Read more
Google is the most popular search engine ever created, but Google's search capabilities are so powerful, they sometimes discover content that no one ever intended to be publicly available on the Web, including social security numbers, credit card numbers, trade secrets, and federally classified documents. Google Hacking for Penetration Testers, Third Edition, shows you how security professionals and system administratord manipulate Google to find this sensitive information and "self-police" their own organizations.
You will learn how Google Maps and Google Earth provide pinpoint military accuracy, see how bad guys can manipulate Google to create super worms, and see how they can "mash up" Google with Facebook, LinkedIn, and more for passive reconnaissance.
This third edition includes completely updated content throughout and all new hacks such as Google scripting and using Google hacking with other search engines and APIs. Noted author Johnny Long, founder of Hackers for Charity, gives you all the tools you need to conduct the ultimate open source reconnaissance and penetration testing.
List of contents
Chapter 1 Google Searching Basics
Chapter 2 Advanced Operators
Chapter 3 Google Hacking Basics - The new location of the GHDB
Chapter 4 Document Grinding and Database Digging - Finding Reports Generated By Security Scanners and Back-Up Files
Chapter 5 Google's Part in an Information Collection Framework
Chapter 6 Locating Exploits and Finding Targets
Chapter 7 Ten Simple Security Searches That Work
Chapter 8 Tracking Down Web Servers, Login Portals, and Network Hardware - Finding Sensitive WordPress and SSH Configuration
Chapter 9 Usernames, Passwords, and Secret Stuff, Oh My! - Finding GitHub, SQL, Gmail, Facebook, and other Passwords
Chapter 10 Hacking Google Services
Chapter 11 Google Hacking Showcase
Chapter 12 Protecting Yourself from Google Hackers
Chapter 13 Scripting Google Hacking For Better Searching
Chapter 14 Using Google Hacking with Other Web Search Engines and APIs
About the author
Bill Gardner ist geschäftsführenden Direktor von Gardner Design. Zu seinen bisherigen Auftraggebern zählten unter anderem Learjet, Thermos, Nissan, Pepsi, Pizza Hut, Kroger, Hallmark und die Cargill Corporation. Auch war er für die Olympischen Spiele 2004 in Athen tätig. Seine Arbeiten wurden in Communication Arts, Print, Graphis, New York Art Directors Annual, Step Inside Design, bei den Mead Top 60 sowie im Museum of Modern Art und in zahlreichen anderen internationalen Designausstellungen vorgestellt.
Report
"This book should be a required read for system administrators and infosec pros in general, as it gives a sobering overview of what type of information that should not be publicly available can be found online - if you know how to look for it." --Help Net Security
