WEBVTT 00:00.770 --> 00:10.520 So those advanced search operators, you probably got a sense for just how really incredible and specific 00:10.550 --> 00:11.900 you could be with your searches. 00:12.230 --> 00:19.070 Well, if you are using those to attack someone, you're engaging in what's called Google Dorking. 00:19.430 --> 00:23.780 And the search strings that you're using are called dorks. 00:24.080 --> 00:27.920 By the way, dork here is just a substitute for hack. 00:28.040 --> 00:30.590 So you'll often hear this is Google hacking. 00:30.800 --> 00:33.800 And of course, it would be a hack that you're entering in. 00:35.270 --> 00:36.680 Is Google aware of this? 00:36.710 --> 00:37.350 Yes. 00:37.370 --> 00:42.320 And they are you know, they didn't publish it, I'm sure. 00:42.440 --> 00:47.750 But there is a database of the latest of these that we can keep an eye on. 00:48.020 --> 00:55.730 This is a great source for the recommended best practice here of running these in reconnaissance against 00:55.730 --> 00:57.140 your own websites. 00:57.800 --> 00:58.160 Okay. 00:58.160 --> 01:03.950 I'm being really silly here because this is clearly one of those areas where I need to just show you. 01:03.950 --> 01:06.320 It's easier for me to show you what I'm talking about. 01:06.530 --> 01:08.270 So here we are. 01:08.270 --> 01:11.810 I've done a search for the Google hacking database. 01:11.810 --> 01:14.190 And yeah, it's not from Google themselves. 01:14.210 --> 01:16.670 It's from the good people at Exploit DB. 01:17.000 --> 01:22.280 And this is a website and a product name, exploit hyphen DB that you're going to want to know. 01:22.790 --> 01:24.500 So the Google hacking database or. 01:25.970 --> 01:26.760 What does it do? 01:26.780 --> 01:33.560 It gives us none other than a list of the latest and greatest Google dorks. 01:33.770 --> 01:35.330 Notice this one right here. 01:35.360 --> 01:36.650 Site gov. 01:36.680 --> 01:37.910 Dot asterisk. 01:38.090 --> 01:41.810 So it's going to grab any of the gov sites. 01:41.960 --> 01:45.500 And in the title is going to be index of. 01:45.770 --> 01:50.510 And then it's dot rather asterisk dot cs v. 01:50.780 --> 01:53.330 So you're getting all these indexes. 01:53.660 --> 01:57.770 Now what is that file containing juicy info. 01:57.800 --> 01:58.370 Yikes. 01:58.670 --> 02:02.300 So one of the things that you can do is you can grab this. 02:02.300 --> 02:05.060 Of course you can, you know, copy it. 02:05.120 --> 02:05.540 Right? 02:05.540 --> 02:12.920 So you can go in and copy the Google dork and then you can run over to your own copy of Google. 02:13.220 --> 02:19.100 And what you'll do is you can paste this in, but modify the parameters, of course. 02:19.340 --> 02:22.100 So I might go against R. 02:22.850 --> 02:26.510 Oh, how about we do academy? 02:26.630 --> 02:27.050 Right. 02:27.050 --> 02:33.410 So any prefixed side of academy and we're going to get these indexes. 02:33.410 --> 02:39.260 And sure enough, a lot of times you'll see this is just sample information. 02:39.440 --> 02:40.160 That's cool. 02:40.400 --> 02:41.690 So it's great. 02:41.930 --> 02:47.120 This was something that was fine for us to find, and I didn't want to find anything obviously sensitive. 02:47.480 --> 02:55.940 But you get the idea you are going to be able to effectively perform these same sometimes, you know, 02:55.940 --> 02:58.520 incredibly dangerous Google dorks. 02:58.910 --> 03:01.640 This is something very, very important for us to know about. 03:02.360 --> 03:09.560 There are Google dorks that have revealed key usernames and passwords that have then gotten people in 03:09.650 --> 03:10.250 systems. 03:10.400 --> 03:11.150 Of course. 03:12.260 --> 03:20.600 Google dorks are very popular in the area of voice over IP fingerprinting, VPN fingerprinting. 03:20.810 --> 03:26.450 There is lots of different fingerprinting techniques that can be assisted in this area. 03:26.630 --> 03:33.290 I'm so glad you know about it now, and I'm so glad that you're going to be able to run Google dorks 03:33.290 --> 03:36.620 against websites from a Penn State perspective.