Hi,
This google dork to find sensitive and interesting information under
WEB-INF directory via ftp protocol, for example:
* Website map
* Sensitive information (user name and password for webdave)
* Deployment descriptor in java (web.xml)
* Servlet mapping url pattern
Keyword:
filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www
--
Fahad Altamimi