WEBVTT - This file was automatically generated by VIMEO 1 00:00:06.500 --> 00:00:09.200 Hello everyone, and welcome to the section 5 called 2 00:00:09.200 --> 00:00:12.200 search engines of our little journey through open 3 00:00:12.200 --> 00:00:15.400 source, intelligence in the last section. We discussed and 4 00:00:15.400 --> 00:00:18.300 went through the note-taking and password managing part 5 00:00:18.300 --> 00:00:21.500 of osint Investigations. And this section is dedicated to 6 00:00:21.500 --> 00:00:25.100 the first stop of almost any online open-source activities. 7 00:00:24.200 --> 00:00:27.700 The search engines, if you immediately thought 8 00:00:27.700 --> 00:00:30.000 of Google. When I mentioned the search engines, 9 00:00:30.200 --> 00:00:33.200 You could not be that, of course, but believe me, there 10 00:00:33.200 --> 00:00:36.100 are a lot of other great resources out there in the 11 00:00:36.100 --> 00:00:39.000 context of search engines, which we will cover now. 12 00:00:40.100 --> 00:00:43.400 Now, I would like to do a quick overview of this section, so you can learn 13 00:00:43.400 --> 00:00:46.200 what are we in for? Okay, our first 14 00:00:46.200 --> 00:00:49.500 stop is Google and as you are probably familiar 15 00:00:49.500 --> 00:00:52.100 with there are entire books dedicated to 16 00:00:52.100 --> 00:00:55.700 Google searching and Google hacking just to demystify Google 17 00:00:55.700 --> 00:00:58.600 hacking as a search activity, Google 18 00:00:58.600 --> 00:01:01.600 hacking or Google Dorking is related to using 19 00:01:01.600 --> 00:01:04.800 Advanced operators in the Google search engine to 20 00:01:04.800 --> 00:01:07.600 locate specific strings of text within 21 00:01:07.600 --> 00:01:09.800 search results. Mostly it. 22 00:01:09.900 --> 00:01:12.800 Used in penetration testing and securing computer 23 00:01:12.800 --> 00:01:15.400 networks, and it could easily become 24 00:01:15.400 --> 00:01:18.600 an overkill for your organization of someone's personal 25 00:01:18.600 --> 00:01:21.100 information via the search engine, but that is 26 00:01:21.100 --> 00:01:24.200 the way it works. I will show you the most popular and 27 00:01:24.200 --> 00:01:28.100 useful advanced search operators for Euro Cent investigations 28 00:01:27.400 --> 00:01:30.500 and a great resource for search engine, 29 00:01:30.500 --> 00:01:34.600 inquiries that you can use. Remember searching 30 00:01:33.600 --> 00:01:37.400 cannot break anything. Besides 31 00:01:36.400 --> 00:01:39.300 this advanced search operators. I'll 32 00:01:39.300 --> 00:01:39.700 show you a 33 00:01:39.800 --> 00:01:42.500 Great resource for Google search queries on 34 00:01:42.500 --> 00:01:46.500 exploit dashdb.com. After 35 00:01:46.500 --> 00:01:49.200 that. I will show you a quick overview have to create your own 36 00:01:49.200 --> 00:01:53.100 custom search engine, based on the Google searches also, 37 00:01:52.100 --> 00:01:55.100 as additional tips. I will show you the 38 00:01:55.100 --> 00:01:58.400 good use of Google Images searches. Then the 39 00:01:58.400 --> 00:02:01.800 I searched from.com Tool and the Wayback machine, 40 00:02:01.800 --> 00:02:04.900 but won't spoil the fun on telling you now what 41 00:02:04.900 --> 00:02:05.400 they are. 42 00:02:07.500 --> 00:02:10.200 After Google will discuss other search engines and 43 00:02:10.200 --> 00:02:13.600 I have to be honest here. Google is not my main search 44 00:02:13.600 --> 00:02:16.900 engine in any of my search related activities. Will 45 00:02:16.900 --> 00:02:19.700 go through the Privacy oriented engines and 46 00:02:19.700 --> 00:02:22.800 also the country-specific engines because almost 47 00:02:22.800 --> 00:02:25.400 every bigger country has its own flavor of 48 00:02:25.400 --> 00:02:28.900 a search engine. And as a last topic, I 49 00:02:28.900 --> 00:02:32.000 left FTP or the file transfer protocol 50 00:02:31.100 --> 00:02:34.200 to cover because I think that 51 00:02:34.200 --> 00:02:35.700 is one of the biggest 52 00:02:35.800 --> 00:02:38.200 overlooked or maybe forgotten parts of the 53 00:02:38.200 --> 00:02:41.400 internet when conducting searches and you will see later 54 00:02:41.400 --> 00:02:44.500 what I mean by that. Hi, and welcome back to 55 00:02:44.500 --> 00:02:47.800 our first Hands-On video of the search engine section. Now, 56 00:02:47.800 --> 00:02:50.700 I will demonstrate a few of the most useful advanced 57 00:02:50.700 --> 00:02:53.200 search operators. You can use on Google to 58 00:02:53.200 --> 00:02:56.400 get the search results. You want plus a great 59 00:02:56.400 --> 00:02:58.800 resource for Google search queries. 60 00:03:00.200 --> 00:03:03.300 Here we are on our secure and private browser as 61 00:03:03.300 --> 00:03:06.300 I have mentioned before. Google is our first stop. So 62 00:03:06.300 --> 00:03:09.000 let's go there. Okay, you will have a 63 00:03:09.400 --> 00:03:12.500 much better time finding what you're looking for. If you 64 00:03:12.500 --> 00:03:15.200 learn some of the special keywords, and symbols that 65 00:03:15.200 --> 00:03:18.900 search engines, use our first one are 66 00:03:18.900 --> 00:03:20.300 the quotation marks. 67 00:03:21.200 --> 00:03:24.600 Like this place in quotes around any search term 68 00:03:24.600 --> 00:03:27.300 tells Google to search exactly what you 69 00:03:27.400 --> 00:03:30.400 tell it to search. For example, when 70 00:03:30.400 --> 00:03:34.800 I type in learn open source, intelligence, 71 00:03:33.700 --> 00:03:36.500 and press enter. 72 00:03:37.900 --> 00:03:40.900 I get all 73 00:03:40.900 --> 00:03:44.700 over 650 Million 74 00:03:43.100 --> 00:03:46.500 results and 75 00:03:46.500 --> 00:03:49.500 that is a lot, but when I put a search term, 76 00:03:49.600 --> 00:03:53.100 learn open source, intelligence in quotations, press 77 00:03:52.100 --> 00:03:55.800 enter. I get around 78 00:03:55.700 --> 00:03:58.900 12,000 results, 79 00:03:58.600 --> 00:04:01.700 and that is much better, but 80 00:04:01.700 --> 00:04:02.900 still too much for me. 81 00:04:04.400 --> 00:04:07.900 Let's add the word about. So 82 00:04:07.900 --> 00:04:10.500 it goes quotation. 83 00:04:12.500 --> 00:04:13.600 Learn about. 84 00:04:14.600 --> 00:04:16.900 Open source, intelligence and quotation. 85 00:04:20.900 --> 00:04:24.300 Now we get about 2300 results. 86 00:04:26.800 --> 00:04:29.500 And that is much better. Try this 87 00:04:29.500 --> 00:04:32.300 out with the anything. I would recommend it for 88 00:04:32.300 --> 00:04:34.700 you to use your name first. 89 00:04:36.200 --> 00:04:39.300 Now, for the second Advanced operator, and that 90 00:04:39.300 --> 00:04:42.400 is, which I use a lot in any of mine, search 91 00:04:42.400 --> 00:04:45.700 engine activities. And that is the site. Operator. 92 00:04:45.600 --> 00:04:49.500 Just, let's clear this up. This 93 00:04:49.500 --> 00:04:52.200 search operator, simply allows you to 94 00:04:52.200 --> 00:04:55.400 get results only from one website. It shows you only 95 00:04:55.400 --> 00:04:59.000 the results containing the Search terms from one domain. Allow 96 00:04:58.100 --> 00:05:01.800 me to show you how easy to used type site 97 00:05:01.300 --> 00:05:05.200 column and now the targeted website 98 00:05:04.200 --> 00:05:05.800 of order. 99 00:05:05.900 --> 00:05:09.500 I mean I'm going to use code. 100 00:05:11.100 --> 00:05:14.400 Red Dot. Ec-council dot-org. 101 00:05:16.800 --> 00:05:19.900 Space and the search term black 102 00:05:19.900 --> 00:05:20.400 hat. 103 00:05:21.500 --> 00:05:24.700 And enter as you can see in the search results 104 00:05:24.700 --> 00:05:27.300 only the results from the Code Red Dot 105 00:05:27.300 --> 00:05:32.300 ec-council that org domain are being shown and 106 00:05:32.300 --> 00:05:35.300 there are only 24 results, which is great. 107 00:05:37.300 --> 00:05:40.200 Try putting the search term in quotations and see 108 00:05:40.200 --> 00:05:44.700 how that goes. Maybe we'll be lucky and get only let 109 00:05:44.700 --> 00:05:47.700 only cut maybe we'll be lucky and 110 00:05:47.700 --> 00:05:49.100 get only a few results. 111 00:05:51.300 --> 00:05:54.700 Let's clear this up again. And now one 112 00:05:54.700 --> 00:05:57.600 of my favorite operators and that 113 00:05:57.600 --> 00:06:00.500 is the file type operator. This advanced 114 00:06:00.500 --> 00:06:03.300 search operator. When used tells Google to 115 00:06:03.300 --> 00:06:06.500 only provide your results with a specific file type. 116 00:06:06.500 --> 00:06:09.500 You included allow me to show you. I 117 00:06:09.500 --> 00:06:12.400 want to, I want to search only 118 00:06:12.400 --> 00:06:15.400 for PDF files in regard to the search term open 119 00:06:15.400 --> 00:06:18.900 source intelligence. So I will type file 120 00:06:18.900 --> 00:06:19.300 type. 121 00:06:19.400 --> 00:06:22.800 Type column PDF 122 00:06:22.500 --> 00:06:26.400 as the file type of Interest space 123 00:06:25.400 --> 00:06:29.200 open source, intelligence. 124 00:06:32.100 --> 00:06:32.700 And enter. 125 00:06:37.700 --> 00:06:40.100 we got a lot of results, but 126 00:06:42.400 --> 00:06:46.000 as you can see, we got only the PDFs in 127 00:06:45.300 --> 00:06:47.400 regard to our search term. 128 00:06:56.100 --> 00:07:00.600 This operator also works on search, the search engine bing.com, just 129 00:07:00.600 --> 00:07:01.800 for you to have in mind. 130 00:07:08.800 --> 00:07:11.900 And now I have to show you the to search operators. 131 00:07:11.900 --> 00:07:14.200 Did I also often used and they 132 00:07:14.200 --> 00:07:17.700 can make your searches easier 133 00:07:17.100 --> 00:07:20.700 and more efficient and there are the 134 00:07:20.700 --> 00:07:24.100 or and The Hyphen operators, the 135 00:07:23.100 --> 00:07:26.900 or operator searches 136 00:07:26.900 --> 00:07:29.400 for web pages. Containing one of two 137 00:07:29.500 --> 00:07:33.300 similar queries. It is used in uppercase characters 138 00:07:32.900 --> 00:07:34.600 type. 139 00:07:35.700 --> 00:07:39.600 Quotation, ec-council and 140 00:07:39.600 --> 00:07:43.000 quotation. Space. Oh 141 00:07:42.500 --> 00:07:47.000 our space quotation. 142 00:07:45.100 --> 00:07:48.800 Code 143 00:07:48.800 --> 00:07:51.100 red quotation. 144 00:07:54.400 --> 00:07:55.800 It's pretty straightforward. 145 00:07:59.900 --> 00:08:02.300 With this Google will give you the results from 146 00:08:02.300 --> 00:08:05.300 the search term, easy Council, or the search term 147 00:08:05.300 --> 00:08:06.100 Code Red. 148 00:08:22.100 --> 00:08:25.600 And now for the second operator The Hyphen The Hyphen operator 149 00:08:25.600 --> 00:08:28.700 is great to use when you want to exclude some content from 150 00:08:28.700 --> 00:08:31.400 appearing within the results. Let's try it. 151 00:08:31.400 --> 00:08:35.500 Type quotation, mark code, 152 00:08:34.500 --> 00:08:37.000 red and quotation mark. 153 00:08:40.300 --> 00:08:43.300 Space hyphen ec-council. 154 00:08:47.600 --> 00:08:50.900 As you can see, there 155 00:08:50.900 --> 00:08:52.400 is no EC. 156 00:08:54.100 --> 00:08:56.600 Council mentioned in the search results. 157 00:09:00.500 --> 00:09:02.200 but when I remove the hyphen, 158 00:09:06.100 --> 00:09:06.800 press enter. 159 00:09:10.100 --> 00:09:13.200 The easy Council. Codered immediately appears all over the 160 00:09:13.200 --> 00:09:16.700 search results. This is very useful. When, 161 00:09:16.200 --> 00:09:20.500 when you have to filter your search results when 162 00:09:20.500 --> 00:09:23.200 you look for some event or a person, 163 00:09:26.900 --> 00:09:29.900 Now, there are more advanced search operators 164 00:09:29.900 --> 00:09:32.700 and I would just mention them for you to check them out 165 00:09:32.300 --> 00:09:34.000 after this video. 166 00:09:37.500 --> 00:09:40.900 The first one is in Ural in 167 00:09:40.100 --> 00:09:44.300 url column, operator 168 00:09:43.600 --> 00:09:47.100 with this operator. You can specify only, 169 00:09:46.400 --> 00:09:49.900 you can specify, or you can focus 170 00:09:49.900 --> 00:09:52.600 only on the data within the Euro or 171 00:09:52.600 --> 00:09:55.400 address of the website after that. 172 00:09:55.400 --> 00:09:57.100 You have the entitle operator. 173 00:10:00.400 --> 00:10:03.200 In title. Column the entire Del operator is 174 00:10:03.200 --> 00:10:06.400 similar to the in Ural operator. But 175 00:10:06.400 --> 00:10:09.400 only it finds pages with a certain word or 176 00:10:09.400 --> 00:10:11.900 words in the title of the website. 177 00:10:13.800 --> 00:10:16.700 Then also, one of my favorite other favorite 178 00:10:16.800 --> 00:10:18.600 operator is the cash operator. 179 00:10:23.100 --> 00:10:26.200 It's spelled c-- a CH E column. 180 00:10:27.500 --> 00:10:30.800 This operator provides you with the cached version of some website 181 00:10:30.800 --> 00:10:33.700 from a prior time. The main prerequisite here. 182 00:10:33.700 --> 00:10:36.200 Is that the Google did the 183 00:10:36.200 --> 00:10:39.700 index of the website sometime before? 184 00:10:41.200 --> 00:10:44.300 As I have mentioned, there are more of the search operators to 185 00:10:44.300 --> 00:10:47.300 use, but this would be the main ones I use in 186 00:10:47.300 --> 00:10:48.600 my investigations. 187 00:10:51.300 --> 00:10:54.900 And I have to show you a quick look at a great resource 188 00:10:54.500 --> 00:10:57.400 for created, Google 189 00:10:57.400 --> 00:11:00.400 search queries, by other people in 190 00:11:00.400 --> 00:11:02.200 your browser, go to the address. 191 00:11:03.400 --> 00:11:07.400 Exploit dashdb.com, / 192 00:11:06.400 --> 00:11:08.200 Google. 193 00:11:09.600 --> 00:11:12.000 Python hacking hyphen database. 194 00:11:13.600 --> 00:11:16.500 And as its described on the site, the 195 00:11:16.500 --> 00:11:19.900 Google hacking database or ghd be 196 00:11:19.200 --> 00:11:22.400 is a categorized index of internet 197 00:11:22.400 --> 00:11:25.700 search engine. Queries is designed to uncover interesting. 198 00:11:25.700 --> 00:11:28.700 And usually sensitive information. Made 199 00:11:28.700 --> 00:11:31.400 publicly available on the internet. I 200 00:11:31.400 --> 00:11:34.200 go here to get inspired when I'm at a 201 00:11:34.200 --> 00:11:37.800 dead end. The ordered point with my search engine activities. 202 00:11:37.200 --> 00:11:40.200 I have to put a disclaimer here or 203 00:11:40.200 --> 00:11:41.600 better to say. I have to emphasize 204 00:11:42.400 --> 00:11:45.700 Something searching is, okay, but accessing 205 00:11:45.700 --> 00:11:48.300 and visiting search results. May not be, please 206 00:11:48.300 --> 00:11:51.400 be careful not to get yourself in any trouble and always 207 00:11:51.400 --> 00:11:55.500 consult with legal team when you're in doubt, and 208 00:11:55.500 --> 00:11:58.200 now after our Google hacking, we are ready to go to 209 00:11:58.200 --> 00:12:01.500 the next step and that is the Google custom search engine 210 00:12:01.500 --> 00:12:04.200 part that we will cover in the next video. So see you 211 00:12:04.200 --> 00:12:04.600 there.