Exploring Google Hacking Techniques -- THE CYBER COPS
Exploring Google Hacking Techniques
Q :- What is Google Hacking Techniques?
A:- We know it by Google Dork, also known as Google Dorking or Google hacking, is a valuable resource for security researchers. For the average person, Google is just a search engine used to find text, images, videos, and news. However, in the infosec world, Google is a useful hacking tool.
Q :- How can we hack website from google search engine?
A:- Well, you can’t hack sites directly using Google, but as it has tremendous web-crawling capabilities, it can index almost anything within your website, including sensitive information. This means you could be exposing too much information about your web technologies, usernames, passwords, and general vulnerabilities without even knowing it.
Its work like as a filter search. If you want to search some random email id and password then it shows you only that. if you want to search a particular file in PDF then it shows all result of PDF file you want.
In other words: Google “Dorking” is the practice of using Google to find vulnerable web applications and servers by using native Google search engine capabilities.
while this information is publicly available on the Internet, and it is provided by Google on a legal basis, people with the wrong intentions could use this information to harm your online presence.
Q :- Some Popular google dork command (cheetsheet).
A:-
cache: this dork will show you the cached version of any website, e.g.cache: securitytrails.comallintext: searches for specific text contained on any web page, e.g.allintext: hacking toolsallintitle: exactly the same as allintext, but will show pages that contain titles with X characters, e.g.allintitle:"Security Companies"allinurl: it can be used to fetch results whose URL contains all the specified characters, e.g: allinurl client areafiletype: used to search for any kind of file extensions, for example, if you want to search for jpg files you can use:filetype: jpginurl: this is exactly the same asallinurl, but it is only useful for one single keyword, e.g.inurl: adminintitle: used to search for various keywords inside the title, for example,intitle:security toolswill search for titles beginning with “security” but “tools” can be somewhere else in the page.inanchor: this is useful when you need to search for an exact anchor text used on any links, e.g.inanchor:"cyber security"intext: useful to locate pages that contain certain characters or strings inside their text, e.g.intext:"safe internet"link: will show the list of web pages that have links to the specified URL, e.g.link: microsoft.comsite: will show you the full list of all indexed URLs for the specified domain and subdomain, e.g.site:securitytrails.com*: wildcard used to search pages that contain “anything” before your word, e.g.how to * a website, will return “how to…” design/create/hack, etc… “a website”.|: this is a logical operator, e.g."security" "tips"will show all the sites which contain “security” or “tips,” or both words.+: used to concatenate words, useful to detect pages that use more than one specific key, e.g.security + trails–: minus operator is used to avoiding showing results that contain certain words, e.g.security -trailswill show pages that use “security” in their text, but not those that have the word “trails.”
Google dork cheatsheet --- source GITHUB
Search filters
| Filter | Description | Example |
|---|---|---|
| allintext | Searches for occurrences of all the keywords given. | allintext:"keyword" |
| intext | Searches for the occurrences of keywords all at once or one at a time. | intext:"keyword" |
| inurl | Searches for a URL matching one of the keywords. | inurl:"keyword" |
| allinurl | Searches for a URL matching all the keywords in the query. | allinurl:"keyword" |
| intitle | Searches for occurrences of keywords in title all or one. | intitle:"keyword" |
| allintitle | Searches for occurrences of keywords all at a time. | allintitle:"keyword" |
| site | Specifically searches that particular site and lists all the results for that site. | site:"www.google.com" |
| filetype | Searches for a particular filetype mentioned in the query. | filetype:"pdf" |
| link | Searches for external links to pages. | link:"keyword" |
| numrange | Used to locate specific numbers in your searches. | numrange:321-325 |
| before/after | Used to search within a particular date range. | filetype:pdf & (before:2000-01-01 after:2001-01-01) |
| allinanchor (and also inanchor) | This shows sites which have the keyterms in links pointing to them, in order of the most links. | inanchor:rat |
| allinpostauthor (and also inpostauthor) | Exclusive to blog search, this one picks out blog posts that are written by specific individuals. | allinpostauthor:"keyword" |
| related | List web pages that are “similar” to a specified web page. | related:www.google.com |
| cache | Shows the version of the web page that Google has in its cache. | cache:www.google.com |
Click Here to Visit GitHub
News About Google Dorking.
The FBI has issued a warning to police and other emergency response personnel about a lethal new tool which 'malicious actors' have been using to deadly effect against American government institutions - Google dorks.
News About Google Dorking.
Google dorks – FBI warning about dangerous ‘new’ search tool.
The FBI has issued a warning to police and other emergency response personnel about a lethal new tool which ‘malicious actors’ have been using to deadly effect against American government institutions – Google dorks.
The warning, reported by Ars Technica, refers specifically to ‘Google dorks’ or “Google dorking” – ie the use of specialized search syntax, using terms such as “filetype:sql”.
‘Google dorks’ refers to search syntax which allow users to search within a specific website (using the term in:url) or for specific file types, and can thus be used to search databases. Such search terms are widely known, and legal – the warning alerts units who may not be aware of the technique to secure databases properly.
Labels:
Basic
No comments:
Post a Comment