Find SQL databases on Google (vBulletin etc)

Olly

Olly

Junior Member
Joined
Jun 28, 2007
Messages
146
Reaction score
293
I found out about this a while ago and just remembered about it so thought I'd post it here. I'm sure most of you know this but a cool trick for those who don't to find forum databases (vBulletin etc) and others on Google.

In the search box type;

"vbulletin" filetype:sql

This will return a list of backups people have placed on their server of their vBulletin forum and a few other things.

This could be pretty handy if you find a database with lots of users on the same subject of a product you might be promoting ;) Or maybe you want to load yourself a new forum with a few posts/users already there. I just downloaded one and loaded it on localhost and had a forum with 200 users and around 2500 threads.

I'm sure you can think of something to use them for.

There was a few other similar commands which I will try and find and post here soon :)
 
Advertise on BHW
Have you tried looking for $config['MasterServer']['username'] on Google?

Sad. Very sad.
 
lol, sweet, what should I search for to find users and passwords though?
 
That is the code.

If you find the above string within a page, it is most likely the vB configuration file to access the DB the vB is running from.

There is one just like that phpBB, PHPNuke, etc.

Because they do not lock down the folders, Google scans it, and posts it... If the file is not there, there might be still cached information.

FYI - what you are planning is illegal in most countries (and that is much more than 'just' black hat, in my opinion).
 
if i remember right there was an ebook titled "Go*gle as a hacking tool"
its "quite a view years old" about 2 to 3 i think

Mike
 
i found a similar one
if the links not working anymore, at least you get a picture of what's in the book.

hxxp://knowfree.net/2007/09/04/google-hacks-3rd-edition-with-source-code.kf
 
Hey that is scary! How can I protect my websites/passwords from that thing?
 
put your mysql db in a directory that can't be index by google(either .htaccess or out of webserver path),
turn off directory listing,
add robot.txt
and look throug your .htaccess files and tight them up.

Mike
 
How does it looks so that i will know that its there site backups?

please let me know. im learning alot in here
 
paypalaffiliate said:
How does it looks so that i will know that its there site backups?

please let me know. im learning alot in here
Click to expand...

Well for vBulletin ones the backups are named something like;

forumbackup-06-06-2006-1234d.sql

So, "forumbackup+date+somenumber.sql"


I'm not sure about other sites/scripts but I guess just look for file names with words like "backup" or "dump" etc, stuff like that.
 
heres a good tip

type in something like

"@aol.com" filetype:sql

or

"@hotmail.com" filetype:sql

then search threw the results looking for plain md5 passwords next to the entries

then just simply enter the email addy unencoded md5 pass or plain pass from the results you find

i have found over 10 poeples email accounts this way, its good to save and then access poeples info every now and agian
 
google dork :)
just remember me how to carding many years ago :D
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top