Google hacking for penetration tester - part 7 docx

... Operators • Chapter 2 67 452 _Google_ 2e_02.qxd 10/5/ 07 12:14 PM Page 67 Google converts every document it searches to either HTML or text for online viewing.You can see that Google has searched ... 2.12.Figure 2.12 A Google- converted Word Document64 Chapter 2 • Advanced Operators452 _Google_ 2e_02.qxd 10/5/ 07 12:14 PM Page 64When you click the link for a document that Google has converted, ... the text representation of a link, not theactual URL. For example, in Figure 2. 17, the Google link to “current page” is shown in typ-ical form—as an underlined portion of text. When you click...

... tools:Platform Tool LocationMac Google Notifier, Google www .google. com/mac.htmlDesktop, Google SketchupPC Google Pack (includes IE & www .google. com/toolsFirefox toolbars, Google Desktop ...  www .google. com This is the main Google Web page, the entry point for mostsearches. http://groups .google. com The Google Groups Web page. http://images .google. com/ Search Google for images ... Beginnersto Google searching are encouraged to use the Google- provided forms for searching, payingclose attention to the messages and warnings Google provides about syntax. Boolean opera-tors such...

... searchesLink■Searches for links to a site or URL■Does not mix with other operators or search termsAdvanced Operators • Chapter 2 87 452 _Google_ 2e_02.qxd 10/5/ 07 12:14 PM Page 87 Stocks■Shows ... Sites ■The Google filetypes FAQ, www .google. com/help/faq_filetypes.html■The resource for file extension information, www.filext.com This site can help youfigure out what program a particular extension ... context, and Google indi-cates this with a warning message. Any box marked with “Not really” indicates that Google Advanced Operators • Chapter 2 81452 _Google_ 2e_02.qxd 10/5/ 07 12:14 PM Page...

... Chapter 3 • Google Hacking Basics452 _Google_ 2e_03.qxd 10/5/ 07 12:36 PM Page 116452 _Google_ 2e_03.qxd 10/5/ 07 12:36 PM Page 120Extension Walking This technique can help locate files (for example, ... almost cer-tainly alert the site that you’re scanning. WebInspect is better suited for this task than Google Hacking, but many times a low-profile Google scan can be used to get a feel for the ... modification) without guessing at file extensions.114 Chapter 3 • Google Hacking Basics452 _Google_ 2e_03.qxd 10/5/ 07 12:36 PM Page 114SummaryThe Google cache is a powerful tool in the hands of the advanced...

... results. For example, when looking for e-mail addresses, you can add Google s Part in an Information Collection Framework • Chapter 5 171 452 _Google_ 2e_05.qxd 10/5/ 07 12:46 PM Page 171 Getting ... 5.9:Figure 5.9 Inspecting a Google Search Results with FireBug Google s Part in an Information Collection Framework • Chapter 5 179 452 _Google_ 2e_05.qxd 10/5/ 07 12:46 PM Page 179 Also, you will be getting ... we have passed four parameters: Google s Part in an Information Collection Framework • Chapter 5 173 452 _Google_ 2e_05.qxd 10/5/ 07 12:46 PM Page 173 http://www .google. co.za/search?num=100&hl=en&q=%22testing+testing+123%22+site%3Auk&btnG=Search&meta=What...

... Gecko/20 070 515Firefox/2.0.0.4\r\nAccept:text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\nAccept-Language: en-us,en;q=0.5\r\nAccept-Encoding:gzip,deflate\r\nAccept-Charset: ISO-885 9-1 ,utf-8;q=0 .7, *;q=0 .7\ r\nKeep-Alive:300\r\nProxy-Connection: keep-alive\r\nReferer: http://www .google. co.za/\r\nCookie:PREF=ID=35d1cc1c7089ceba:TM=1184106010:LM=1184106010:S=gBAPGByiXrA7ZPQN\r\n][HTTP/1.0 ... HTTP/1.0Host: www .google. co.zaHTTP/1.0 200 OKDate: Thu, 12 Jul 20 07 08:20:24 GMTContent-Type: text/html; charset=ISO-885 9-1 Cache-Control: privateSet-Cookie:PREF=ID=32 977 3239358a7d2:TM=1184228424:LM=1184228424:S=MQ6vKrgT4f9up_gj;expires=Sun, ... privateSet-Cookie:PREF=ID=32 977 3239358a7d2:TM=1184228424:LM=1184228424:S=MQ6vKrgT4f9up_gj;expires=Sun, 1 7- Jan-2038 19:14: 07 GMT; path=/; domain= .google. co.zaServer: GWS/2.1Via: 1.1 netcachejhb-2 (NetCache NetApp/5.5R6)<html><head> snip Notice the Set-Cookie part. The ID part...