SlideShare a Scribd company logo
1 of 15
By HackLessons
(www.hacklessons.com) / (www.twitter.com/hacklessons)
“Google Hacking is the process of using advanced
operators in the Google Search engine in the effort to
return more precise search results.”



In summary, the use of advanced operators when
searching Google will allow you to find exactly what
you’re looking for more easily.
Fact: Google can be a b$*#& to search, if you don’t
know the exact phrase to get the results you’re looking
for.

Fact: It’s usually our fault.

Using advanced operators will allow us to find
everything we want in a much quicker fashion.

There are some things we just can’t find without these
little tricks. Security flaws tend to be a prime example.
There are tools out there to make searching Google
even easier, but no tools are required.



However, cheat sheets will be provided and are
generally essential to remembering all of these
functions.
A Google Query is the underlying search equation
generated from user input on Google Search.

Your search terms and parameters define your
results.
•   Google has “wildcards”, however, they are not the same as UNIX and/or
    programming wildcards. This technique is known as stemming.
•   Google stems automatically for you.
       The word commentate in a sentence may return as:
        commentate, commentator, commentating, etc. - > Inaccurate Results.
•   Queries are NOT case sensitive.
       HaCkInG GooGLe will return the exact same search results as HACKING GOOGLE
        or hacking google.
•   Google likes to ignore the popular kids.
       The words: who, what, where, when, a, an, or the ... are often removed from the
        search equation, but not always. Results may vary.
•   Google ignores punctuation.
       There are a few exceptions to this, such as: C++, dvd $400, quick_sort, etc
Operator          Description                                     Usage
      +/-         Force a search for a commonly used word             +word     / -word
                       or remove a word showing up.
      “    ”             Specific word / string order.                “Life is a foreign
                                                                     language; all men
                                                                     mispronounce it.”
       ./*             . is for single character wildcard.           w . rd / life is a *
                              * represents any word.
      site:               Search only a specific site.                site:edufire.com
    filetype:     Search only the text of a specific file type.           filetype:pdf
      link:        Search only within the text of hyperlinks.             link:edufire
     cache:         Displays the cached version of a web             cache:edufire.com
                                   page.
    allintitle:     Search page titles for all search terms.        allintitle:edufire tech
     intitle:     Search page titles for specific search term.       intitle:edufire tech
      inurl:          Search only with the text of a URL.                 inurl:edufire
Find what you need, when you need it.
                       -inurl:htm -inurl:html intitle:"index of" +("/ebooks"|"/book") +(chm|pdf|zip) +“Book Name
     (e)Books
                                                                          Goes Here"

                        -inurl:(htm|html|php) intitle:"index of" +"last modified" +"parent directory" +description
      Images
                                                             +size +(jpg|jpeg|png|bmp|gif)

                        -inurl:(htm|html|php) intitle:"index of" +"last modified" +"parent directory" +description
      Music
                                          +size +(wma|mp3) “Band/Song Name Goes Here"

Phonebook/ Address     phonebook: John Doe      /           phonebook: John Doe Washington DC                      /   #555-555-5555

                        -inurl:(htm|html|php) intitle:"index of" +"last modified" +"parent directory" +description
      Video
                                                +size +(wmv|avi|mp4|mpg|mkv|mov|flv)

     Weather                      weather: DC           /    weather: Washington DC               /       weather: 20073


  Unit Conversion               5 USD in Yen        /       tablespoons in a cup            /    1 gigabyte in kilobytes


    Local Time                       time in Hong Kong               /     time in Australia      /       time in Brazil


   Flight Status            Continental Airlines 2718            /       United Airlines 7607         /    Delta Air Lines 5466


   Live Webcam               inurl:view/view.shtml           /   intitle:liveapplet     /       inurl:ViewerFrame?Mode=
Google Language Tools has been a great tool to
translate text/websites from one language to another.
However, it can also be used as a Proxy Server!
Enter in any web address that you would like to go to
with Google as your Proxy.

Google will not translate any *English* text into
English.

Google’s Proxy is a Transparent Proxy, meaning it
does not conceal your IP address.
Google’s Language service does not store Cookies so
you are not able to use web sites that require them.
In order to double check to make sure you’re actually
using Google as a proxy, check that a web address
such as the above is in your address bar.

You do not want to see http://facebook.com/ or any
other site. You want to see translate.google.com or
you’re doing it wrong. (No pun intended in that
phrase ;) )
1.    Find tech classes on EduFire
     a) Remove tech support pages from results
2.    Find out who links to EduFire
     a) Remove EduFire’s website from results
3.    Find out the weather for your City and State
     a) via Zip Code
4.    Find out if your phone number is listed
5.    Find a song that is very common
6.    Find live webcams.
1.    site:edufire.com tech
     a) site:edufire.com tech -support
2.    link:edufire.com
     a) link:edufire.com –site:edufire.com
3.    weather:Washington DC
     a) weather:20073
4.    #555-555-5555
5.    -inurl:(htm|html|php) intitle:"index of" +"last
      modified" +"parent directory" +description +size
      +(wma|mp3) “Amazing Grace“
6.    inurl:view/view.shtml
Google is more powerful than most people realize.

You just have to learn how to utilize it to suit your
  needs.

There is a learning curve, but it’s definitely worth it.

More Related Content

Similar to Introductiontogooglehacking part1

Searching the internet - what patent searchers should know
Searching the internet - what patent searchers should knowSearching the internet - what patent searchers should know
Searching the internet - what patent searchers should know
Eric Sieverts
 
YQL:: Select * from Internet
YQL:: Select * from InternetYQL:: Select * from Internet
YQL:: Select * from Internet
drgath
 

Similar to Introductiontogooglehacking part1 (20)

C 2
C 2C 2
C 2
 
C 2
C 2C 2
C 2
 
Google
GoogleGoogle
Google
 
Searching the internet - what patent searchers should know
Searching the internet - what patent searchers should knowSearching the internet - what patent searchers should know
Searching the internet - what patent searchers should know
 
Natural Language Processing Tools for the Digital Humanities
Natural Language Processing Tools for the Digital HumanitiesNatural Language Processing Tools for the Digital Humanities
Natural Language Processing Tools for the Digital Humanities
 
Yahoo is open to developers
Yahoo is open to developersYahoo is open to developers
Yahoo is open to developers
 
Advance searching techniques
Advance searching techniquesAdvance searching techniques
Advance searching techniques
 
FarisAloulSlides.ppt
FarisAloulSlides.pptFarisAloulSlides.ppt
FarisAloulSlides.ppt
 
Lesson 3
Lesson 3Lesson 3
Lesson 3
 
Googlemeister1
Googlemeister1Googlemeister1
Googlemeister1
 
Staff Presso On Google
Staff Presso On GoogleStaff Presso On Google
Staff Presso On Google
 
Ready. Set. Drupal! An Intro to Drupal 8, Part 2
Ready. Set. Drupal! An Intro to Drupal 8, Part 2Ready. Set. Drupal! An Intro to Drupal 8, Part 2
Ready. Set. Drupal! An Intro to Drupal 8, Part 2
 
AMD - Why, What and How
AMD - Why, What and HowAMD - Why, What and How
AMD - Why, What and How
 
Introduction to google hacking database
Introduction to google hacking databaseIntroduction to google hacking database
Introduction to google hacking database
 
YQL: Select * from Internet
YQL: Select * from InternetYQL: Select * from Internet
YQL: Select * from Internet
 
Internet tips lewis 2013
Internet tips lewis 2013Internet tips lewis 2013
Internet tips lewis 2013
 
Naming Convention in Python
Naming Convention in PythonNaming Convention in Python
Naming Convention in Python
 
YQL:: Select * from Internet
YQL:: Select * from InternetYQL:: Select * from Internet
YQL:: Select * from Internet
 
The Web Application Hackers Toolchain
The Web Application Hackers ToolchainThe Web Application Hackers Toolchain
The Web Application Hackers Toolchain
 
Google Dorks
Google DorksGoogle Dorks
Google Dorks
 

Introductiontogooglehacking part1

  • 1. By HackLessons (www.hacklessons.com) / (www.twitter.com/hacklessons)
  • 2. “Google Hacking is the process of using advanced operators in the Google Search engine in the effort to return more precise search results.” In summary, the use of advanced operators when searching Google will allow you to find exactly what you’re looking for more easily.
  • 3. Fact: Google can be a b$*#& to search, if you don’t know the exact phrase to get the results you’re looking for. Fact: It’s usually our fault. Using advanced operators will allow us to find everything we want in a much quicker fashion. There are some things we just can’t find without these little tricks. Security flaws tend to be a prime example.
  • 4. There are tools out there to make searching Google even easier, but no tools are required. However, cheat sheets will be provided and are generally essential to remembering all of these functions.
  • 5. A Google Query is the underlying search equation generated from user input on Google Search. Your search terms and parameters define your results.
  • 6. Google has “wildcards”, however, they are not the same as UNIX and/or programming wildcards. This technique is known as stemming. • Google stems automatically for you.  The word commentate in a sentence may return as: commentate, commentator, commentating, etc. - > Inaccurate Results. • Queries are NOT case sensitive.  HaCkInG GooGLe will return the exact same search results as HACKING GOOGLE or hacking google. • Google likes to ignore the popular kids.  The words: who, what, where, when, a, an, or the ... are often removed from the search equation, but not always. Results may vary. • Google ignores punctuation.  There are a few exceptions to this, such as: C++, dvd $400, quick_sort, etc
  • 7. Operator Description Usage +/- Force a search for a commonly used word +word / -word or remove a word showing up. “ ” Specific word / string order. “Life is a foreign language; all men mispronounce it.” ./* . is for single character wildcard. w . rd / life is a * * represents any word. site: Search only a specific site. site:edufire.com filetype: Search only the text of a specific file type. filetype:pdf link: Search only within the text of hyperlinks. link:edufire cache: Displays the cached version of a web cache:edufire.com page. allintitle: Search page titles for all search terms. allintitle:edufire tech intitle: Search page titles for specific search term. intitle:edufire tech inurl: Search only with the text of a URL. inurl:edufire
  • 8. Find what you need, when you need it. -inurl:htm -inurl:html intitle:"index of" +("/ebooks"|"/book") +(chm|pdf|zip) +“Book Name (e)Books Goes Here" -inurl:(htm|html|php) intitle:"index of" +"last modified" +"parent directory" +description Images +size +(jpg|jpeg|png|bmp|gif) -inurl:(htm|html|php) intitle:"index of" +"last modified" +"parent directory" +description Music +size +(wma|mp3) “Band/Song Name Goes Here" Phonebook/ Address phonebook: John Doe / phonebook: John Doe Washington DC / #555-555-5555 -inurl:(htm|html|php) intitle:"index of" +"last modified" +"parent directory" +description Video +size +(wmv|avi|mp4|mpg|mkv|mov|flv) Weather weather: DC / weather: Washington DC / weather: 20073 Unit Conversion 5 USD in Yen / tablespoons in a cup / 1 gigabyte in kilobytes Local Time time in Hong Kong / time in Australia / time in Brazil Flight Status Continental Airlines 2718 / United Airlines 7607 / Delta Air Lines 5466 Live Webcam inurl:view/view.shtml / intitle:liveapplet / inurl:ViewerFrame?Mode=
  • 9. Google Language Tools has been a great tool to translate text/websites from one language to another. However, it can also be used as a Proxy Server!
  • 10. Enter in any web address that you would like to go to with Google as your Proxy. Google will not translate any *English* text into English. Google’s Proxy is a Transparent Proxy, meaning it does not conceal your IP address.
  • 11. Google’s Language service does not store Cookies so you are not able to use web sites that require them.
  • 12. In order to double check to make sure you’re actually using Google as a proxy, check that a web address such as the above is in your address bar. You do not want to see http://facebook.com/ or any other site. You want to see translate.google.com or you’re doing it wrong. (No pun intended in that phrase ;) )
  • 13. 1. Find tech classes on EduFire a) Remove tech support pages from results 2. Find out who links to EduFire a) Remove EduFire’s website from results 3. Find out the weather for your City and State a) via Zip Code 4. Find out if your phone number is listed 5. Find a song that is very common 6. Find live webcams.
  • 14. 1. site:edufire.com tech a) site:edufire.com tech -support 2. link:edufire.com a) link:edufire.com –site:edufire.com 3. weather:Washington DC a) weather:20073 4. #555-555-5555 5. -inurl:(htm|html|php) intitle:"index of" +"last modified" +"parent directory" +description +size +(wma|mp3) “Amazing Grace“ 6. inurl:view/view.shtml
  • 15. Google is more powerful than most people realize. You just have to learn how to utilize it to suit your needs. There is a learning curve, but it’s definitely worth it.