1 00:00:00,140 --> 00:00:07,820 So far, we have learned how to use many search operators and how effective they are in narrowing down 2 00:00:07,820 --> 00:00:09,080 search results. 3 00:00:09,590 --> 00:00:17,270 In this lecture, I would like to show you some exclusive search operators that are very helpful that 4 00:00:17,270 --> 00:00:18,860 Google doesn't have. 5 00:00:19,850 --> 00:00:27,110 In addition to that, some search results could be found on different search engines that are not indexed 6 00:00:27,110 --> 00:00:27,950 by Google. 7 00:00:27,950 --> 00:00:33,110 And this is why using different search engines is important. 8 00:00:33,500 --> 00:00:40,940 For example, let's say that I were able to find an article that were indexed by Google and this article 9 00:00:40,940 --> 00:00:46,280 has been deleted and Google doesn't have the cached version of this page. 10 00:00:46,520 --> 00:00:54,290 In this case, I can go to a different search engine like Bing or Yandex and search for this article, 11 00:00:54,290 --> 00:00:58,670 and I might be able to find a saved copy of this page. 12 00:00:59,330 --> 00:01:05,800 So the first search operator that I would like to talk about is called link from domain. 13 00:01:06,610 --> 00:01:13,540 And this search operator will allow you to find all the links that were mentioned on the target website. 14 00:01:14,410 --> 00:01:20,230 So as you can see in the screenshot here, I've said link from domain and then I've added my domain 15 00:01:20,230 --> 00:01:20,890 name. 16 00:01:21,370 --> 00:01:25,690 And this is a link that I have mentioned on my website. 17 00:01:25,990 --> 00:01:33,190 And this is very useful when you want to gather information about a website that has many URLs, many 18 00:01:33,190 --> 00:01:34,660 buttons, etc.. 19 00:01:34,990 --> 00:01:37,840 Now I would like to show you a live example. 20 00:01:38,110 --> 00:01:45,340 So I'm going to search for the links that were indexed by Bing that are coming from the Security.org. 21 00:01:46,240 --> 00:01:50,470 So here are all the links that were mentioned on the Security.org. 22 00:01:51,250 --> 00:01:57,310 So what I'm going to do right now is just scroll down and go to a random page to this for example. 23 00:01:57,310 --> 00:02:02,840 And here we can see That there is a script called Rocky on GitHub. 24 00:02:03,470 --> 00:02:10,340 So let me see whether this were actually posted on the Security.org or this link where somewhere in 25 00:02:10,340 --> 00:02:11,450 the security.org. 26 00:02:11,450 --> 00:02:15,980 So I'm going to open this URL and then copy this. 27 00:02:18,110 --> 00:02:25,640 And then go to Google and say that I'm going to search on the Security.org for this tool or for this 28 00:02:25,640 --> 00:02:26,750 script name. 29 00:02:27,170 --> 00:02:31,130 And when I hit enter I can see that there is a search result. 30 00:02:32,210 --> 00:02:39,950 And when I go to the article I'm going to see that this is the link that we're mentioned on the Security.org 31 00:02:39,950 --> 00:02:41,990 that we found earlier. 32 00:02:43,160 --> 00:02:49,970 My next favorite search operator is called IP, and this will show us all the indexed websites that 33 00:02:49,970 --> 00:02:53,030 are hosted on a certain IP address. 34 00:02:53,090 --> 00:03:00,250 So if you have an IP address of a website and you want to see what websites are hosted on this IP address, 35 00:03:00,250 --> 00:03:02,890 then you can use this search operator. 36 00:03:02,890 --> 00:03:08,590 You want to say IP and then colon and then space, which is very important. 37 00:03:08,590 --> 00:03:10,450 And then the IP number. 38 00:03:11,200 --> 00:03:14,920 So I'm going to add this IP address and hit enter. 39 00:03:15,160 --> 00:03:22,420 And you can see that there is a website called H2 Berlin dot D that's hosted on this IP address. 40 00:03:22,420 --> 00:03:25,630 And we have 31,000 search results. 41 00:03:26,380 --> 00:03:32,530 Now if we scroll down we can also see this domain pops up multiple times. 42 00:03:32,530 --> 00:03:34,870 That has multiple subdomains. 43 00:03:34,870 --> 00:03:42,160 For example here we have chimmy H2 Berlin D, here we have IAW, etc.. 44 00:03:42,490 --> 00:03:50,080 So what if I want to exclude all of the search results and only find other websites that are hosted 45 00:03:50,080 --> 00:03:51,430 on this IP address? 46 00:03:52,570 --> 00:03:58,890 So we are going to do similar to what we have done before, which is using the minus to exclude something. 47 00:03:58,890 --> 00:04:01,560 And in this case I'm going to exclude a website. 48 00:04:01,650 --> 00:04:05,610 And it is this website that we can see right here. 49 00:04:06,750 --> 00:04:07,950 I'm going to hit enter. 50 00:04:07,950 --> 00:04:11,910 And now we can see that we have less search results. 51 00:04:11,910 --> 00:04:15,930 And we can see that there is a website called European Law School. 52 00:04:15,960 --> 00:04:23,880 We can also scroll down and see Humboldt and Das Portal De, etc.. 53 00:04:24,630 --> 00:04:29,970 So all of these websites are actually hosted on this IP address. 54 00:04:29,970 --> 00:04:37,410 And using the site operator helped us to find different websites hosted on this IP address. 55 00:04:37,410 --> 00:04:43,800 And there is an easier method that I would like to talk about it in the website Osint section. 56 00:04:43,800 --> 00:04:46,050 That's way easier than this. 57 00:04:47,310 --> 00:04:53,700 Next, I would like to show you a search operator called contains, which will allow you to search for 58 00:04:53,700 --> 00:04:57,480 file types that were mentioned on a certain website. 59 00:04:57,480 --> 00:05:06,040 In this example, I have told being to search within Tesla.com for any PDF files that were mentioned 60 00:05:06,070 --> 00:05:07,900 in any of these pages. 61 00:05:09,100 --> 00:05:12,250 So let's try this, but not with Tesla.com. 62 00:05:12,250 --> 00:05:14,890 We are going to try this with Security.org. 63 00:05:14,890 --> 00:05:17,950 I'm going to say search and I'm going to open any link. 64 00:05:17,950 --> 00:05:22,900 For example, let me open this link and you can see that this is different than file type. 65 00:05:22,900 --> 00:05:29,980 Because normally when you specify file type in here, you will open a PDF file or all the search results 66 00:05:29,980 --> 00:05:32,320 are going to be PDF files. 67 00:05:32,320 --> 00:05:37,030 But in this case we were redirected to a normal article. 68 00:05:37,030 --> 00:05:44,230 And if we scroll down a little bit and check the links, we might be able to find a PDF file, which 69 00:05:44,260 --> 00:05:45,880 is this one for example. 70 00:05:46,420 --> 00:05:52,480 So here we have a PDF file that we can get once we register on this website. 71 00:05:52,480 --> 00:05:57,580 And it's hosted not on Z security.org but on a different website.