Skip to content
KitploitKITPLOIT
工具博客
提交
工具博客
提交

黑客、渗透测试和网络安全工具，武装您的安全武器库！

Kitploit 是一个黑客、网络安全和渗透测试工具的目录。发现最新的项目更新，查找漏洞、分析系统、自动化测试并加强你的安全。

··订阅源·联系·隐私·© 2026 Kitploit

工具目录

分类

查看所有分类
Loading categories
GooFuzz — 基于Bash的模糊测试工具，利用Google Dorking技术对目录、文件、子域名和参数进行隐蔽枚举，无需直接向服务器发送请求。 | Kitploit
工具/GitHubGitHub/m3n0sd0n4ld/goofuzz
OSINT (开源情报)侦察DNS和子域名枚举信息收集模糊测试子域名枚举
GitHubm3n0sd0n4ld/goofuzz

GooFuzz

基于Bash的模糊测试工具，利用Google Dorking技术对目录、文件、子域名和参数进行隐蔽枚举，无需直接向服务器发送请求。

查看仓库
1.6k1588个月前Kitploit 审核通过

最受欢迎

查看全部 →

发现我们社区最常用的工具。

探索所有工具

浏览我们的工具集合

查看所有工具 →
分享


GooFuzz - Google Dorks 的力量


致谢

作者：M3n0sD0n4ld
Twitter：@David_Uton

描述：

GooFuzz 是一个用 Bash 脚本 编写的工具，它利用高级 Google 搜索技术来获取文件或目录中的敏感信息，而无需向 Web 服务器发送请求。

新特性

想了解 2.0 版本 的新功能以及如何正确使用该工具吗？

请查看 以下文章，充分利用该工具。

前提条件

  • Bash/Zsh：脚本运行的主要引擎。
  • curl：用于向搜索引擎发送 HTTP 请求。
  • jq：用于处理和过滤 JSON 格式的响应。
  • sed：Unix 系统中的标准文本处理工具。
  • Google API 并创建可编程搜索引擎：需要将 cxId 和 apikey 添加到一个文件中。两者都是免费的。

获取你的 API 密钥

  1. 前往 Google Cloud Console。
  2. 创建一个 新项目（给它起个名字，比如 GooFuzz-Project）。
  3. 在顶部的搜索栏中输入“Custom Search API”，然后点击“启用”按钮。
  4. 启用后，在左侧菜单中转到“凭据”选项卡。
  5. 点击“创建凭据” -> “API 密钥”。
  6. 妥善保管！这就是你的 API key。

2. 获取你的 CX ID（可编程搜索引擎 ID）

  1. 前往 可编程搜索引擎 仪表盘。
  2. 点击“添加”创建新的搜索引擎。
  3. 在“要搜索的内容”部分，选择“搜索整个网络”（这一点至关重要，这样 GooFuzz 就不会局限于单个网站）。
  4. 给它起个名字（例如 GooFuzz-Search），然后点击创建。
  5. 现在进入刚创建的搜索引擎的设置，找到“搜索引擎 ID”。
  6. 这个字母数字代码就是你的 cxId。

下载与安装：```console

git clone https://github.com/m3n0sd0n4ld/GooFuzz.git cd GooFuzz sudo apt install jq chmod +x GooFuzz ./GooFuzz -h

root@kitploit:~
# Docker 版本:```console
git clone https://github.com/m3n0sd0n4ld/GooFuzz.git
cd GooFuzz
docker build -t goofuzz .
docker run --rm -it goofuzz -h

使用:

菜单```console

./GooFuzz -h

  • GooFuzz v.2.0 - The Power of Google Dorks *
  • root@kitploit:~
                                                      *
  • David Utón (@David_Uton) *

Usage: -h Display this help message. -k Specify a FILE with CX_ID,API_KEY pairs, one per line. -w Specify a DICTIONARY, PATHS or FILES. -e Specify comma-separated extensions. -t Specify a DOMAIN or IP Address. -p Specify the number of PAGES (Default: 1). -x EXCLUDES targets (comma-separated or file). -d Delay in seconds between requests. -s Lists subdomains of the specified domain. -c Specify relevant content (comma-separated or file). -o Export the results to a file (results only). -r Specify an [protocol://]host[:port] proxy.

Examples: GooFuzz -t site.com -k keys_file.txt -e pdf,doc,bak GooFuzz -t site.com -k keys_file.txt -s -p 10 -d 5 -o GooFuzz-subdomains.txt GooFuzz -t site.com -k keys_file.txt -w config.php,admin,/images/ GooFuzz -t site.com -k keys_file.txt -w wordlist.txt GooFuzz -t site.com -k keys_file.txt -w login.html -x dev.site.com GooFuzz -t site.com -k keys_file.txt -w admin.html -x exclusion_list.txt GooFuzz -t site.com -k keys_file.txt -c P@ssw0rd! GooFuzz -t site.com -k keys_file.txt -e pdf -r http://proxy.example.com:8080

root@kitploit:~
## 按逗号分隔的扩展名列出文件。```console
> ./GooFuzz -t nasa.gov -e pdf,doc,docx,txt,xls,zip -p 3 -k apikey.lst -o extensions.txt

*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Extension: pdf
===================================================================
https://above.nasa.gov/pdfs/20171020_ASC_Webinar.pdf
https://above.nasa.gov/safety/documents/Bear/bear_ID_brochure_BC.pdf
https://carbon.nasa.gov/pdfs/CMSAVtelecon_20150401_McKainSargent.pdf
https://fun3d.larc.nasa.gov/papers/LowPrecisionSolver.pdf
https://go.nasa.gov/385anj3
https://go.nasa.gov/42QfgGH
https://human-factors.arc.nasa.gov/publications/wenzel_1993_Localization_Head_Related.pdf
https://humansystems.arc.nasa.gov/publications/Barshi_Procedure_Checklist_Design_NASA_TM_2016.pdf
https://mars.nasa.gov/internal_resources/1489/
https://naif.jpl.nasa.gov/pub/naif/generic_kernels/spk/planets/de430_and_de431.pdf
https://nodis3.gsfc.nasa.gov/OPD_Docs/NAII_2800_2_.pdf
https://oig.nasa.gov/docs/IG-15-013.pdf
https://oig.nasa.gov/docs/IG-17-016.pdf
https://oig.nasa.gov/docs/IG-18-016.pdf
https://oig.nasa.gov/docs/IG-18-021.pdf
https://oig.nasa.gov/docs/IG-19-022.pdf
https://orbitaldebris.jsc.nasa.gov/library/usg_orbital_debris_mitigation_standard_practices_november_2019.pdf
https://s3vi.ndc.nasa.gov/ssri-kb/static/resources/529x0g1.pdf
https://sealevel.nasa.gov/internal_resources/535/Suva_Fiji_combined.pdf
https://smap.jpl.nasa.gov/files/smap2/SMAP_Handbook_FINAL_1_JULY_2014_Web.pdf
https://spacemath.gsfc.nasa.gov/moon/5Page28.pdf
https://spacemath.gsfc.nasa.gov/stars/5Page44.pdf
https://spacemath.gsfc.nasa.gov/stars/6Page106.pdf
https://spacemath.gsfc.nasa.gov/weekly/10Page55.pdf
https://spacemath.gsfc.nasa.gov/weekly/6Page89.pdf
https://spaceradiation.larc.nasa.gov/nasapapers/RP1257.pdf
https://spinoff.nasa.gov/back_issues_archives/1985.pdf
https://swift.gsfc.nasa.gov/analysis/xrt_swguide_v1_2.pdf
https://tmo.jpl.nasa.gov/progress_report2/42-44/44N.PDF
https://wind.nasa.gov/docs/MFI_Lepping_SSR1995.pdf

===================================================================
Extension: doc
===================================================================
https://acquisition.jpl.nasa.gov/download/terms-conditions/solicitation-group-a/A16-0359.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/solicitation-group-b/B13-2703.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/solicitation-group-b/B1-62-301.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/solicitation-group-b/B7-2891.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/supporting-documents/1047-NC.doc
https://acquisition.jpl.nasa.gov/download/terms-conditions/supporting-documents/JPL-Form-7112.doc
https://invention.nasa.gov/assets/downloads/nf1679.doc

===================================================================
Extension: docx
===================================================================
https://exoplanets.nasa.gov/internal_resources/1914/

===================================================================
Extension: txt
===================================================================
https://nrt3.modaps.eosdis.nasa.gov/archive/FIRMS/modis-c6.1/Canada/MODIS_C6_1_Canada_MCD14DL_NRT_2025329.txt
https://nrt3.modaps.eosdis.nasa.gov/archive/FIRMS/modis-c6.1/USA_contiguous_and_Hawaii/MODIS_C6_1_USA_contiguous_and_Hawaii_MCD14DL_NRT_2025314.txt
https://nrt3.modaps.eosdis.nasa.gov/archive/FIRMS/suomi-npp-viirs-c2/Northern_and_Central_Africa/SUOMI_VIIRS_C2_Northern_and_Central_Africa_VNP14IMGTDL_NRT_2025193.txt
https://www3.nasa.gov/robots.txt

===================================================================
Extension: xls
===================================================================
https://carbon.nasa.gov/files/tempfiles/cms_short_products_excel.xls

按照txt文件中的扩展名列出文件。```console

./GooFuzz -t nasa.gov -e wordlists/extensions.txt -k apikey.lst -o extensions.txt

  • GooFuzz v.2.0 - The Power of Google Dorks *

Target: nasa.gov

=================================================================== Extension: pdf

https://history.nasa.gov/alsj/a11/A11_PressKit.pdf https://history.nasa.gov/alsj/a13/A13_PressKit.pdf https://history.nasa.gov/alsj/a14/A14_PressKit.pdf https://history.nasa.gov/alsj/a15/A15_PressKit.pdf https://history.nasa.gov/alsj/a410/A09_PressKit.pdf https://oig.nasa.gov/NASA2011MajorChallenges.pdf https://solarsystem.nasa.gov/stardust/aerogel_factsheet.pdf https://www.hq.nasa.gov/alsj/LLRV_Monograph.pdf

=================================================================== Extension: xls

https://oig.nasa.gov/NASA_OIG_FY2013_Recovery_Act_Work_Plan.xls https://www.nasa.gov/xls/163559main_LunarExplorationObjectives.xls https://www.nasa.gov/xls/209970main_acr_section_c_icac_redacted_final_rev8_fixed.xls https://www.nasa.gov/xls/220716main_Ch2_6TV.xls https://www.nasa.gov/xls/279268main_Bird_Strikes.xls https://www.nasa.gov/xls/279283main_Collided_Nearly_Collided_With_Another_Aircraft_While_Both_on_Ground.xls https://www.nasa.gov/xls/279298main_Flight_Operations_Quality_Assurance_Program.xls https://www.nasa.gov/xls/279309main_Location_Aircraft_Unrequested_Clearance_Change.xls https://www.nasa.gov/xls/279532main_Runway_Taxiway_Excursions.xls https://www.nasa.gov/xls/279539main_Takeoffs_With_Out_of_Limit_Center_of_Gravity.xls

=================================================================== Extension: doc

https://cce.nasa.gov/te2010_ab_presentations/Breakout_report.doc https://hdrl.gsfc.nasa.gov/LWS_Data_System_Final.doc https://pumas.nasa.gov/files/01_06_14_1.doc https://www.nasa.gov/279987main_0929MT.DOC https://www.nasa.gov/88878main_C_PDP03.DOC https://www.nasa.gov/doc/311200main_SELDP_Guideline_Rev_01262009.doc https://www.nasa.gov/doc/378831main_Huntsville_Transcript_part5.doc

=================================================================== Extension: txt

https://aeronet.gsfc.nasa.gov/aeronet_locations.txt https://atmcorr.gsfc.nasa.gov/actual_holdings.txt https://fits.gsfc.nasa.gov/rfc4047.txt https://leonid.arc.nasa.gov/02comment66.txt https://leonid.arc.nasa.gov/99comment10.txt https://leonid.arc.nasa.gov/comment36.txt https://www.nasa.gov/190381main_Feldman-transcript.txt https://www.nasa.gov/366950main_1.txt https://www.nasa.gov/378571main_0728NASAMeeting.txt https://www.nasa.gov/382774main_081209_DC_Transcript.txt

root@kitploit:~
## 通过单词列表列出文件、目录甚至参数（建议只使用非常小的文件）。```console
> ./GooFuzz -t nasa.gov -e wordlists/words-100.txt -k apikey.lst -p 1

*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Directories and files found from: wordlists/words-100.txt
===================================================================

https://aeronet.gsfc.nasa.gov/cgi-bin/bamgomas_interactive
https://aeronet.gsfc.nasa.gov/cgi-bin/draw_map_display_aod_v3
https://aeronet.gsfc.nasa.gov/cgi-bin/webtool_aod_v3
https://cdaweb.gsfc.nasa.gov/cgi-bin/eval2.cgi
https://heasarc.gsfc.nasa.gov/cgi-bin/tess/webtess/wtv.py
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/convcoord/convcoord.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/w3nh/w3nh.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/w3pimms/w3pimms.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/xraybg...
https://heasarc.gsfc.nasa.gov/cgi-bin/Tools/xraybg/xraybg.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/W3Browse/swift.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/W3Browse/w3browse.pl
https://heasarc.gsfc.nasa.gov/cgi-bin/W3Browse/w3catindex.pl
https://landweb.modaps.eosdis.nasa.gov/cgi-bin/QA_WWW/qaFlagPage.cgi?sat
https://landweb.modaps.eosdis.nasa.gov/cgi-bin/QA_WWW/qaFlagPage.cgi?sat=terra
https://landweb.modaps.eosdis.nasa.gov/cgi-bin/QA_WWW/qaFlagPage.cgi?sat=terra%26ver=C6
https://sscweb.gsfc.nasa.gov/cgi-bin/Locator.cgi
https://stereo.gsfc.nasa.gov/cgi-bin/images
https://stereo-ssc.nascom.nasa.gov/cgi-bin/images
https://svs.gsfc.nasa.gov/cgi-bin/details.cgi?aid
https://svs.gsfc.nasa.gov/cgi-bin/details.cgi?aid=4285
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=10G004
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=11G020
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=11G032
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=12G008
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=12G028
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=13G019
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=14G009
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=19G014
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=20G024
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=22G012
https://uavsar.jpl.nasa.gov/cgi-bin/data.pl?search=9G023

通过指定路径、单词或文件名列出目录和文件。```console

./GooFuzz -t nasa.gov -w adm,/login/,password,db.html -p 3 -k apikey.lst

  • GooFuzz v.2.0 - The Power of Google Dorks *

Target: nasa.gov

=================================================================== Directories and files found: adm,/login/,password,db.html

https://ahed.nasa.gov/login https://airbornescience.nasa.gov/espo-auth/ajax-login https://c3.ndc.nasa.gov/dashlink/auth/login/ https://ceres-tool.larc.nasa.gov/ord-tool/jsp/Password.jsp https://dir.jpl.nasa.gov/PIV%20Smartcard%20Login%20for%20NASA%20Web%20Applications.pdf https://dir.jpl.nasa.gov/projects/Login.jsp https://gcn.nasa.gov/login https://gipoc.grc.nasa.gov/pbre/log/login.html https://guest.nasa.gov/forgot-password https://montepy.jpl.nasa.gov/login https://my.nasa.gov/s/login/? https://oltaris.nasa.gov/password/new https://software.nasa.gov/login https://sso1.jpl.nasa.gov/cgi-bin/session/login.cgi https://stemgateway.nasa.gov/login https://stemgateway.nasa.gov/public/s/login https://stemgateway.nasa.gov/public/s/login/SelfRegister https://subset.larc.nasa.gov/calipso/login.php https://uavsar.jpl.nasa.gov/cgi-bin/airborne-login.pl https://urs.earthdata.nasa.gov/login https://www.earthdata.nasa.gov/data/earthdata-login https://www.earthdata.nasa.gov/data/earthdata-login/guidance

root@kitploit:~
## 在搜索中排除子域名（用逗号或列表分隔）
### 示例1：
在此示例中，我们从搜索中移除了子域名“*www.earthdata.nasa.gov*”。```console
> ./GooFuzz -t nasa.gov -w login -p 1 -k apikey.lst 
*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Directories and files found from: login
===================================================================
https://firms.modaps.eosdis.nasa.gov/oauth/login?redirect=/api/auth/login/alerts/ed/
https://my.nasa.gov/s/login/?
https://software.nasa.gov/login
https://sso1.jpl.nasa.gov/cgi-bin/session/login.cgi
https://stemgateway.nasa.gov/public/s/login
https://urs.earthdata.nasa.gov/login
https://www.earthdata.nasa.gov/data/earthdata-login
https://www.earthdata.nasa.gov/engage/open-data-services-software/earthdata-developer-portal/earthdata-login-api
https://www.jpl.nasa.gov/site/NSET/accounts/login/                                                                                                                                         
> ./GooFuzz -t nasa.gov -w login -p 1 -x www.earthdata.nasa.gov -k apikey.lst 
*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Directories and files found from: login
===================================================================
https://ahed.nasa.gov/login
https://firms.modaps.eosdis.nasa.gov/oauth/login?redirect=/api/auth/login/alerts/ed/
https://my.nasa.gov/s/login/?
https://software.nasa.gov/login
https://sso1.jpl.nasa.gov/cgi-bin/session/login.cgi
https://stemgateway.nasa.gov/public/s/login
https://subset.larc.nasa.gov/calipso/login.php
https://urs.earthdata.nasa.gov/login
https://www.jpl.nasa.gov/site/NSET/accounts/login/

示例 2：

使用前面的示例，我们创建一个名为 "exclusion_list.txt" 的文件，并插入三个要排除的子域名，然后再次执行相同的搜索，但传递排除目标列表。```console

cat exclusion-list.txt daac.gsfc.nasa.gov invention.nasa.gov software.nasa.gov

./GooFuzz -t nasa.gov -w login -p 1 -x exclusion-list.txt -k apikey.lst

  • GooFuzz v.2.0 - The Power of Google Dorks *

Target: nasa.gov

=================================================================== Directories and files found from: login

https://disc.gsfc.nasa.gov/earthdata-login https://ladsweb.modaps.eosdis.nasa.gov/oauth/login https://nightsky.jpl.nasa.gov/login.cfm https://podaac-tools.jpl.nasa.gov/drive/login?action https://podaac-tools.jpl.nasa.gov/drive/login?action=login https://stemgateway.nasa.gov/public/s/login/ https://technology.nasa.gov/login https://wiki.earthdata.nasa.gov/login.action https://www.earthdata.nasa.gov/eosdis/science-system-description/eosdis-components/earthdata-login https://www.jpl.nasa.gov/site/NSET/accounts/login/ https://www.sewp.nasa.gov/qrt/security/login.sa

root@kitploit:~
## 子域名枚举  
通过列出子域名的功能（参数 "*-s*"）并结合 10 到 20 页的数量（参数 "*-p*"），可以获取到组织的大量子域名。```console
> ./GooFuzz -t nasa.gov -s -p 10 -k apikey.lst 
*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: nasa.gov

===================================================================
Subdomains found:
===================================================================
above.nasa.gov
aeronet.gsfc.nasa.gov
appeears.earthdatacloud.nasa.gov
ares.jsc.nasa.gov
asterweb.jpl.nasa.gov
astrobiology.nasa.gov
esto.nasa.gov
explorers.gsfc.nasa.gov
eyes.nasa.gov
firms.modaps.eosdis.nasa.gov
go.nasa.gov
homeandcity.nasa.gov
imagine.gsfc.nasa.gov
lambda.gsfc.nasa.gov
oig.nasa.gov
plus.nasa.gov
science.nasa.gov
sdo.gsfc.nasa.gov
sealevel.nasa.gov
soma.larc.nasa.gov
space.jpl.nasa.gov
spacemath.gsfc.nasa.gov
spaceplace.nasa.gov
svs.gsfc.nasa.gov
swot.jpl.nasa.gov
technology.nasa.gov
terra.nasa.gov
worldwind.arc.nasa.gov
wvs.earthdata.nasa.gov
www.csbf.nasa.gov
www.earthdata.nasa.gov
www.jpl.nasa.gov
www.sewp.nasa.gov

找到的包含枚举的文件

根据文件内容列出文件的功能（参数 "-c"）非常有助于识别相关文件（例如包含 "password" 一词的文件），即使该词存在于图像文件（例如 .png）中。```console

./GooFuzz -t nasa.gov -c password -k apikey.lst

  • GooFuzz v.2.0 - The Power of Google Dorks *

Target: nasa.gov

=================================================================== Files found containing: password

https://cdaweb.gsfc.nasa.gov/WebServices/REST/idl/api/idldoc-index.html https://cdaweb.gsfc.nasa.gov/WebServices/REST/idl/public/idldoc-index.html https://cloud1.arc.nasa.gov/sonex/pages/sonex_data_exchg.html https://essp.larc.nasa.gov/EVM-3/pdf_files/N_PR_2200_002D_.pdf https://heasarc.gsfc.nasa.gov/docs/software/ftools/fv/doc/fileSelection.html https://hera.gsfc.nasa.gov/webHera/doc/webHera_1.fld/image004.png https://hera.gsfc.nasa.gov/webHera/doc/webHera_1.fld/image029.png https://hera.gsfc.nasa.gov/webHera/doc/webHera_1.fld/image068.png https://hera.gsfc.nasa.gov/webHera/doc/webHera_1.html https://modis-land.gsfc.nasa.gov/pdf/MODIS_C6_BA_User_Guide_1.0.pdf https://nodis3.gsfc.nasa.gov/NPD_attachments/Purchase.pdf https://nodis3.gsfc.nasa.gov/NPR_attachments/NRRS_1441.1.pdf https://ntrs.nasa.gov/api/citations/19960050121/downloads/19960050121.pdf https://procurement.ksc.nasa.gov/-/media/NPSC-SR/BiddersLibrary/DocumentLibrary/NRRS 14411 NASA Record Retention Schedules.ashx https://science.nasa.gov/files/atoms/files/Published HPAC FRN May 5-6 Meeting https://science.nasa.gov/files/atoms/files/Published HPAC FRN May 5-6 Meeting%5B1%5D.pdf https://www-air.larc.nasa.gov/pub/PEMTROPICSB/MODELING/KRISHNAMURTI.FSU/README.txt

root@kitploit:~
#### 概念验证配图
![截图](https://assets.kitploit.com/production/public/readmes/5462/9e4e0ea2da0c8759e59d7c4ba597a8d076cb166dfaffe02dec33b38009fd136f.png)

甚至，在PDF文件中搜索可能的密码：```console
> ./GooFuzz -t .com -c changeme -e pdf
*********************************************************
* GooFuzz v.2.0 - The Power of Google Dorks             *
*********************************************************

Target: .com

===================================================================
Extension: pdf
Files found containing: changeme
===================================================================

https://docs.itrsgroup.com/docs/geneos/4.4.0/SSO Agent/Geneos SSO User Guide v1.0.0.pdf
https://docs.oracle.com/cd/B31589_01/gc3/pdf/integration/gc3datamanagement.pdf
https://docs.vmware.com/en/VMware-Smart-Assurance/10.1.5/sm-pub-smarts-security-config-guide-1015.pdf
https://qsupport.quantum.com/kb/flare/Content/QEKM/Downloads/6-01847-02_Q-EKM_UsersGuide.pdf
https://www.cisco.com/c/en/us/td/docs/net_mgmt/broadband_access_center/3-6/administration/guide/admbac36/chap_20.pdf
https://www.delltechnologies.com/asset/en-us/products/data-protection/technical-support/docu96471.pdf
https://www.delltechnologies.com/asset/en-us/products/data-protection/technical-support/docu97051.pdf
https://www.delltechnologies.com/content/dam/digitalassets/active/en/unauth/technical-guides-support-information/products/data-protection/docu97051.pdf
https://www.delltechnologies.com/content/dam/digitalassets/active/en/unauth/technical-guides-support-information/products/data-protection/docu97085.pdf

使用 PDF 文件的 PoC 示例

截图

免责声明

  • 我对任何滥用此工具的行为不承担责任。
  • 如果谷歌因滥用其 API 而封禁你的账户，我不承担责任。
  • 所有获取的信息均为公开信息，来源于谷歌搜索结果。
  • 从逻辑上讲，搜索是在谷歌上进行的，因此不会在目标服务器的日志中留下任何痕迹。
  • 非常重要的一点是，如果你在谷歌上看到某个文件、目录、子域名等被收录，这并不意味着它仍然存在于服务器上（但也可能还在 ;)）。

有用吗？

如果你喜欢这个工具，或在你的工作、漏洞赏金或业余爱好中发现它有用，你可以通过以下方式帮助我：

  • 将这款工具推荐给你的朋友和同事。
  • 贡献新的想法，或通过此链接帮我修正错误，改进工具。
  • 怎么样？想请我喝杯咖啡吗？非常感谢！

下载工具
https://www.earthdata.nasa.gov/engage/open-data-services-software/earthdata-developer-portal/earthdata-login-api
https://www.earthdata.nasa.gov/learn/tutorials/access-nasa-earth-science-data-earthdata-login
https://www.jpl.nasa.gov/site/NSET/accounts/login/
https://www.nas.nasa.gov/hecc/support/kb/common-login-failures-or-issues_162.html
https://www.nas.nasa.gov/hecc/support/kb/i-cant-log-inmy-password-is-not-workingmy-account-is-locked_5.html
https://www.nas.nasa.gov/hecc/support/kb/password-creation-rules_270.html
https://www.nccs.nasa.gov/nccs-users/Login-Bastions-Change
https://www-mipl.jpl.nasa.gov/Dbms/dbi/html/MDMS__DBI__Password_8h.html
https://www-mipl.jpl.nasa.gov/Dbms/dbi/html/MDMS__DBI__Password_8h__incl.gif
https://www.nas.nasa.gov/hecc/support/kb/pdf-cat/157/
https://www.nccs.nasa.gov/images/Intel_MPI_Reference_Manual.pdf