Using Google to Hack Your Site #Pubcon

•

Oct. 11, 2016

• •

#pubcon@badams
Using Google to Hack Your Site
Presented by:
Barry Adams
Polemic Digital

#pubcon@badams
About Barry Adams
• Dutchman in Northern Ireland
• Founder of Polemic Digital
• Co-Chief Editor for Stateof...

#pubcon@badams
Anatomy of a Hack
1. Reconnaissance
2. Scanning
3. Gaining Access
4. Maintaining Access
5. Covering Tracks

Next SlideShares

Upcoming SlideShare

Introduction to Google AMP - Accelerated Mobile Pages #Pubcon

Introduction to Google AMP - Accelerated Mobile Pages #Pubcon

Loading in …3

×

Using Google to Hack Your Site #Pubcon

Oct. 11, 2016

• •

Download to read offline

Slides from my talk at Pubcon Las Vegas in October 2016 about using Google to find site security weaknesses.

SEO Consultant

Slides from my talk at Pubcon Las Vegas in October 2016 about using Google to find site security weaknesses.

License: CC Attribution License

More Related Content

In the Plex: How Google Thinks, Works, and Shapes Our Lives Steven Levy

Hamlet's BlackBerry: A Practical Philosophy for Building a Good Life in the Digital Age William Powers

The Impulse Economy: Understanding Mobile Shoppers and What Makes Them Buy Gary Schwartz

Emergence: The Connected Lives of Ants, Brains, Cities, and Software Steven Johnson

Tubes: A Journey to the Center of the Internet Andrew Blum

World Wide Mind: The Coming Integration of Humanity, Machines, and the Internet Michael Chorost

An Army of Davids: How Markets and Technology Empower Ordinary People to Beat Big Media, Big Government, and Other Goliaths Glenn Reynolds

The End of Business As Usual: Rewire the Way You Work to Succeed in the Consumer Revolution Brian Solis

Blog Schmog: The Truth About What Blogs Can (and Can't) Do for Your Business Robert W. Bly

The Thank You Economy Gary Vaynerchuk

Talking Back to Facebook: The Common Sense Guide to Raising Kids in the Digital Age James P. Steyer

The Nature of the Future: Dispatches from the Socialstructed World Marina Gorbis

Public Parts: How Sharing in the Digital Age Improves the Way We Work and Live Jeff Jarvis

Socialnomics: How Social Media Transforms the Way We Live and Do Business Erik Qualman

Paper Prototyping: The Fast and Easy Way to Design and Refine User Interfaces Carolyn Snyder

The Internet Trap: How the Digital Economy Builds Monopolies and Undermines Democracy Matthew Hindman

Cyberwar: How Russian Hackers and Trolls Helped Elect a President—What We Don't, Can't, and Do Know Kathleen Hall Jamieson

Hacker, Hoaxer, Whistleblower, Spy: The Many Faces of Anonymous Gabriella Coleman

Internet Riches: The Simple Money-Making Secrets of Online Millionaires Scott Fox

Exploding Data: Reclaiming Our Cyber Security in the Digital Age Michael Chertoff

Blockchain Revolution: How the Technology Behind Bitcoin Is Changing Money, Business, and the World Don Tapscott

The Secret Life: Three True Stories of the Digital Age Andrew O'Hagan

Ten Arguments for Deleting Your Social Media Accounts Right Now Jaron Lanier

Platform: Get Noticed in a Noisy World Michael Hyatt

So You Want to Start a Podcast: Finding Your Voice, Telling Your Story, and Building a Community that Will Listen Findaway

Stop Checking Your Likes: Shake Off the Need for Approval and Live an Incredible Life Susie Moore

This Machine Kills Secrets: How Wikileakers, Cypherpunks, and Hacktivists Aim to Free the World's Information Andy Greenberg

The Dark Net: Inside the Digital Underworld Jamie Bartlett

Cryptography: The Key to Digital Security, How It Works, and Why It Matters Keith Martin

Kill All Normies: Online Culture Wars From 4Chan And Tumblr To Trump And The Alt-Right Angela Nagle

Who Owns the Future? Jaron Lanier

iRules: What Every Tech-healthy Family Needs to Know About Selfies, Sexting, Gaming, and Growing Up Janell Burley Hofmann

Using Google to Hack Your Site #Pubcon

1. #pubcon@badams Using Google to Hack Your Site Presented by: Barry Adams Polemic Digital
2. #pubcon@badams About Barry Adams • Dutchman in Northern Ireland • Founder of Polemic Digital • Co-Chief Editor for StateofDigital.com • Twitter ranter: @badams • Lecturer & educator
3. #pubcon@badams Anatomy of a Hack 1. Reconnaissance 2. Scanning 3. Gaining Access 4. Maintaining Access 5. Covering Tracks
4. #pubcon@badams Prevention is the best cure • Security through obscurity – Enough to defeat script kiddies & automated tools • Won’t stop dedicated hackers – But then, few things will…
5. #pubcon@badams Becoming invisible…
6. #pubcon@badams Wappalyzer
7. #pubcon@badams Hide your version numbers <meta name="generator" content="WordPress 4.6.1"/>
8. #pubcon@badams Broadcasting your security in robots.txt • Don’t put your back-end login folder in your robots.txt – Use meta robots noindex,nofollow
9. #pubcon@badams Using Google to find weaknesses • Google is a hungry beast • It will crawl & index all it can • Even stuff it really shouldn’t … Advanced search commands allow you to use Google’s insatiable hunger for your own benefit/protection
10. #pubcon@badams Google Advanced Search Commands site:domain.com > only search within that domain ext:xxx > only show files with that extension inurl:xyz > only show pages with ‘xyz’ in the URL -abc > exclude pages that match ‘abc’ | > string searches together with pipes
11. #pubcon@badams Login folders
12. #pubcon@badams Database files
13. #pubcon@badams Configuration files
14. #pubcon@badams Log Files
15. #pubcon@badams Backups
16. #pubcon@badams Documents
17. #pubcon@badams Social Engineering • Be careful what you publish online! – Hackers can use personal information to gain confidence and extract more information. • Even passwords…
18. #pubcon@badams Shared Hosting / Shared Sites SpyOnWeb.com
19. #pubcon@badams Subdomains https://pentest-tools.com/
20. #pubcon@badams To summarise • Minimise your online footprint; – Anything online can and will be used against you • Don’t give away any clues; – Make your website difficult to reconnoitre • Educate your staff; – People are your biggest weakness
21. #pubcon@badams Thank You Follow me on Twitter: @badams Email me your questions: barry@polemicdigital.com