Search Engine Hacking

Search Engine Hacking tài liệu dành cho các bạn nghiên cứu về bảo mật mạng, cách thức tấn công và phòng thủ, bảo vệ, cũng như tìm kiếm thông tin trên mạng, tài liệu cần thiết cho các bạn thuộc lĩnh vực công nghệ thông tin, cũng như những bạn muốn tìm hiểu về hacking và security

[...]... •‘GoogleHacks’ Module provides an automated GoogleDork searching facility Tools Armoury Wikto Tools Armoury Wikto •Pros •Directory harvesting via Google •Wikto port •Cons •Google Key required •Complicated •Google-Specific •Overall •Feels like several tools bundled into one Tools Armoury Athena (http://www.snakeoillabs.com) •The ‘original’ Search Engine Hacking tool (other than a web browser, of course)... means stuff gets missed •Overall •A good tool, ultimately crippled by restrictions Tools Armoury Apollo (http://worm.ccert.edu.cn/GoogleHacking/Apollo/) •Written by Mimi & Spark of the Good Cat Studio •No Google Key required, but still Google only •No restrictions on Search •Similar functionality to SiteDigger, minus the snazzy reporting Tools Armoury Tools Armoury Apollo •Pros •No restrictions •No Google... •Clunky interface •No direct link in results •Overall •Better than SiteDigger, but needs better reporting interface Tools Armoury Wikto (http://www.sensepost.com/research/wikto/) •Port of Nikto to Windows with bells and whistles •Google Hacking functionality a la GooScan •Needs Google API Key •Site orientated •Requires registration with Foundstone’s portal!!!! Tools Armoury Wikto •Uses a ‘Googler’... course) •Requires a Google API Key •Uses FSDB and GHDB •Searches deliberately restricted •The ‘Internet Scanner’ of SEH tools Tools Armoury SiteDigger Tools Armoury SiteDigger Tools Armoury SiteDigger •Pros •Slick Reporting •Well maintained •FSDB sometimes outdated, but well categorized •Cons •Needs Google API Key •Google-Specific •Restricted searches means stuff gets missed •Overall •A good tool, . Search Engine Hacking Search Engine Hacking Search Engine Hacking What is SEH? Only now there’s much more to contend with IRC Search Engines Bit Torrent/P2P Search engines FTP Search engines Flickr.com Blogs Your.application.here /search/ Oh,. Company LOGO Search Engine Hacking Steve at SnakeOilLabs dot com Search Engine Hacking Search Engine Hacking 1. What is SEH? 1. What is SEH? 2. Tools Armoury 2 SEH 3. Exploiting SEH 4. Countermeasures 4. Countermeasures Search Engine Hacking What is SEH? Definition: Search Engine Hacking (SEH) Function: noun SEH is the malicious use of indexing