Google hacking for penetration tester - part 45 pot
Google hacking for penetration tester - part 45 pot
... favorite for last. Check out Figure
11.37.
Figure 11.37 Shoulder Surfing Meets Webcam Meets Password Stickers
Google Hacking Showcase • Chapter 11 445
452 _Google_ 2e_11.qxd 10/5/07 1:19 PM Page 445
This ... JBrashars) returns quite a
few hits for open Everfocus EDSR applets.
442 Chapter 11 • Google Hacking Showcase
452 _Google_ 2e_11.qxd 10/5/07 1:19 PM Page 442
This flash-based...
Google hacking for penetration tester - part 1 potx
... via the simple, straight-
forward Google search interface. Google refers to USENET groups as Google Groups.
Today, Internet users around the globe turn to Google Groups for general discussion ... the
powerful Web-based interface that has made Google a household word. Even the most
advanced Google users still rely on the Web-based interface for the majority of their day-to-
day...
Google hacking for penetration tester - part 3 pot
... written in this language.
ie UTF-8 The input encoding of Web searches.
Google suggests UTF-8.
oe UTF-8 The output encoding of Web
searches. Google suggests UTF-8.
as_epq a search phrase The value ... query!
Underground Googling…
Bad Form on Purpose
In some cases, there’s nothing wrong with using poor Google syntax in a search. If
Google safely ignores part of a human-friendly query,...
Google hacking for penetration tester - part 14 pot
... front-end application; rather, Google hackers troll the Internet looking for bits and
pieces of database information leaked from potentially vulnerable servers.These bits and
pieces of information ... report”
intitle:”Index Of” -inurl:maillog Mail log files
maillog size
intitle:”LOGREP - Log file Logrep
reporting system” -site:itefix.no
Document Grinding and Database Digging • Chapter 4...
Google hacking for penetration tester - part 19 pot
... /,$to_parse);
foreach my $word (@words){
if ($word =~ /[a-z 0-9 ._% +-] +@[a-z 0-9 ]+\.[a-z]{2,4}/) {
186 Chapter 5 • Google s Part in an Information Collection Framework
452 _Google_ 2e_05.qxd 10/5/07 12:46 PM Page ... is worth looking into. But this book is not called MSN Hacking for
Google s Part in an Information Collection Framework • Chapter 5 185
452 _Google_ 2e_05.qx...
Google hacking for penetration tester - part 20 potx
... looking for Andrew Williams’ e-mail address, we’ll need to set the type to
“Person” and set the function (or transform) to “toEmailGoogle” as we want Evolution to
search for e-mail addresses for ... Andrew on Google. Before hitting the submit button it looks
like Figure 5.13:
Figure 5.13 Evolution Ready to Go
196 Chapter 5 • Google s Part in an Information Collection Framework
452...
Google hacking for penetration tester - part 27 potx
... stats:
http://monkey.org/~jose/blog/viewpage.php?page =google_ code_search_stats
Static Code Analysis with Google by Aaron Campbell:
http://asert.arbornetworks.com/2006/10/static-code-analysis-using -google- code-
search/
HD Moore’s Malware Search http://metasploit.com/research/misc/mwsearch
Q: ... most cases it’s just down-
right impractical.
Important information can be gained from a...
Google hacking for penetration tester - part 29 pot
... Network Hardware
452 _Google_ 2e_08.qxd 10/5/07 1:03 PM Page 282
error document; “Internet Information Services,” These are “golden terms” to use to search for
IIS HTTP/1.1 error pages that Google has ... for these directory tags, keep in mind that your syntax is very impor-
tant.There are many irrelevant results from a query for “Microsoft-IIS/6.0”“server at”,
whereas a query like “...
Google hacking for penetration tester - part 35 potx
... on usenet or
tech forums is a risk. For an example, try searching for intext:“enable secret 5 $” as sug-
gested by hevnsnt on the Google Hacking Forums.Then try the same on Google
Groups. It’s ... My!
452 _Google_ 2e_09.qxd 10/5/07 1:08 PM Page 350
345
Usernames,
Passwords, and
Secret Stuff, Oh My!
Solutions in this chapter:
■
Searching for Usernames
■
Searching for Passwords...
Google hacking for penetration tester - part 36 pot
... Norton Anti-Virus Corporate
Edition data file contains encrypted pass-
words
filetype:inf sysprep Sysprep.inf files contain all information for
a Windows information including adminis-
trative passwords, ... authentication
data
inurl:cgi-bin inurl:calendar.cfg CGI Calendar (Perl) configuration file
reveals information including passwords for
the program.
inurl:chap-secrets -cvs chap-secrets fil...