Printable View
I agree, whenever I'm testing the security of a website, the google hacking is always one of the first methods I use. I frequently check back at that ihackstuff site to see what he found next. Although most password files you find now are shadowed, you can still find things like admin control panels, among other things.
It's kinda like a scavenger hunt, just to see what kinds of results you can get out of it.... oops sorry.....a little tipsy at the moment. ;)
You REALLY wanna have fun? Drop by Foundstone and grab the sitedigger tool. It's free.
http://www.foundstone.com/resources/...sitedigger.zip
I takes a very large amount of the known Google searches (similar to Phissy's) and fires them at any domain you like. It is most entertaining.
I agree...the stuff is amazing. Thanks for the fun guys.