
Underground Googling
Login Portals
One way to locate login portals is to focus on the word login. Another
way is to focus on the copyright at the bottom of a page. Most big-name
portals put a copyright notice at the bottom of the page. Combine this
with the product name, and a welcome or two, and you’re off to a good
start. If you run out of ideas for new databases to try, go to
http://labs.google.com/sets, enter oracle and mysql, and click Large Set
for a list of databases.
Support Files
Another way an attacker can locate or gather information about a database is by
querying for support files that are installed with, accompany, or are created by the