Google Hacking for Penetration Testers, Volume 2

石头

作者：Johnny Long
出版日期：November 2, 2007
出版社：Syngress
页数：448
ISBN：ISBN-10: 1597491764 ISBN-13: 978-1597491761
文件格式：PDF


Book Description
Completely updated second edition of Google Hacking for Penetration Testers, which has sold 30,000 copies worldwide!
Product Description
A self-respecting Google hacker spends hours trolling the Internet forjuicy stuff. Firing off search after search, they thrive on the thrillof finding clean, mean, streamlined queries and get a real rush fromsharing those queries and trading screenshots of their findings. I knowbecause I’ve seen it with my own eyes. As the founder of the GoogleHacking Database (GHDB) and the Search engine hacking forums athttp://johnny.ihackstuff.com, I am constantly amazed at what the Googlehacking community comes up with. It turns out the rumors aretrue-creative Google searches can reveal medical, financial,proprietary and even classified information. Despite government edicts,regulation and protection acts like HIPPA and the constant barking ofsecurity watchdogs, this problem still persists. Stuff still makes itout onto the web, and Google hackers snatch it right up. Protectyourself from Google hackers with this new volume of information.
-Johnny Long
.        Learn Google Searching Basics
Explore Google’s Web-based Interface, build Google queries, and work with Google URLs.
.        Use Advanced Operators to Perform Advanced Queries
Combine advanced operators and learn about colliding operators and bad search-fu.
.        Learn the Ways of the Google Hacker
See how to use caches for anonymity and review directory listings and traversal techniques.
.        Review Document Grinding and Database Digging
See the ways to use Google to locate documents and then search within the documents to locate information.
.        Understand Google’s Part in an Information Collection Framework
Learn the principles of automating searches and the applications of data mining.
.        Locate Exploits and Finding Targets
Locate exploit code and then vulnerable targets.
.        See Ten Simple Security Searches
Learn a few searches that give good results just about every time and are good for a security assessment.
.        Track Down Web Servers
Locate and profile web servers, login portals, network hardware and utilities.
.        See How Bad Guys Troll for Data
Find ways to search for usernames, passwords, credit card numbers, social security numbers, and other juicy information.
.        Hack Google Services
Learn more about the AJAX Search API, Calendar, Blogger, Blog Search, and more.