Skip to content
KitploitKITPLOIT
도구블로그
제출
도구블로그
제출

해킹, 침투 테스트 및 사이버 보안 도구를 당신의 보안 무기고에!

Kitploit은 해킹, 사이버 보안 및 침투 테스트 도구 디렉토리입니다. 최신 프로젝트 업데이트를 발견하여 취약점을 찾고, 시스템을 분석하고, 테스트를 자동화하고, 보안을 강화하세요.

··피드·문의·개인정보·© 2026 Kitploit

도구 디렉토리

카테고리

모든 카테고리 보기
Loading categories
GooFuzz — Bash 기반 퍼징 도구로, Google Dorking을 활용하여 직접적인 서버 요청 없이 디렉터리, 파일, 서브도메인 및 매개변수를 은밀하게 열거합니다. | Kitploit
도구/GitHubGitHub/m3n0sd0n4ld/goofuzz
OSINT (Open Source Intelligence)ReconnaissanceDNS & Subdomain EnumerationInformation GatheringFuzzingSubdomain Enumeration
GitHubm3n0sd0n4ld/goofuzz

GooFuzz

Bash 기반 퍼징 도구로, Google Dorking을 활용하여 직접적인 서버 요청 없이 디렉터리, 파일, 서브도메인 및 매개변수를 은밀하게 열거합니다.

저장소 보기
1.6k1588개월 전Kitploit 검토 완료

인기

모두 보기 →

커뮤니티에서 가장 많이 사용되는 도구를 찾아보세요.

모든 도구 탐색

도구 컬렉션을 둘러보세요

모든 도구 보기 →
공유


GooFuzz - The Power of Google Dorks


크레딧

저자: M3n0sD0n4ld
트위터: @David_Uton

설명:

GooFuzz는 Bash 스크립팅으로 작성된 스크립트로, 고급 Google 검색 기법을 사용하여 웹 서버에 요청하지 않고 파일이나 디렉터리에서 민감한 정보를 얻습니다.

새로운 소식

버전 2.0의 새로운 기능과 도구를 올바르게 사용하는 방법에 대해 알아보고 싶으신가요?

아래 문서를 확인하여 도구를 최대한 활용하세요.

사전 요구 사항

  • Bash/Zsh: 스크립트가 실행되는 주요 엔진입니다.
  • curl: 검색 엔진에 HTTP 요청을 보내는 데 사용됩니다.
  • jq: JSON 형식의 응답을 처리하고 필터링하는 데 필요합니다.
  • sed: Unix 시스템의 표준 텍스트 처리 도구입니다.
  • Google API 및 프로그래밍 가능 검색 엔진 생성: cxId와 apikey를 파일에 추가하는 데 필요합니다. 둘 다 무료입니다.

API 키 얻기

  1. Google Cloud Console로 이동합니다.
  2. 새 프로젝트를 만듭니다(이름을 지정하세요, 예: GooFuzz-Project).
  3. 상단 검색창에 "Custom Search API"를 입력하고 활성화 버튼을 클릭합니다.
  4. 활성화된 후 왼쪽 메뉴에서 "Credentials" 탭으로 이동합니다.
  5. "Create credentials" -> "API key"를 클릭합니다.
  6. 안전하게 보관하세요! 이것이 API key입니다.

2. CX ID 얻기 (프로그래밍 가능 검색 엔진)

  1. Programmable Search Engine 대시보드로 이동합니다.
  2. "Add"를 클릭하여 새 검색 엔진을 만듭니다.
  3. "What to search" 섹션에서 "Search the entire Web"을 선택합니다(이것은 GooFuzz가 단일 웹사이트로 제한되지 않도록 하는 데 중요합니다).
  4. 이름을 지정하고(예: GooFuzz-Search) Create를 클릭합니다.
  5. 이제 방금 만든 검색 엔진의 설정으로 이동하여 "Search engine ID"를 찾습니다.
  6. 해당 영숫자 코드가 cxId입니다.

다운로드 및 설치:```console

git clone https://github.com/m3n0sd0n4ld/GooFuzz.git cd GooFuzz sudo apt install jq chmod +x GooFuzz ./GooFuzz -h

root@kitploit:~
# 도커 버전:```console
git clone https://github.com/m3n0sd0n4ld/GooFuzz.git
cd GooFuzz
docker build -t goofuzz .
docker run --rm -it goofuzz -h

사용법:

메뉴```console

./GooFuzz -h

  • GooFuzz v.2.0 - The Power of Google Dorks *
  • root@kitploit:~
                                                      *
  • David Utón (@David_Uton) *

Usage: -h Display this help message. -k Specify a FILE with CX_ID,API_KEY pairs, one per line. -w Specify a DICTIONARY, PATHS or FILES. -e Specify comma-separated extensions. -t Specify a DOMAIN or IP Address. -p Specify the number of PAGES (Default: 1). -x EXCLUDES targets (comma-separated or file). -d Delay in seconds between requests. -s Lists subdomains of the specified domain. -c Specify relevant content (comma-separated or file). -o Export the results to a file (results only). -r Specify an [protocol://]host[:port] proxy.

Examples: GooFuzz -t site.com -k keys_file.txt -e pdf,doc,bak GooFuzz -t site.com -k keys_file.txt -s -p 10 -d 5 -o GooFuzz-subdomains.txt GooFuzz -t site.com -k keys_file.txt -w config.php,admin,/images/ GooFuzz -t site.com -k keys_file.txt -w wordlist.txt GooFuzz -t site.com -k keys_file.txt -w login.html -x dev.site.com GooFuzz -t site.com -k keys_file.txt -w admin.html -x exclusion_list.txt GooFuzz -t site.com -k keys_file.txt -c P@ssw0rd! GooFuzz -t site.com -k keys_file.txt -e pdf -r http://proxy.example.com:8080

root@kitploit:~
## 확장자별로 파일을 쉼표로 구분하여 나열합니다.```console
> ./GooFuzz -t nasa.gov -e pdf,doc,docx,txt,xls,zip -p 3 -k apikey.lst -o extensions.txt

*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Extension: pdf
===================================================================
https://above.nasa.gov/pdfs/20171020_ASC_Webinar.pdf
https://above.nasa.gov/safety/documents/Bear/bear_ID_brochure_BC.pdf
https://carbon.nasa.gov/pdfs/CMSAVtelecon_20150401_McKainSargent.pdf
https://fun3d.larc.nasa.gov/papers/LowPrecisionSolver.pdf
https://go.nasa.gov/385anj3
https://go.nasa.gov/42QfgGH
https://human-factors.arc.nasa.gov/publications/wenzel_1993_Localization_Head_Related.pdf
https://humansystems.arc.nasa.gov/publications/Barshi_Procedure_Checklist_Design_NASA_TM_2016.pdf
https://mars.nasa.gov/internal_resources/1489/
https://naif.jpl.nasa.gov/pub/naif/generic_kernels/spk/planets/de430_and_de431.pdf
https://nodis3.gsfc.nasa.gov/OPD_Docs/NAII_2800_2_.pdf
https://oig.nasa.gov/docs/IG-15-013.pdf
https://oig.nasa.gov/docs/IG-17-016.pdf
https://oig.nasa.gov/docs/IG-18-016.pdf
https://oig.nasa.gov/docs/IG-18-021.pdf
https://oig.nasa.gov/docs/IG-19-022.pdf
https://orbitaldebris.jsc.nasa.gov/library/usg_orbital_debris_mitigation_standard_practices_november_2019.pdf
https://s3vi.ndc.nasa.gov/ssri-kb/static/resources/529x0g1.pdf
https://sealevel.nasa.gov/internal_resources/535/Suva_Fiji_combined.pdf
https://smap.jpl.nasa.gov/files/smap2/SMAP_Handbook_FINAL_1_JULY_2014_Web.pdf
https://spacemath.gsfc.nasa.gov/moon/5Page28.pdf
https://spacemath.gsfc.nasa.gov/stars/5Page44.pdf
https://spacemath.gsfc.nasa.gov/stars/6Page106.pdf
https://spacemath.gsfc.nasa.gov/weekly/10Page55.pdf
https://spacemath.gsfc.nasa.gov/weekly/6Page89.pdf
https://spaceradiation.larc.nasa.gov/nasapapers/RP1257.pdf
https://spinoff.nasa.gov/back_issues_archives/1985.pdf
https://swift.gsfc.nasa.gov/analysis/xrt_swguide_v1_2.pdf
https://tmo.jpl.nasa.gov/progress_report2/42-44/44N.PDF
https://wind.nasa.gov/docs/MFI_Lepping_SSR1995.pdf

===================================================================
Extension: doc
===================================================================
https://acquisition.jpl.nasa.gov/download/terms-conditions/solicitation-group-a/A16-0359.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/solicitation-group-b/B13-2703.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/solicitation-group-b/B1-62-301.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/solicitation-group-b/B7-2891.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/supporting-documents/1047-NC.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/supporting-documents/JPL-Form-7112.doc
https://invention.nasa.gov/assets/downloads/nf1679.doc

===================================================================
Extension: docx
===================================================================
https://exoplanets.nasa.gov/internal_resources/1914/

===================================================================
Extension: txt
===================================================================
https://nrt3.modaps.eosdis.nasa.gov/archive/FIRMS/modis-c6.1/Canada/MODIS_C6_1_Canada_MCD14DL_NRT_2025329.txt
https://nrt3.modaps.eosdis.nasa.gov/archive/FIRMS/modis-c6.1/USA_contiguous_and_Hawaii/MODIS_C6_1_USA_contiguous_and_Hawaii_MCD14DL_NRT_2025314.txt
https://nrt3.modaps.eosdis.nasa.gov/archive/FIRMS/suomi-npp-viirs-c2/Northern_and_Central_Africa/SUOMI_VIIRS_C2_Northern_and_Central_Africa_VNP14IMGTDL_NRT_2025193.txt
https://www3.nasa.gov/robots.txt

===================================================================
Extension: xls
===================================================================
https://carbon.nasa.gov/files/tempfiles/cms_short_products_excel.xls

txt 파일에 포함된 확장자별로 파일을 나열합니다.```console

./GooFuzz -t nasa.gov -e wordlists/extensions.txt -k apikey.lst -o extensions.txt

  • GooFuzz v.2.0 - The Power of Google Dorks *

Target: nasa.gov

=================================================================== Extension: pdf

https://history.nasa.gov/alsj/a11/A11_PressKit.pdf https://history.nasa.gov/alsj/a13/A13_PressKit.pdf https://history.nasa.gov/alsj/a14/A14_PressKit.pdf https://history.nasa.gov/alsj/a15/A15_PressKit.pdf https://history.nasa.gov/alsj/a410/A09_PressKit.pdf https://oig.nasa.gov/NASA2011MajorChallenges.pdf https://solarsystem.nasa.gov/stardust/aerogel_factsheet.pdf https://www.hq.nasa.gov/alsj/LLRV_Monograph.pdf

=================================================================== Extension: xls

https://oig.nasa.gov/NASA_OIG_FY2013_Recovery_Act_Work_Plan.xls https://www.nasa.gov/xls/163559main_LunarExplorationObjectives.xls https://www.nasa.gov/xls/209970main_acr_section_c_icac_redacted_final_rev8_fixed.xls https://www.nasa.gov/xls/220716main_Ch2_6TV.xls https://www.nasa.gov/xls/279268main_Bird_Strikes.xls https://www.nasa.gov/xls/279283main_Collided_Nearly_Collided_With_Another_Aircraft_While_Both_on_Ground.xls https://www.nasa.gov/xls/279298main_Flight_Operations_Quality_Assurance_Program.xls https://www.nasa.gov/xls/279309main_Location_Aircraft_Unrequested_Clearance_Change.xls https://www.nasa.gov/xls/279532main_Runway_Taxiway_Excursions.xls https://www.nasa.gov/xls/279539main_Takeoffs_With_Out_of_Limit_Center_of_Gravity.xls

=================================================================== Extension: doc

https://cce.nasa.gov/te2010_ab_presentations/Breakout_report.doc https://hdrl.gsfc.nasa.gov/LWS_Data_System_Final.doc https://pumas.nasa.gov/files/01_06_14_1.doc https://www.nasa.gov/279987main_0929MT.DOC https://www.nasa.gov/88878main_C_PDP03.DOC https://www.nasa.gov/doc/311200main_SELDP_Guideline_Rev_01262009.doc https://www.nasa.gov/doc/378831main_Huntsville_Transcript_part5.doc

=================================================================== Extension: txt

https://aeronet.gsfc.nasa.gov/aeronet_locations.txt https://atmcorr.gsfc.nasa.gov/actual_holdings.txt https://fits.gsfc.nasa.gov/rfc4047.txt https://leonid.arc.nasa.gov/02comment66.txt https://leonid.arc.nasa.gov/99comment10.txt https://leonid.arc.nasa.gov/comment36.txt https://www.nasa.gov/190381main_Feldman-transcript.txt https://www.nasa.gov/366950main_1.txt https://www.nasa.gov/378571main_0728NASAMeeting.txt https://www.nasa.gov/382774main_081209_DC_Transcript.txt

root@kitploit:~
## List files, directories and even parameters by means of a wordlist (it is recommended to use only very small files).```console
> ./GooFuzz -t nasa.gov -e wordlists/words-100.txt -k apikey.lst -p 1

*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Directories and files found from: wordlists/words-100.txt
===================================================================

https://aeronet.gsfc.nasa.gov/cgi-bin/bamgomas_interactive
https://aeronet.gsfc.nasa.gov/cgi-bin/draw_map_display_aod_v3
https://aeronet.gsfc.nasa.gov/cgi-bin/webtool_aod_v3
https://cdaweb.gsfc.nasa.gov/cgi-bin/eval2.cgi
https://heasarc.gsfc.nasa.gov/cgi-bin/tess/webtess/wtv.py
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/convcoord/convcoord.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/w3nh/w3nh.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/w3pimms/w3pimms.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/xraybg...
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/xraybg/xraybg.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/W3Browse/swift.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/W3Browse/w3browse.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/W3Browse/w3catindex.pl
https://landweb.modaps.eosdis.nasa.gov/cgi-bin/QA_WWW/qaFlagPage.cgi?sat
https://landweb.modaps.eosdis.nasa.gov/cgi-bin/QA_WWW/qaFlagPage.cgi?sat=terra
https://landweb.modaps.eosdis.nasa.gov/cgi-bin/QA_WWW/qaFlagPage.cgi?sat=terra%26ver=C6
https://sscweb.gsfc.nasa.gov/cgi-bin/Locator.cgi
https://stereo.gsfc.nasa.gov/cgi-bin/images
https://stereo-ssc.nascom.nasa.gov/cgi-bin/images
https://svs.gsfc.nasa.gov/cgi-bin/details.cgi?aid
https://svs.gsfc.nasa.gov/cgi-bin/details.cgi?aid=4285
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=10G004
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=11G020
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=11G032
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=12G008
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=12G028
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=13G019
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=14G009
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=19G014
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=20G024
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=22G012
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=9G023

경로, 단어 또는 파일 이름을 지정하여 디렉토리와 파일을 나열합니다.```console

./GooFuzz -t nasa.gov -w adm,/login/,password,db.html -p 3 -k apikey.lst

  • GooFuzz v.2.0 - The Power of Google Dorks *

Target: nasa.gov

=================================================================== Directories and files found: adm,/login/,password,db.html

https://ahed.nasa.gov/login https://airbornescience.nasa.gov/espo-auth/ajax-login https://c3.ndc.nasa.gov/dashlink/auth/login/ https://ceres-tool.larc.nasa.gov/ord-tool/jsp/Password.jsp https://dir.jpl.nasa.gov/PIV%20Smartcard%20Login%20for%20NASA%20Web%20Applications.pdf https://dir.jpl.nasa.gov/projects/Login.jsp https://gcn.nasa.gov/login https://gipoc.grc.nasa.gov/pbre/log/login.html https://guest.nasa.gov/forgot-password https://montepy.jpl.nasa.gov/login https://my.nasa.gov/s/login/? https://oltaris.nasa.gov/password/new https://software.nasa.gov/login https://sso1.jpl.nasa.gov/cgi-bin/session/login.cgi https://stemgateway.nasa.gov/login https://stemgateway.nasa.gov/public/s/login https://stemgateway.nasa.gov/public/s/login/SelfRegister https://subset.larc.nasa.gov/calipso/login.php https://uavsar.jpl.nasa.gov/cgi-bin/airborne-login.pl https://urs.earthdata.nasa.gov/login https://www.earthdata.nasa.gov/data/earthdata-login https://www.earthdata.nasa.gov/data/earthdata-login/guidance

root@kitploit:~
## 검색에서 하위 도메인 제외 (쉼표 또는 목록으로 구분)
### 예시 1:
이 예시에서는 검색에서 하위 도메인 "*www.earthdata.nasa.gov*"를 제거합니다.```console
> ./GooFuzz -t nasa.gov -w login -p 1 -k apikey.lst 
*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Directories and files found from: login
===================================================================
https://firms.modaps.eosdis.nasa.gov/oauth/login?redirect=/api/auth/login/alerts/ed/
https://my.nasa.gov/s/login/?
https://software.nasa.gov/login
https://sso1.jpl.nasa.gov/cgi-bin/session/login.cgi
https://stemgateway.nasa.gov/public/s/login
https://urs.earthdata.nasa.gov/login
https://www.earthdata.nasa.gov/data/earthdata-login
https://www.earthdata.nasa.gov/engage/open-data-services-software/earthdata-developer-portal/earthdata-login-api
https://www.jpl.nasa.gov/site/NSET/accounts/login/                                                                                                                                         
> ./GooFuzz -t nasa.gov -w login -p 1 -x www.earthdata.nasa.gov -k apikey.lst 
*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Directories and files found from: login
===================================================================
https://ahed.nasa.gov/login
https://firms.modaps.eosdis.nasa.gov/oauth/login?redirect=/api/auth/login/alerts/ed/
https://my.nasa.gov/s/login/?
https://software.nasa.gov/login
https://sso1.jpl.nasa.gov/cgi-bin/session/login.cgi
https://stemgateway.nasa.gov/public/s/login
https://subset.larc.nasa.gov/calipso/login.php
https://urs.earthdata.nasa.gov/login
https://www.jpl.nasa.gov/site/NSET/accounts/login/

예제 2:

이전 예제를 사용하여 "exclusion_list.txt"라는 파일을 생성하고 제외할 세 개의 하위 도메인을 삽입한 후, 동일한 검색을 다시 수행하지만 제외된 대상 목록을 전달합니다.```console

cat exclusion-list.txt daac.gsfc.nasa.gov invention.nasa.gov software.nasa.gov

./GooFuzz -t nasa.gov -w login -p 1 -x exclusion-list.txt -k apikey.lst

  • GooFuzz v.2.0 - The Power of Google Dorks *

Target: nasa.gov

=================================================================== Directories and files found from: login

https://disc.gsfc.nasa.gov/earthdata-login https://ladsweb.modaps.eosdis.nasa.gov/oauth/login https://nightsky.jpl.nasa.gov/login.cfm https://podaac-tools.jpl.nasa.gov/drive/login?action https://podaac-tools.jpl.nasa.gov/drive/login?action=login https://stemgateway.nasa.gov/public/s/login/ https://technology.nasa.gov/login https://wiki.earthdata.nasa.gov/login.action https://www.earthdata.nasa.gov/eosdis/science-system-description/eosdis-components/earthdata-login https://www.jpl.nasa.gov/site/NSET/accounts/login/ https://www.sewp.nasa.gov/qrt/security/login.sa

root@kitploit:~
## 서브도메인 열거
서브도메인을 나열하는 기능(매개변수 "*-s*")과 10~20페이지 사이의 수(매개변수 "*-p*")를 함께 사용하면 조직의 많은 서브도메인을 얻을 수 있습니다.```console
> ./GooFuzz -t nasa.gov -s -p 10 -k apikey.lst 
*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Subdomains found:
===================================================================
above.nasa.gov
aeronet.gsfc.nasa.gov
appeears.earthdatacloud.nasa.gov
ares.jsc.nasa.gov
asterweb.jpl.nasa.gov
astrobiology.nasa.gov
esto.nasa.gov
explorers.gsfc.nasa.gov
eyes.nasa.gov
firms.modaps.eosdis.nasa.gov
go.nasa.gov
homeandcity.nasa.gov
imagine.gsfc.nasa.gov
lambda.gsfc.nasa.gov
oig.nasa.gov
plus.nasa.gov
science.nasa.gov
sdo.gsfc.nasa.gov
sealevel.nasa.gov
soma.larc.nasa.gov
space.jpl.nasa.gov
spacemath.gsfc.nasa.gov
spaceplace.nasa.gov
svs.gsfc.nasa.gov
swot.jpl.nasa.gov
technology.nasa.gov
terra.nasa.gov
worldwind.arc.nasa.gov
wvs.earthdata.nasa.gov
www.csbf.nasa.gov
www.earthdata.nasa.gov
www.jpl.nasa.gov
www.sewp.nasa.gov

열거를 포함하는 발견된 파일

내용별로 파일을 나열하는 기능(매개변수 "-c")은 관련 파일(예: "password" 단어를 포함하는 파일)을 식별하는 데 매우 유용하며, 해당 단어가 이미지 파일(예: .png)에 있더라도 마찬가지입니다.```console

./GooFuzz -t nasa.gov -c password -k apikey.lst

  • GooFuzz v.2.0 - The Power of Google Dorks *

Target: nasa.gov

=================================================================== Files found containing: password

https://cdaweb.gsfc.nasa.gov/WebServices/REST/idl/api/idldoc-index.html https://cdaweb.gsfc.nasa.gov/WebServices/REST/idl/public/idldoc-index.html https://cloud1.arc.nasa.gov/sonex/pages/sonex_data_exchg.html https://essp.larc.nasa.gov/EVM-3/pdf_files/N_PR_2200_002D_.pdf https://heasarc.gsfc.nasa.gov/docs/software/ftools/fv/doc/fileSelection.html https://hera.gsfc.nasa.gov/webHera/doc/webHera_1.fld/image004.png https://hera.gsfc.nasa.gov/webHera/doc/webHera_1.fld/image029.png https://hera.gsfc.nasa.gov/webHera/doc/webHera_1.fld/image068.png https://hera.gsfc.nasa.gov/webHera/doc/webHera_1.html https://modis-land.gsfc.nasa.gov/pdf/MODIS_C6_BA_User_Guide_1.0.pdf https://nodis3.gsfc.nasa.gov/NPD_attachments/Purchase.pdf https://nodis3.gsfc.nasa.gov/NPR_attachments/NRRS_1441.1.pdf https://ntrs.nasa.gov/api/citations/19960050121/downloads/19960050121.pdf https://procurement.ksc.nasa.gov/-/media/NPSC-SR/BiddersLibrary/DocumentLibrary/NRRS 14411 NASA Record Retention Schedules.ashx https://science.nasa.gov/files/atoms/files/Published HPAC FRN May 5-6 Meeting https://science.nasa.gov/files/atoms/files/Published HPAC FRN May 5-6 Meeting%5B1%5D.pdf https://www-air.larc.nasa.gov/pub/PEMTROPICSB/MODELING/KRISHNAMURTI.FSU/README.txt

root@kitploit:~
#### 이미지를 이용한 개념 증명  
![Screenshot](https://assets.kitploit.com/production/public/readmes/5462/9e4e0ea2da0c8759e59d7c4ba597a8d076cb166dfaffe02dec33b38009fd136f.png)  

또는 PDF 파일에서 가능한 비밀번호를 검색할 수도 있습니다:```console
> ./GooFuzz -t .com -c changeme -e pdf
*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: .com

===================================================================
Extension: pdf
Files found containing: changeme
===================================================================

https://docs.itrsgroup.com/docs/geneos/4.4.0/SSO Agent/Geneos SSO User Guide v1.0.0.pdf
https://docs.oracle.com/cd/B31589_01/gc3/pdf/integration/gc3datamanagement.pdf
https://docs.vmware.com/en/VMware-Smart-Assurance/10.1.5/sm-pub-smarts-security-config-guide-1015.pdf
https://qsupport.quantum.com/kb/flare/Content/QEKM/Downloads/6-01847-02_Q-EKM_UsersGuide.pdf
https://www.cisco.com/c/en/us/td/docs/net_mgmt/broadband_access_center/3-6/administration/guide/admbac36/chap_20.pdf
https://www.delltechnologies.com/asset/en-us/products/data-protection/technical-support/docu96471.pdf
https://www.delltechnologies.com/asset/en-us/products/data-protection/technical-support/docu97051.pdf
https://www.delltechnologies.com/content/dam/digitalassets/active/en/unauth/technical-guides-support-information/products/data-protection/docu97051.pdf
https://www.delltechnologies.com/content/dam/digitalassets/active/en/unauth/technical-guides-support-information/products/data-protection/docu97085.pdf

PDF 파일을 이용한 개념 증명

Screenshot

면책 조항

  • 저는 이 도구의 오용에 대해 책임을 지지 않습니다.
  • Google API를 남용하여 귀하의 계정이 차단되더라도 저는 책임을 지지 않습니다.
  • 획득된 모든 정보는 공개 정보이며 Google 검색 결과에서 비롯됩니다.
  • 논리적으로 검색은 Google에서 수행되므로 대상 서버의 로그에 흔적을 남기지 않습니다.
  • 그리고 매우 중요한 것은, Google에 인덱싱된 파일, 디렉토리, 서브도메인 등을 찾았다고 해서 해당 파일이 여전히 서버에 존재한다는 의미는 아닙니다 (존재할 수도 있지만 ;)).

도움이 되셨나요?

이 도구가 마음에 들고, 업무, 버그 바운티 또는 취미 생활에 유용하게 사용된다면, 다음과 같이 저를 도와주실 수 있습니다:

  • 친구나 동료에게 이 도구에 대해 알려주세요.
  • 여기에서 버그를 수정하거나 새로운 아이디어를 기여해 주세요.
  • 커피 한 잔 사주시겠어요? 정말 감사합니다!

도구 다운로드
https://www.earthdata.nasa.gov/engage/open-data-services-software/earthdata-developer-portal/earthdata-login-api
https://www.earthdata.nasa.gov/learn/tutorials/access-nasa-earth-science-data-earthdata-login
https://www.jpl.nasa.gov/site/NSET/accounts/login/
https://www.nas.nasa.gov/hecc/support/kb/common-login-failures-or-issues_162.html
https://www.nas.nasa.gov/hecc/support/kb/i-cant-log-inmy-password-is-not-workingmy-account-is-locked_5.html
https://www.nas.nasa.gov/hecc/support/kb/password-creation-rules_270.html
https://www.nccs.nasa.gov/nccs-users/Login-Bastions-Change
https://www-mipl.jpl.nasa.gov/Dbms/dbi/html/MDMS__DBI__Password_8h.html
https://www-mipl.jpl.nasa.gov/Dbms/dbi/html/MDMS__DBI__Password_8h__incl.gif
https://www.nas.nasa.gov/hecc/support/kb/pdf-cat/157/
https://www.nccs.nasa.gov/images/Intel_MPI_Reference_Manual.pdf