAR Mail - Please Log In W-Nailer did -forum WorkZone Extranet Solution intitle EXTRANET - Identification WRQ Reflection filetype r2w r2w WWWthreads intitle Please login - Forums powered by WWWThreads inurl wwwthreads inurl wwwthreads Cat xams intitle xams - Login XcAuction intitle XcAuctionLite DRIVEN BY XCENT Lite inurl admin XMail intitle XMail Web Administration Interface intext Login intext password Zope Help System intitle Zope Help System inurl HelpSys ZyXEL Prestige Router intitle ZyXEL Prestige Router Enter password Login portals provide great information for use during a vulnerability assessment. Chapter 4 provides more details on getting the most from these pages. Using and Locating Various Web Utilities Google is amazing and very flexible but it certainly can t do everything. Some things are much easier when you don t use like WHOIS lookups pings traceroutes and port scans are much easier when performed outside of is a wealth of tools available that can perform these functions but with a bit of creative Googling it s possible to perform all of these arduous functions and more preserving the level of anonymity Google hackers have come to expect. Consider a tool called the Network Query Tool NQT shown in Figure . 322 Chapter 8 Tracking Down Web Servers Login Portals and Network Hardware Figure The NQT NQT the Network Query Tool Offers Interesting Options Default installations of NQT allow any Web user to perform Internet Protocol IP host name and address lookups .
