Hello.
My name is Typhoon will come to this another actually.
Course.
And in this course we're going to go over a few useful scenarios for how to use Google operators.
First, let us search for entitle in title.
Like index of, uh, here you use the backs, uh, the space between index off here and press enter.
So this will give us a list of web pages that support directory browsing, directory browsing, or like
traversal.
So this directory browsing is a hacking method that allows attackers to access restricted directories
and files within the website and executes a command outside the web servers root directory.
Here, as you can see, we've got a very, uh, uh, videos here.
Let's watch this since it's an official applet uploaded to Google.
And I think we if there's no problem if you watch this, some hotel and spa.
Video.
I think it's an advertising.
Yes.
So let's go another website.
Are we have.
Like so much folders and plugins like this.
Like you can dig these files and sometimes you find something useful here.
Here.
Intel.
Uh, this is, I think, some of compilers.
I think it's F compiler.
Mhm.
What's the video's.
Yeah.
Videos.
Files is empty.
As an example let's try in URL.
So.
So as you can see here, so you can actually try and like here.
Investigate these websites for yourself.
I might suggest you do not harm these websites, but it's your choice, of course, so we can also use
in your URL admin admin here.
So this search will return sites that have admin or administrator in the URL itself here.
So sometimes there are associated login pages like this.
For example sillitoe admin portal.
Yes.
This is like Adam.
Pages.
This query will show us admin pages and or administrative login pages of websites.
Let's try a different one in title.
Open web mail.
Here.
So Google will show us some servers out that they are running open web mail.
So you can also try the in title and block password.
Uh, to find blogs or websites powered by every block.
So we block the prone to several different input validation vulnerabilities.
So I could just quickly go and find several targets out there that are using that technology as a part
of my testing process.
So here, as you can see, this is this means that they are using m v block power, as you can see,
powered by in V block.
We can also have open web mail.
This might actually be the web mail.
Actually the open mail.
I think they had some vulnerabilities, which we will try later in this lecture.
This is just an open source intelligence.
The section of our Oxley course.
Here.
Let's actually try the entitled, entitled root, root.
This is the things getting serious here, right past here.
And after that, as you remember in previous lectures, I said you can use in title with another parameters
as well.
And are we going to also add in text?
We are in courts home here like that.
So surprisingly enough, this can show you the password directory for a few Linux boxes.
As you can see, we got just some results here.
This firstly is of course, the Google hacking database.
Google doc.
This is a Google doc that published on Metasploit.
Actually, you can find more google docs and like pen tests your.
Ethical hacking.
Pieters, your ethical hacking skills with this Google Docs as well, of course, do not harm this website.
This is what ethical hacking is.
So error logs are yet another valuable source of reconnaissance information.
So error logs might tell you what is running on their user behavior or even the controls they have put
in place.
Your.
So for our first example, we'll try the in text, in text parameter and in quotes here access denied
for.
And as you can see here, we got the first StackOverflow because someone asked this questions in Web.
Or we can also try the shopping cart.
Shopping cart.
Card so this can show us exactly which sites are using my skill in the back of their shopping cart.
Of course, there is a more precisely way precise way to finding my SQL running websites, but it's
just basic examples of how to find the like in text shopping cart here.
So let's take this step of order.
So you probably already know that you must be careful about which devices you're hooking with, uh,
to the internet and with every device that has a web interface.
So that's because people.
Um, can probably find it.
So I will demonstrate this with in title by typing in title Blue net with your weaver.
Here.
It.
I think the Google.
Oh, we were.
Here.
As you can see, this is an old Google hacking database.
Google, Google Hacking Dog.
Which is actually I think they covered this up.
As you can see, we got no results here.
In some cases, I've been able to use this to take control of a camera on the bridges in the previous,
uh, like 20 tens or fifteens.
But you can do this with several propeller cameras.
You just need to look up the specific name of the camera, for example.
Like, um.
Like.
Here.
Like this.
So let's try another examples.
Example.
Quest.
Image that HTML.
You know, this is an another.
Or actually it's not all 2020.
This is an exploit database.
You can see this as well.
Google talk here.
Let's see.
What we got here.
This is some strange oral.
Let's look at this.
Okay.
You can also use in your URL.
Route a c.
P a c.
S.
Anon here.
A.
Non.
A.
C.
S.
Yeah.
So the results will take us directly to the main page of outlook, access, public folders and an exchange
address book.
Here.
Some of some of these websites are actually slow.
Here, as you can see here.