GOOGLE HACKING
Using internet search engine as a tool to find
information related to creativity & innovation
Google Hacking
Using public sources openly and without resorting to
illegal means, it is possible to gather at least 80 percent
of all information required about the enemy
Useful for
Students
Hackers
Any one want to have exact information using google
database.
How Google Works
Information Disclosure with Google
Advanced Search Operators
site:
(.edu, .gov, foundstone.com, usc.edu)
filetype: (txt, xls, mdb, pdf, .log)
Daterange: (julian date format)
Intitle / allintitle
Inurl / allinurl
Google Hacking
Google Operators:
Operators are used to refine the results and to
maximize the search value. They are your
tools as well as hackers weapons
Basic Operators:
+, -, ~ , ., *, , |, OR
Advanced Operators:
allintext:, allintitle:, allinurl:, bphonebook:,
cache:, define:, filetype:, info:, intext:, intitle:,
inurl:, link:, phonebook:, related:,
rphonebook:, site:, numrange:, daterange
Google Hacking
Basic Operators
(+) force inclusion of something common
Google ignores common words (where, how,
digit, single letters) by default:
Example: StarStar Wars Episode +I
(-) exclude a search term
Example: apple red
() use quotes around a search term to search
exact phrases:
Example: Robert Masse
Robert masse without has the 309,000
results, but robert masse only has 927
results. Reduce the 99% irrelevant results
Google Hacking
Basic Operators
(~) search synonym:
Example: ~food
Return the results about food as well as recipe, nutrition and
cooking information
( . ) a single-character wildcard:
Example: m.trix
Return the results of M@trix, matrix, metrix.
( * ) any word wildcard
Google Hacking
Advanced Operators: Site:
Site: Domain_name
Find Web pages only on the specified
domain. If we search a specific site, usually
we get the Web structure of the domain
Examples:
site:ca
site:gosecure.ca
site:www.gosecure.ca
4. Google Hacking
Google Hacking
Advanced Operators: Filetype:
Filetype: extension_type
Find documents with specified extensions
The supported extensions are:
-
HyperText Markup Language (html)
- Microsoft PowerPoint (ppt)
Adobe Portable Document Format (pdf)
- Microsoft Word (doc)
Adobe PostScript (ps)
- Microsoft Works (wks, wps, wdb)
Lotus 1-2-3
- Microsoft Excel (xls)
(wk1, wk2, wk3, wk4, wk5, wki, wks, wku)
- Microsoft Write (wri)
- Lotus WordPro (lwp)
- Rich Text Format (rtf)
- MacWrite (mw)
- Shockwave Flash (swf)
Text (ans, txt)
Note: We actually can search asp, php and cgi, pl
files as long as it is text-compatible.
Example: Budget filetype: xls
Google Hacking
Advanced Operators Intitle:
Intitle: search_term
Find search term within the title of a Webpage
Allintitle: search_term1 search_term2 search_term3
Find multiple search terms in the Web pages with the title that
includes all these words
These operators are specifically useful to find the directory lists
Example:
Find directory list:
Intitle: Index.of parent directory
Google Hacking
Advanced Operators Inurl:
Inurl: search_term
Find search term in a Web address
Allinurl: search_term1 search_term2 search_term3
Find multiple search terms in a Web address
Examples:
Inurl: cgi-bin
Allinurl: cgi-bin password
Google Hacking
Advanced Operators Intext;
Intext: search_term
Find search term in the text body of a
document.
Allintext: search_term1 search_term2
search_term3
Find multiple search terms in the text body
of a document.
Examples:
Intext: Administrator login
Allintext: Administrator login
Google Hacking
Advanced Operators: Cache:
Cache: URL
Find the old version of Website in Google cache
Sometimes, even the site has already been
updated, the old information might be found in
cache
Examples:
Cache: www.gosecure.com
Google Hacking
Advanced Operators
<number1>..<number2>
Conduct a number range search by specifying
two numbers, separated by two periods, with
no spaces. Be sure to specify a unit of
measure or some other indicator of what the
number range represents
Examples:
Computer $500..1000
DVD player $250..350
Google Hacking
Advanced Operators Link:
Link: URL
Find the Web pages having a link to the specified URL
Related: URL
Find the Web pages that are similar to the specified Web page
info: URL
Present some information that Google has about that Web page
Define: search_term
Provide a definition of the words gathered from various online
sources
Examples:
Link: gosecure.ca
Related: gosecure.ca
Info: gosecure.ca
Define: Network security
Google Hacking
Advanced Operators phonebook:
Phonebook
Search the entire Google phonebook
rphonebook
Search residential listings only
bphonebook
Search business listings only
Examples:
Phonebook: robert las vegas (robert in Las Vegas)
Phonebook: (702) 944-2001 (reverse search, not always work)
The phonebook is quite limited to U.S.A
Few Examples
intitle:index.of +?last modified? +?parent directory? +(mp3|mp4)
Movies -htm -html -php -asp
To view the list of free movies with extension mp3 or mp4
inurl:Curriculum Vitale filetype:doc
Search the CV with the extension .doc
site:docs.google.com intitle:(cv Or resume OR curriculum vitae)
Search for the Google Drive share for CV
filetype:xls + password + inurl:.com
Search for the excel file with the extension .xls having password
from the .com webpage
google.com/latitude
To get the latitude of the PC you are using
ext:(doc | pdf | xls | txt | ps | rtf | odt | sxw | psw | ppt | pps |
xml) (intext:information system | intext:information technology")
inurl:any
Few Examples
?intitle:index.of? mp3 jackson
Search for the mp3 song of jackson
filetype:ppt + ethical hacking+ inurl:.com
Search for the PowerPoint file with the title ethical hacking in .com
web site
Filetype:ppt Management information system
Search for the PowerPoint file having Management Information
System title.