The Google Hacker’s Guide
johnny@ihackstuff.comhttp://johnny.ihackstuff.com
- -
The Google Hacker’s Guide
Understanding and Defending Against the Google Hacker
by Johnny Long johnny@ihackstuff.comhttp://johnny.ihackstuff.com
The Google Hacker’s Guide
johnny@ihackstuff.comhttp://johnny.ihackstuff.com
- -
GOOGLE SEARCH TECHNIQUES................................................................................................................3
G
OOGLE WEB INTERFACE
...................................................................................................................................3B
ASIC SEARCH TECHNIQUES
..............................................................................................................................7
GOOGLE ADVANCED OPERATORS...........................................................................................................9
A
BOUT
G
OOGLE
’
S
URL
SYNTAX
....................................................................................................................12
GOOGLE HACKING TECHNIQUES...........................................................................................................13
D
OMAIN SEARCHES USING THE
‘
SITE
’
OPERATOR
...........................................................................................13F
INDING
‘
GOOGLETURDS
’
USING THE
‘
SITE
’
OPERATOR
.................................................................................14S
ITE MAPPING
: M
ORE ABOUT THE
‘
SITE
’
OPERATOR
......................................................................................15F
INDING
D
IRECTORY LISTINGS
........................................................................................................................16V
ERSIONING
: O
BTAINING THE
W
EB
S
ERVER
S
OFTWARE
/ V
ERSION
.............................................................17
via directory listings ...................................................................................................................................17 via default pages .........................................................................................................................................19via manuals, help pages and sample programs.........................................................................................21
U
SING
G
OOGLE AS A
CGI
SCANNER
................................................................................................................23U
SING
G
OOGLE TO FIND INTERESTING FILES AND DIRECTORIES
....................................................................25
ABOUT GOOGLE AUTOMATED SCANNING..........................................................................................26OTHER GOOGLE STUFF..............................................................................................................................27
G
OOGLE
A
PPLIANCES
......................................................................................................................................27G
OOGLEDORKS
.................................................................................................................................................27G
OOSCAN
.........................................................................................................................................................28G
OO
P
OT
...........................................................................................................................................................28
A WORD ABOUT HOW GOOGLE FINDS PAGES (OPERA).................................................................30PROTECTING YOURSELF FROM GOOGLE HACKERS......................................................................30THANKS AND SHOUTS..................................................................................................................................31
The Google Hacker’s Guide
johnny@ihackstuff.comhttp://johnny.ihackstuff.com
- -The Google search engine found atwww.google.comoffers many different featuresincluding language and document translation, web, image, newsgroups, catalog andnews searches and more. These features offer obvious benefits to even the mostuninitiated web surfer, but these same features allow for far more nefarious possibilitiesto the most malicious Internet users including hackers, computer criminals, identitythieves and even terrorists. This paper outlines the more nefarious applications of theGoogle search engine, techniques that have collectively been termed “Google hacking.”The intent of this paper is to educate web administrators and the security community inthe hopes of eventually securing this form of information leakage.
Google search techniquesGoogle web interface
The Google search engine is fantastically easy to use. Despite the simplicity, it is veryimportant to have a firm grasp of these basic techniques in order to fully comprehend themore advanced uses. The most basic Google search can involve a single word enteredinto the search page found atwww.google.com.
Figure 1: The main Google search page
As shown in Figure 1, I have entered the word “sardine” into the search screen. Figure 1shows many of the options available from thewww.google.comfront page.The Google toolbarThe Internet Explorer browser I am using has a Google“toolbar” (a free download from toolbar.google.com) installedand presented under the address bar. Although the toolbar offers many different features, it is not a required element for performing advanced searches. Even the most advancedsearch functionality is available to any user able to access thewww.google.comweb page with any type of browser, including
Search History:
Result 00 of 00
00 results for result for
p.
The Google Hackers Guide v1 0
13.5K
Reads
11
Readcasts
4
Embed Views
Get Scribd Mobile
To get Scribd mobile enter your number and we'll send you a link to the Scribd app for iPhone & Android.We've sent a link to the Scribd app. If you didn't receive it, try again.
We'll never share your phone number.
More From This User
Notes
Load more
