These files generally contain configuration information for a .Net web application, information such as connection strings to databases file directories and more. On a properly setup IIS these files are normally not served to the public, normally being the operative word.

filetype:config config intext:appSettings “User ID”

Normally you would type filetype:config config intext:appSettings “User ID” into Google, but I’ve linked the query above for instant gratification, but remember this is just one of many ways to use google to search. I didn’t form these queries I merely searched the web for ‘answers’, and used queries from googles advanced search operators page.

As always. these posts are educational and should not be used for pwning or any such unethical ’stuff’.