Welcome, guys.
In this lecture, we'll talk about hacking Google searches, you'll find out how hackers and security
researchers find out information on the Internet.
Google Hacking, also named Google Daqing, is a computer hacking technique that uses Google search
to find security holes in the configurations that websites use.
This is, in fact, an information gathering technique that uses advanced Google search queries, this
can be used to identify security vulnerabilities in Web applications, gather information about arbitrary
or individual targets, discover error messages, disclosing sensitive information, discover files
containing credentials and other sensitive data.
Let's get started with the basics.
When you search something on Google, it will try to intelligently guess what you are in fact willing
to find out.
Let's search for Web scraping with Python.
And Google returned a lot of results, and each result has something to do with what's Web scraping
and python.
Now, if you want to search for an exact string, you should enclose the string in double corks like
this.
And it's showing only results that contains these four words, web scraping with Python in the exact
order written by me.
This is very useful sometimes to cut out the noise.
Now, if you are looking up for a technology related question, you do not want to see old or obsolete
results to be more irrelevant.
You can narrow the search to the latest results.
And one of the favorite ways to do that is to click on tools and then choose a specific time interval
for our search.
Let's see only the results from the past year.
OK, these are the results from the past year.
Another thing we can do to make the search even more helpful is to add a particular file type.
Lexy, I want to find out only paedophiles related to Python Web scraping Rohinton between double quotes.
To do that, I'll use what is called an operator.
And for this example, the operator will be file type.
So file type the name of the operator, Callon, and the name of the file PDF.
And we see that all the results are of TYPEDEF.
They are only paedophiles.
Let's try another one.
I'm looking for Apple sales in 2019, and I want to see only Excel files.
So 2019 Apple sales file type Callon Excel A6.
And I want to see all the results, not only the results from the past year, so any time.
OK.
I forgot only Excel files related to Apple sales in 2019.
This is really useful to limit your searches only to what matters to you.
I'll go even deeper and I'll say that I want to see results about Apple's sales in 2019, but I don't
want to see anything related to iPhone.
So I'll add minus ifone to the search query, I put ominous sign just before the word or the words that
I don't want.
iPhone was excluded.
These are Apple iPad sales worldwide, and if you want to limit the results to only a website, you
can use the site operator like this site Kolon, like, say, Wikipedia, that talk entitled.
This is another operator calling security.
All the results are from Wikipedia dot org and in title made Google to restrict the results to Web pages
containing the word security in the title.
There is always the word security in the title.
Another useful operator is the logical or for example, I'm searching for Bitcoin or Ethereum.
This is the owner operator.
You can use a pair of parentheses to group multiple terms or search operators to control how the search
is executed.
For example, I'm searching for either Bitcoin or Ethereum hash algorithm.
A pair of parentheses and then hash algorithm.
I'm searching, in fact, for Bitcoin hash algorithm or Ethereum hash algorithm.
Another thing you can do if you find this confusing is to use a very advanced search option.
Go to Google dot com slash, advanced underline search, and you'll see here a lot of useful options
that allow you to construct your search with the exact parameters.