Google Hacking final-version - ?? Focus on security research and ethical hacking Offensive, ... Filetype / ext ... Google Hacking_final-

  • Published on
    20-Apr-2018

  • View
    218

  • Download
    6

Transcript

Google Hacking and Google Hacking and Google Hacking and Google Hacking and Personal Data PrivacyPersonal Data PrivacyPersonal Data PrivacyPersonal Data PrivacyPH CHANsweeper@vxrl.orgResearcherVX Security Research LabPH CHANsweeper@vxrl.orgResearcherVX Research Lab (VXRL)www.vxrl.orgVXRL Non-profit making group Focus on security research and ethical hacking Offensive, creative and funGoogle makes our life easy. Just a single clicktime to find any searched information.However Google not only makes it possible toreach the public available information, but alsothreatens some of the most confidentialInformation (e.g. personal privacy) that shouldnever be revealed.Personal Privacies like name, address, phonenumbers, emails, username and password forlogin sites, private directories and documents and online devices (e.g. web cameras) withoutany access control. "Google Hacking is the use of Googles to donaughty things. It makes use of the advancedGoogle syntaxes and operators extensively.How Google WorksHow Google Works GooglebotA web spider that finds and go to get web pages. The indexer Stores the fetched results in a Googles index database in alphabetic order. The query processorCompares the search query to the index and recommends the most relevant documents.The Basics The plus symbol (+) forces inclusion of something common. The minus symbol (-) forces exclusion of a search term. The pipe symbol (|) provides boolean OR logic that locate either one term or another in a query The symbol () uses to quote around the search phrasesAdvanced search operators [all]inurlSearches for the certain keyword in the URL [all]intitleSearches for the certain keyword in the title [all]intextSearches the keywords in the body of web pages. Filetype / extFilter out the results based on the file extensions SiteSearches within the Domain Lets take a look at a few of the interesting Google search result.Search for Name, Email Address, Phone,:Search for Name, Email Address, Phone,:Search for Name, Email Address, Phone,: Lets take a look at a few of the interesting Google search result.Web 2.0,:Web 2.0,: Lets take a look at a few of the interesting Google search result.Webcam,:Webcam,:FoxyFoxy is a Chinese P2P software.FoxyFoxyFoxyLinkedIn AccountEmail AccountEmail AccountEmail AccountFacebookThere are many more. Combining the advanced operators is the key toGoogle Hacking.http://www.googleguide.com/advanced_operators_reference.htmlCountermeasures Keep sensitive data off the web!! http://www.google.com/remove.htmlThank You

Recommended

View more >