Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
Download
Standard view
Full view
of .
Save to My Library
Look up keyword
Like this
1Activity
0 of .
Results for:
No results containing your search query
P. 1
The Google Hackers Guide v1

The Google Hackers Guide v1

Ratings: (0)|Views: 12 |Likes:
Published by api-3718184

More info:

Published by: api-3718184 on Oct 14, 2008
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

03/18/2014

pdf

text

original

The Google Hacker\u2019s Guide
johnny@ihackstuff.com
http://johnny.ihackstuff.com
-
Page 1
-
The Google Hacker\u2019s Guide
Understanding and Defending Against
the Google Hacker
by Johnny Long
johnny@ihackstuff.com
http://johnny.ihackstuff.com
The Google Hacker\u2019s Guide
johnny@ihackstuff.com
http://johnny.ihackstuff.com
-
Page 2
-
GOOGLE SEARCH TECHNIQUES................................................................................................................ 3
GOOGLE WEB INTERFACE................................................................................................................................... 3
BASIC SEARCH TECHNIQUES.............................................................................................................................. 7
GOOGLE ADVANCED OPERATORS........................................................................................................... 9
ABOUT GOOGLE\u2019S URLSYNTAX.................................................................................................................... 12
GOOGLE HACKING TECHNIQUES........................................................................................................... 13

DOMAIN SEARCHES USING THE \u2018SITE\u2019OPERATOR........................................................................................... 13 FINDING \u2018GOOGLETURDS\u2019 USING THE \u2018SITE\u2019OPERATOR................................................................................. 14 SITE MAPPING: MORE ABOUT THE \u2018SITE\u2019OPERATOR...................................................................................... 15 FINDING DIRECTORY LISTINGS........................................................................................................................ 16 VERSIONING: OBTAINING THE WEB SERVER SOFTWARE / VERSION............................................................. 17

via directory listings................................................................................................................................... 17 via default pages......................................................................................................................................... 19 via manuals, help pages and sample programs......................................................................................... 21

USING GOOGLE AS A CGISCANNER................................................................................................................ 23
USING GOOGLE TO FIND INTERESTING FILES AND DIRECTORIES.................................................................... 25
ABOUT GOOGLE AUTOMATED SCANNING.......................................................................................... 26
OTHER GOOGLE STUFF.............................................................................................................................. 27

GOOGLE APPLIANCES...................................................................................................................................... 27 GOOGLEDORKS................................................................................................................................................. 27 GOOSCAN......................................................................................................................................................... 28 GOOPOT........................................................................................................................................................... 28

A WORD ABOUT HOW GOOGLE FINDS PAGES (OPERA)................................................................. 30 PROTECTING YOURSELF FROM GOOGLE HACKERS...................................................................... 30 THANKS AND SHOUTS.................................................................................................................................. 31

The Google Hacker\u2019s Guide
johnny@ihackstuff.com
http://johnny.ihackstuff.com
-
Page 3
-

The Google search engine found atwww.google.com offers many different features including language and document translation, web, image, newsgroups, catalog and news searches and more. These features offer obvious benefits to even the most uninitiated web surfer, but these same features allow for far more nefarious possibilities to the most malicious Internet users including hackers, computer criminals, identity thieves and even terrorists. This paper outlines the more nefarious applications of the Google search engine, techniques that have collectively been termed \u201cGoogle hacking.\u201d The intent of this paper is to educate web administrators and the security community in the hopes of eventually securing this form of information leakage.

Google search techniques
Google web interface

The Google search engine is fantastically easy to use. Despite the simplicity, it is very important to have a firm grasp of these basic techniques in order to fully comprehend the more advanced uses. The most basic Google search can involve a single word entered into the search page found atwww.google.com.

Figure 1: The main Google search page
As shown in Figure 1, I have entered the word \u201csardine\u201d into the search screen. Figure 1
shows many of the options available from thewww.google.com front page.
The Google toolbar

The Internet Explorer browser I am using has a Google \u201ctoolbar\u201d (a free download from toolbar.google.com) installed and presented under the address bar. Although the toolbar offers many different features, it is not a required element for performing advanced searches. Even the most advanced search functionality is available to any user able to access the

www.google.comweb page with any type of browser, including
te x t-b a s e d a n d m o b ile b ro w s e rs .

You're Reading a Free Preview

Download
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->