Google Hacks
             How to Search Efficiently.




8th Aug 09                         http://www.mumbaiitpro.org/
Google Hacks:

   What is Google Hacks ?
   Basic Operators
   Advanced Operators
   Directory Listing
   Interesting Searches
   Tool
   Anonymous Googling
   Protecting Yourself From Google
What is Google Hacks ?:

Google hacks is all about tricks for making best use of search
  & making Google to perform searches that you cannot
         perform using the regular Google search.
Basics: http://www.searchengineshowdown.com/ features/Google/
Including & Excluding Terms: Plus(+) and Minus(-) signs.
Eg: Russian Revolution
  : Meat Free Recipes
  : Russian Revolution –Industrial
   : King –Akbar




Phrase Search: “ “ (Between The Codes).
Eg: "Russian Revolution“
  : “US Constitution“
  : “Meat Free" Recipes
Basics:
And & OR: &/|.
Eg: Holiday OR Vacation
  : Akbar AND King is same as Akbar King
  : Akbar OR King



Not Case Sensitive.
Eg: Shabbir is same as ShAbBiR



Synonyms (~).
Eg: ~Boat
   This will get boat, marine, sailboat, Etc (Similar Meanings)
Basics:

Currency Converter.
Eg: 1 us dollars in Mexican peso


Measurement Conversion.
Eg: Cup in liters
Boolean Searching: Using Brackets & Operators.
http://www.searchengineshowdown.googleboolean.html

Eg: “Meat Free" Recipes Chinese OR Indian
   : (Roman OR Greek) AND Mythology
   : ((Roman OR Greek) AND Mythology) AND Dictionary

Eg : 2+((2*2)/2) OR 2+2*2/2 (Calculator)
Advanced Operators:

Operator:Search_Term
There's no space between the operator, the colon, and the search term.


Movie:<Movie Name>
Eg: Movie:Ghajni


Define:Word
Eg: Define:Cryptography

Weather:City, State
Eg: Weather:Mumbai, Maharashtra
Advanced Operators:
Link:<URL> (Popularity) (Link has limit) (Cannot Combine with Other Operator)
Eg: Link:www.microsoft.com


Numrange:<Number Range>
Eg: Numrange:100000-20000


Inurl:<URL>
Eg:
Advanced Operators:

Related:<URL> (Results Related To The URL Entered)
Eg: Related:www.faa.gov


Filetype:<File Extension> (Supports 12 File Formats)
Eg: Filetype:pdf form 1040


Cache:<URL>
Eg: Cache:www.cisco.com
Advanced Operators:
Site:<Website OR Domain Name>
Eg: Site:www.microsoft.com
   : Site:microsoft.com -site:www.microsoft.com (32 Query Limit)

Intext:<Text>
Eg: Intext: ”Shabbir Ahmed”

Intitle:< >
Eg:Intitle:Culminis

author:<name/email address>
Eg:author:shabz
Directory Listing:

Eg:
   intitle:index.of server.at
   intitle:index.of server.at site:microsoft.com
   intitle:index.of “parent directory”
   intitle:index.of name size
Interesting Searches:
Eg:
   filetype:bak
  intitle:index.of .etc
  intitle:”index.of “ config.php
  allinurl:auth_user_file.txt
  allinurl: admin mdb
  allinurl:service.pwd
  intitle:”Index of” passwords modified
  intitle:”VNC Viewer for Java“
Interesting Searches:
Eg:
   filetype:pst
  filetype:xls username password email
  filetype:eml + intext:”subject” + intext:”from”
  filetype:reg reg + intext:”internet account manager”
  inurl:8080 –intext:8080
  “Access is denied for user” “using password”
   intitle:”Error Occurred”
  filetype:inc intext:mysql_connect
Interesting Searches:
Eg:
   index.of.DCIM (digital Camera Image)
  inurl:”level/15/exec/-/show” (Open Cisco Devices)
  intitle:”Active Webcam page”
This table is taken from the book “Google Hacking for Penetration Testers”
Tool - Google Hacks:




 DOWNLOAD
 http://googlehacks.googlecode.com/files/GoogleHacksSetup1.6.exe
Anonymous Googling:
Cached
-Original
-Cached Text Only (&strip=1)


Google As a Proxy
-Translator
What Is “I Am Feeling Lucky” ?????
Protecting Yourself From Google:
Remove Your Site From Google’s Index
-http://www.google.com/remove.html

Robots.txt
-http://www.robotstxt.org
Thank You


            Shabbir Ahmed
            CCIE, MCT, CEH, CCSA.

Google Hack

  • 1.
    Google Hacks How to Search Efficiently. 8th Aug 09 http://www.mumbaiitpro.org/
  • 2.
    Google Hacks:  What is Google Hacks ?  Basic Operators  Advanced Operators  Directory Listing  Interesting Searches  Tool  Anonymous Googling  Protecting Yourself From Google
  • 3.
    What is GoogleHacks ?: Google hacks is all about tricks for making best use of search & making Google to perform searches that you cannot perform using the regular Google search.
  • 4.
    Basics: http://www.searchengineshowdown.com/ features/Google/ Including& Excluding Terms: Plus(+) and Minus(-) signs. Eg: Russian Revolution : Meat Free Recipes : Russian Revolution –Industrial : King –Akbar Phrase Search: “ “ (Between The Codes). Eg: "Russian Revolution“ : “US Constitution“ : “Meat Free" Recipes
  • 5.
    Basics: And & OR:&/|. Eg: Holiday OR Vacation : Akbar AND King is same as Akbar King : Akbar OR King Not Case Sensitive. Eg: Shabbir is same as ShAbBiR Synonyms (~). Eg: ~Boat This will get boat, marine, sailboat, Etc (Similar Meanings)
  • 6.
    Basics: Currency Converter. Eg: 1us dollars in Mexican peso Measurement Conversion. Eg: Cup in liters
  • 7.
    Boolean Searching: UsingBrackets & Operators. http://www.searchengineshowdown.googleboolean.html Eg: “Meat Free" Recipes Chinese OR Indian : (Roman OR Greek) AND Mythology : ((Roman OR Greek) AND Mythology) AND Dictionary Eg : 2+((2*2)/2) OR 2+2*2/2 (Calculator)
  • 8.
    Advanced Operators: Operator:Search_Term There's nospace between the operator, the colon, and the search term. Movie:<Movie Name> Eg: Movie:Ghajni Define:Word Eg: Define:Cryptography Weather:City, State Eg: Weather:Mumbai, Maharashtra
  • 11.
    Advanced Operators: Link:<URL> (Popularity)(Link has limit) (Cannot Combine with Other Operator) Eg: Link:www.microsoft.com Numrange:<Number Range> Eg: Numrange:100000-20000 Inurl:<URL> Eg:
  • 12.
    Advanced Operators: Related:<URL> (ResultsRelated To The URL Entered) Eg: Related:www.faa.gov Filetype:<File Extension> (Supports 12 File Formats) Eg: Filetype:pdf form 1040 Cache:<URL> Eg: Cache:www.cisco.com
  • 13.
    Advanced Operators: Site:<Website ORDomain Name> Eg: Site:www.microsoft.com : Site:microsoft.com -site:www.microsoft.com (32 Query Limit) Intext:<Text> Eg: Intext: ”Shabbir Ahmed” Intitle:< > Eg:Intitle:Culminis author:<name/email address> Eg:author:shabz
  • 14.
    Directory Listing: Eg: intitle:index.of server.at intitle:index.of server.at site:microsoft.com intitle:index.of “parent directory” intitle:index.of name size
  • 15.
    Interesting Searches: Eg: filetype:bak intitle:index.of .etc intitle:”index.of “ config.php allinurl:auth_user_file.txt allinurl: admin mdb allinurl:service.pwd intitle:”Index of” passwords modified intitle:”VNC Viewer for Java“
  • 16.
    Interesting Searches: Eg: filetype:pst filetype:xls username password email filetype:eml + intext:”subject” + intext:”from” filetype:reg reg + intext:”internet account manager” inurl:8080 –intext:8080 “Access is denied for user” “using password” intitle:”Error Occurred” filetype:inc intext:mysql_connect
  • 17.
    Interesting Searches: Eg: index.of.DCIM (digital Camera Image) inurl:”level/15/exec/-/show” (Open Cisco Devices) intitle:”Active Webcam page”
  • 18.
    This table istaken from the book “Google Hacking for Penetration Testers”
  • 19.
    Tool - GoogleHacks: DOWNLOAD http://googlehacks.googlecode.com/files/GoogleHacksSetup1.6.exe
  • 20.
    Anonymous Googling: Cached -Original -Cached TextOnly (&strip=1) Google As a Proxy -Translator
  • 21.
    What Is “IAm Feeling Lucky” ?????
  • 22.
    Protecting Yourself FromGoogle: Remove Your Site From Google’s Index -http://www.google.com/remove.html Robots.txt -http://www.robotstxt.org
  • 23.
    Thank You Shabbir Ahmed CCIE, MCT, CEH, CCSA.