2KKUU7ita

282
Part V: Hacking Applications
files and directories, credit card numbers, webcams — basically anything
that Google has discovered on your site — without having to mirror your site
and sift through everything manually. It’s already sitting there in Google’s
cache waiting to be viewed.
The following are a couple of advanced Google queries that you can enter
directly into the Google search field:
✓ site:hostname keywords — This query searches for any keyword you
list, such as SSN, confidential, credit card, and so on. An example would be:
site:www.principlelogic.com speaker
✓ filetype:file-extension site:hostname — This query searches for specific
file types on a specific website, such as doc, pdf, db, dbf, zip, and
more. These file types might contain sensitive information. An example
would be:
filetype:pdf site:www.principlelogic.com
Other advanced Google operators include the following:
✓ allintitle searches for keywords in the title of a web page.
✓ inurl searches for keywords in the URL of a web page.
✓ related finds pages similar to this web page.
✓ link shows other sites that link to this web page.
Specific definitions and more can be found at www.googleguide.com/
advanced_operators.html. Also, an excellent resource for Google hacking
is Johnny Long’s Google Hacking Database (GHDB) site http://johnny.
ihackstuff.com/ghdb. Additional hacking-related Google queries can be
found at http://artkast.yak.net/81.
When sifting through your site with Google, be sure to look for sensitive
information about your servers, network, and organization in Google Groups
(http://groups.google.com), which is the Usenet archive. I have found
employee postings in newsgroups that reveal too much about the internal
network and business systems — the sky is the limit. If you find something
that doesn’t need to be there, you can work with Google to have it edited or
removed. For more information, refer to Google’s Contact us page at www.
google.com/intl/en/contact.
Looking at the big picture of web security, Google hacking is pretty limited,
but if you’re really into it, check out Johnny Long’s book, Google Hacking for
Penetration Testers (Syngress).