There are many ways to search for vulnerable sites with google. I'll show you here how to get username and password from sites that use FrontPage extentions. Microsoft FrontPage Extensions creates a service.pwd file inside the _vti_pvt directory in the HTTP server's document root. This file contains user names and passwords that could be remotely retrieved by an attacker. The good news is that Google indexes this kind of files, so they are very easy to search for. The bad news is that the passwords are encrypted, but wait, this is not really a bad news :-) because you can crack them if you are patient and you have the will. If you want to become a hacker, you have to be patient and you have to have the will. Please note: I'm not telling you to hack sites, this stuff is just for learning. So if you want to do illegal things, you should know that jail is a possibility.

So lets go to the details:

» Read More

There is a post entitled "Google Search Hacks" at A-Z Google blog explaining how to hack sites with Google. You can search for sites vulnerable to Cross-Sites Scripting (XSS) attacks or SQL Injection, or even WWWBoard Password vulnerability.

» Read More

To prevent your post from being archived on Google, add the following line to the headers of your Usenet post:

        X-No-Archive: yes

If you don't have the options to edit the headers of your post, make that line the first line in your post itself (with no additional text included on that line). Your post will be displayed on Google Groups for only seven days and removed after that.