Your Federal Quarterly Tax Payments are due April 15th Get Help Now >>

Hacking With Google by isp11018

VIEWS: 74 PAGES: 61

									                                            welcome




                              Hacking With Google




                                         henk van ess




15-10-05 12:02 Henk van Ess
                              about the trainer




15-10-05 12:02 Henk van Ess
                                                     about the trainer




                              www.searchbistro.com
                              www.voelspriet.nl




15-10-05 12:02 Henk van Ess
                              1. Google Eats All
                              2. Chain Of Thoughs: how to
                                 think?
                              3. Finding An Open Intranet
                              4. Finding an Address Book




15-10-05 12:02 Henk van Ess
                        Quick, Make Your Pick

                               Which document can
                               be found by Google?
                                     And why?
                              Internal instructions for embassy employees

                                            Outlook Name List

                                     Databases with confidential data

                                        Social security numbers


15-10-05 12:02 Henk van Ess
15-10-05 12:02 Henk van Ess
15-10-05 12:02 Henk van Ess
15-10-05 12:02 Henk van Ess
15-10-05 12:02 Henk van Ess
15-10-05 12:02 Henk van Ess
              Social Security Number




15-10-05 12:02 Henk van Ess
          What Did I Do To Google?


       "social security number" "phone * * *“
      "address *" "e-mail *" intitle:"curriculum
      vitae" filetype:pdf site:.edu




15-10-05 12:02 Henk van Ess
                              Say again???

   I typed:

     "social security number" "phone * * *“
     "address *" "e-mail *" intitle:"curriculum
     vitae" filetype:pdf site:.edu



15-10-05 12:02 Henk van Ess
                              1. Google Eats All
                              2. Chain Of Thoughs: how to
                                 think?
                              3. Finding An Open Intranet
                              4. Finding an Address Book




15-10-05 12:02 Henk van Ess
                              Chain of thoughts




15-10-05 12:02 Henk van Ess
   1. What Do You Want To Find?
          I want to find a SSN.

          Always use hyphens to search for a full
          phrase

          "social security number"
          (and not social security number)


15-10-05 12:02 Henk van Ess
                              19,500,000




15-10-05 12:02 Henk van Ess
         Step 2: Pick Your Document
          What type of document can contain a
          SSN?

          I decide to go for application letter, mostly
          written in Microsoft Word or PDF.

          Let’s tell this to Google.


15-10-05 12:02 Henk van Ess
                              Tell Google
The command


filetype:

searches for specific file types




15-10-05 12:02 Henk van Ess
                        Searching For A PDF




15-10-05 12:02 Henk van Ess
                       http://www.voelspriet.nl/googledocs.htm




15-10-05 12:02 Henk van Ess
   Step 3: Picture Your Document
           What is a unique term in the document?

               Try to picture what you want to see.

                I decided to go for “curriculum vitae”




15-10-05 12:02 Henk van Ess
                              Not There Yet




15-10-05 12:02 Henk van Ess
    Step 4: Where Is The Document?



          I decide to search for universities and
          educational institutions




15-10-05 12:02 Henk van Ess
                              Tell Google
The command


site:

shows only specific sites




15-10-05 12:02 Henk van Ess
                                 Edu

                              Site: edu




15-10-05 12:02 Henk van Ess
                              5. Imagine The Title
          People tend to be logical creatures. What
          title do you normally put above a
          curriculum vitae?

          Exactly:

          “curriculum vitae”


15-10-05 12:02 Henk van Ess
                              Tell Google
The command


intitle:

shows only pages with a specific title




15-10-05 12:02 Henk van Ess
                              Less Answers Now:




15-10-05 12:02 Henk van Ess
               Let’s Push It To The Limit
     What other words/ phrases are used in a
     application letter?

       A phone number
       An address
       E-mail



15-10-05 12:02 Henk van Ess
                              Tell It To Google
     I don’t know the number.

      So, let’s mimic the syntax of a phone
      number.

      02920 32 400
      Tell Google: “phone * * *



15-10-05 12:02 Henk van Ess
                          Tell It All Too Google
     I don’t know the address

      So, let’s mimic the syntax of an address


      "address *"




15-10-05 12:02 Henk van Ess
                          Tell It All Too Google
     I don’t know the email

      So, let’s mimic the syntax of email

      Tell Google: “email *”




15-10-05 12:02 Henk van Ess
                              So That’s Why:

     "social security number" "phone * * *“
     "address *" "e-mail *" intitle:"curriculum
     vitae" filetype:pdf site:.edu




15-10-05 12:02 Henk van Ess
            Recipe for Google Hacking
• 1. decide what you want to find (SSN)
• 2. pick the document type (PDF)
• 3. picture the content (Curric. Vit)
• 4. where is the document (Edu)
• 5. imagine the title (intitle:)
Not satisfied yet?
• 6. picture the document again (Phone etc.)

15-10-05 12:02 Henk van Ess
                              Exercise
     Let’s find a document form a military site
     (MIL). It should contain the words “Not for
     Publication”




15-10-05 12:02 Henk van Ess
• "not for publication" filetype:doc site:.mil




15-10-05 12:02 Henk van Ess
15-10-05 12:02 Henk van Ess
15-10-05 12:02 Henk van Ess
15-10-05 12:02 Henk van Ess
15-10-05 12:03 Henk van Ess
                              1. Google Eats All
                              2. Chain Of Thoughts: how
                                 to think?
                              3. Finding An Open Intranet
                              4. Finding An Address Book




15-10-05 12:03 Henk van Ess
                              Intranet
• Private network that is contained within an
  enterprise. Usually not public.




15-10-05 12:03 Henk van Ess
              Let’s find an open intranet
•     1. decide what you want to find
•     2. pick the document type
•     3. picture the content
•     4. where is the document
•     5. imagine the title
•     (And if you’re not satisfied yet)
      6. picture the document again

15-10-05 12:03 Henk van Ess
           1. What do you want to find

Private employee listing

      So type “employee listing”




15-10-05 12:03 Henk van Ess
15-10-05 12:03 Henk van Ess
15-10-05 12:03 Henk van Ess
              2. Pick the document type

I’ll settle for a normal web page. No further
    action needed.




15-10-05 12:03 Henk van Ess
                        3. Picture the content

      The word intranet should be in the address
      (URL)




15-10-05 12:03 Henk van Ess
                              Tell Google
The command


inurl:

shows a specific URL




15-10-05 12:03 Henk van Ess
15-10-05 12:03 Henk van Ess
                        4. Where Is The Document?
     I decide to search for universities and
     educational institutions

         Site: edu




15-10-05 12:03 Henk van Ess
                              5. Imagine The Title


Intranet should do the trick




15-10-05 12:03 Henk van Ess
15-10-05 12:03 Henk van Ess
15-10-05 12:03 Henk van Ess
15-10-05 12:03 Henk van Ess
15-10-05 12:03 Henk van Ess
                              1. Google Eats All
                              2. Chain Of Thoughts: how
                                 to think?
                              3. Finding An Open Intranet
                              4. Finding An Address Book




15-10-05 12:03 Henk van Ess
                              Exercise
WAB is the filetype of a Windows Address Book


Find a address book of a car company.
Restrict your search to .COM sites




15-10-05 12:03 Henk van Ess
                              WAB




15-10-05 12:03 Henk van Ess
15-10-05 12:03 Henk van Ess

								
To top