Im my last weeks blog i mentioned about google indexing binary files and some tricks for searching malware. Playing around with different queries on google i realized how large the count is for open directory browsing enabled servers. By default on apache based servers if the Option directive in directory tag is not set to none or index the webserver is completely browsable. Many free hosting services and pernonal site servers also keep it enabled by default.
I started of with searching for some not-publicly-available softwares and encouraged by the results modified the searches for some mp3′s as well.
A simple query:
intitle:”index of” +”last modified” +”parent directory” +description +size +(wma | mp3) ArtistName SongName
got me to numerous sites that hosted the songs i needed. You can also modify the file extensions to any kind of files you want and precise your search by adding more extensions in the OR list in brackets.
For more adventerous the same trick works for IIS as well :).
Blogged with Flock.