Thursday, February 25, 2010

Accurate Search Results while GOOGLING....

Google As A Hacking Tool
Hello guys in this blog we will come in touch with some of the basic things that we can do using our favourite search engine Google.Using certain search strings we can find a lot more than our requirements.We often heard about that the hackers are used to search in Google to gain access to certain files they shouldn't be allowed to see or have access to.

NOTE:As this article is meant for educational purpose only so the tips provided in this article should not be used to harm anyone.

Google Search Options:

Specific file types: *.xls, *.doc, *.pdf *.ps *.ppt *.rtf

Google allows us to search for specific file types, so instead of getting html-files as a result (websites) we get files related to the filetypes that we had specified in search string. The search string we would use would be this:

Filetype:xls (for excel files) or filetype:doc for word files.

Here we can use different filetypes as per our needs. But maybe more interesting would be searching for *.db files and *.mdb files.Try and think of something that might get you some interesting results.

Inurl

Another useful search option is the inurl: option which allows one to search for a certain word one would want to be in the url. This gives us the opportunity to search for specific directories/folders,
especially in combination with the “index of” option.

An example would be inurl:admin which would gives us results of website urls that have the word “admin” in the url.

Index of


The “index of” option is another option that isn’t especially thought of by the creators of google, but comes in very handy. If we use the “index of” string we will find directory listings of specific folders on servers.

An example could be ‘index of” admin or index.of.admin which would give us many directory listings of admin folders.

Site

The site option allows us to come up with results that only belong to a certain domain name extension or to a specific site. For example one could search for .com sites or .box.sk sites or .nl sites,but also for results from just one site, but more interesting might be to search for specific military or government websites.

An example of a search string would be Site:mil or site:gov Site:neworder.box.sk “board”

Intitle

Intitle is another nice option. It allows us to search for html files that have a certain word or words in the title. The format would be intitle:wordhere. We could check out what words appear in the title of some online control panel or content management system and then search google for this word with the intitle option, to find these control panel pages.

Link

The Link option allows us to check which sites link to a specific site.

Combining search options

The above mentioned search options might or might not be known to you, but even though they can amount to some interesting results, it’s a fact that when you start combining them, that’s when
google’s magic starts to show.So its upto yours minds imagination or experimental capabilities to test out these things.

No comments:

Post a Comment