
Demonstrates Google hacking to locate internal server errors and access sensitive files like htpasswd, revealing credentials from exposed web server content.
Explore google hacking to locate sensitive data in urls, such as api keys, emails, and password hashes, using site searches, and learn how attackers crack hashes with hashcat.
Explore how Google hacking finds insecure http pages on a domain, revealing forms that transmit sensitive data in plain text and highlighting the padlock indicator's absence.
Explore the Google hacking database and its practical Google search queries used to reveal web application vulnerabilities. Learn how ethical hackers and penetration testers leverage these queries and seek insights.
analyze a case study on Google hacking that exposed Yammer access tokens via Google indexing, enabling unauthorized access, and note the vulnerability's discovery, fix, and indexing prevention.
Sensitive data from web applications can be indexed by Google and then it becomes publicly exposed to everyone on the Internet. In this course, you’ll learn about different types of sensitive data that can be indexed by Google. What’s more – you’ll learn about the technique known as Google Hacking and you’ll see how Google Hacking can be used by ethical hackers and professional penetration testers for finding security weaknesses in web applications.
First, I’ll present how you can use Google Hacking to find directory listings and SQL syntax errors. After that, I’ll demonstrate how you can find publicly exposed backup files and internal server errors by means of Google Hacking. Next, I’ll show you how you can use Google Hacking to find sensitive data in URLs and insecure HTTP web pages. Then, I’ll explain to you what Google Hacking Database is and I’ll tell you about a critical vulnerability in Microsoft Yammer Social Network that allowed the attacker to gain unauthorized access to users’ accounts by means of Google Hacking. Finally, I’ll tell you how to prevent Google indexing from happening.
What you’ll see primarily in this course are demos and real-world scenarios, because I want you to make the most of this course and apply this knowledge in your own penetration testing projects. I hope this sounds good to you and I can’t wait to see you in the class.