• Rdp Passlist.txt
• Pass List To View Mvc
• Inurl Passlist.txt

1. inurl:'password.txt'
2. Index of /password
3. Index of / +banques +filetype:xls (for france...)
4. Index of / password.txt
5. Вот наиболее интересные:
6. inurl:main.php Welcome to phpMyAdmin
7. intitle:Index of pwd.db
8. intitle:index.of master.passwd
9. intitle:index of intext:globals.inc
10. intitle:Index.of etc shadow
11. inurl:config.php dbuname dbpass
12. intitle:index of intext:connect.inc
13. intitle:Index of .htpasswd htgroup -intitle:dist -apache -htpasswd.c
14. filetype:xls username password email
15. filetype:inc intext:mysql_connect
16. intitle:index.of.etc
17. intitle:Index of config.php
18. прикол: Index.ofICCQ dat
19. filetype:ini inurl:wcx - пароли FTP от Total Command
20. Index.of master.passwd - поиск паролей во FreeBSD
21. Index.of 'amount.xls' - или важную банковскую базу
22. filetype:sql inurl:users - какие-то базы пользователей
23. intitle:Usage Statistics for Generated by Webalizer - смотрим статистику
24. intitle:Index of dbconvert.exe chats - а также логи чата ICQ
25. site:ru filetype:pl inurl:txt - поиск админских файлов в РУнете
26. inurl:main.php Welcome to phpMyAdmin - Дырявый MyAdmin
27. inurl:'passlist.txt'
28. inurl:'auth_user_file.txt'
29. Index of /admin
30. Index of /mail
31. Index of / +banques +filetype:xls (for france...)
32. Index of / password.txt
33. inurl:main.php Welcome to phpMyAdmin
34. intitle:Index of pwd.db
35. intitle:index.of master.passwd
36. intitle:index of intext:globals.inc
37. intitle:Index.of etc shadow
38. inurl:config.php dbuname dbpass
39. intitle:index of intext:connect.inc
40. intitle:Index of .htpasswd htgroup -intitle:dist -apache -htpasswd.c
41. filetype:xls username password email
42. filetype:inc intext:mysql_connect
43. intitle:index.of.etc
44. intitle:Index of config.php

Rdp Passlist.txt

Password dictionaries. These are dictionaries that come with tools/worms/etc, designed for cracking passwords. As far as I know, I'm not breaking any licensing agreements by mirroring them with credit; if you don't want me to host one of these files, let me know and I'll remove it. Just make sure passlist.txt is in wordlists directory. Add extension=phpsqlite3.dll to your php.ini file. If you don’t know where to find this, refer to the PHP docs.

Level Goal
Level Goal

A daemon is listening on port 30002 and will give you the password for bandit25 if given the password for bandit24 and a secret numeric 4-digit pincode. There is no way to retrieve the pincode except by going through all of the 10000 combinations, called brute-forcing.

Walkthrough
So we need to write an script again to bruteforce this. I only now a bit of bash, but this should be doable. Lets see which command we need to execute and how this works. Lets try the format: nc localhost poort password pin
It asks for the pin after the connection. Okaay. Lets try to echo the password and pin and pipe this into nc and see what it does. This works we get a please enter the correct pincode back. We can use this in our script, but we need a list of all the possible combinations.

So I googled on how to make a for loop to generate the 4 digital pincode and came up with this:

This generated the passlist.txt with the password and 0000 for example:

So now the only thing I need to do is cat this file into nc and let it run? Lets try it.
cat passlist.txt | nc localhost 30002

Pass List To View Mvc

Inurl Passlist.txt

This goes fast and it runs!, we got the password but no idea what pincode was entered. But we got the password: uNG9O58gUE7snukf3bvZ0rxhtnjzSGzG