Get the App
SLTechnology News&Howtos  ›  Network Security  › 

Several ways to find the background

Shulou Source: shulou.com Published: 2022-06-01 10:53:15 10月08日 Update

1. Tool-assisted search

Ming Boy, ah D, some tools under wwwscan,nikto,kali, etc.

And some column catalog tools: Acunetix Web Vulnerability Scanner, JSky, IntelliTamper, Netsparker... Wait

two。 Utilization of website resources

The Robots.txt text of the root directory of the website, the picture path explodes in the background, check whether the copyright information at the bottom of the website is connected, and know it by querying the file name in the website.

3. Search engine query

There was a reprinted article that introduced the use of search engines in detail.

Site:heimian.com intext: administration | backend | login | user name | password | CAPTCHA | system | account | manage | admin | login | system

Site:heimian.com inurl:login | admin | manage | manager | admin_login | login_admin | system

Site:heimian.com intitle: management | backend | Log in |

Site:heimian.com intext: verification code

4. Guess

For example, some time ago, CCTV http://chinvan.cctv.com/ChinvanAdmin/login.aspx saw that there is no such situation. It is the domain name + admin that we often encounter.

Www.heimian.com

Heimianadmin heimian_admin heimianmanage adminheimian and so on, this should be combined with experience to guess again.

Tags: Website background tools engine search engine search query login management authentication information picture domain name password kid that is bottom situation file name Apple Docker Huawei Linux macOS MariaDB Microsoft MySQL NVidia OPPO Reno Docker Shulou Technology MySQL Shulou Tech Info MariaDB