API tools faq
paste
Guest User

How to Hack Anything Using Google

a guest
Sep 8th, 2024
896
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.12 KB | Cybersecurity | 0 0
raw download clone embed print report
  1. The concept of "Google Hacking" dates back to 2002, when Johnny Long began to collect interesting Google search queries that uncovered vulnerable systems and/or sensitive information disclosures - labeling them googleDorks. some people call it googlehacking.
  2.  
  3. Google: If you still do not know what is google, then you need to take a crash course in "how to use the internet"
  4.  
  5. Dork:Someone who has odd interests, and is often silly at times.
  6. A dork is also someone who can be themselves and not care what anyone thinks
  7.  
  8. In my opinion A Google dork is an employee who unknowingly exposes sensitive corporate information on the Internet.
  9.  
  10. As a passive attack method, Google dorking can return usernames and passwords, email lists, sensitive documents, personally identifiable financial information (PIFI) and website vulnerabilities.
  11.  
  12. That information can be used for any number of illegal activities, including cyberterrorism, industrial espionage,identity theft and cyberstalking
  13.  
  14. 2-OPERATORS
  15.  
  16. as well as programming, google dorks also has its operators, I will not be able to show all operators but here are the most commonly used Operators.
  17.  
  18. Lets take a look at the special google search operators that are used to construct those high powered google hack search terms.
  19.  
  20. intitle
  21.  
  22. Specifying intitle, will tell google to show only those pages that have the term in their html title. For example intitle:"login page" will show those pages which have the term "login page" in the title text.
  23.  
  24. allintitle
  25.  
  26. Similar to intitle, but looks for all the specified terms in the title.
  27.  
  28. inurl
  29.  
  30. Searches for the specified term in the url. For example inurl:"login.php".
  31.  
  32. allinurl
  33.  
  34. Same as inurl, but searches for all terms in the url.
  35.  
  36. filetype
  37.  
  38. Searches for specific file types. filetype:pdf will looks for pdf files in websites. Similarly filetype:txt looks for files with extension .txt
  39.  
  40. ext
  41.  
  42. Similar to filetype. ext:pdf finds pdf extension files.
  43.  
  44. intext
  45.  
  46. Searches the content of the page. Somewhat like a plain google search. For example intext:"index of /".
  47.  
  48. allintext
  49.  
  50. Similar to intext, but searches for all terms to be present in the text.
  51.  
  52. site
  53.  
  54. Limits the search to a specific site only. site:nullbyte.com
  55.  
  56. 3- THE FORMULA OF GOOGLE DORKS
  57.  
  58. Dorks : They are like search criteria in which a search engine returns results related to your dork.
  59. The process can be a little time consuming, but the outcome will be worth it after learning on how to use dorks.
  60.  
  61. Basic Formula of dork,
  62.  
  63. "inurl:."domain"/"dorks" "
  64.  
  65. So you would normally understand it like this:
  66. "inurl" = input URL
  67. "domain" = your desired domain ex. .gov
  68. "dorks" = your dork of your choice
  69.  
  70. Here is another example of that
  71.  
  72. You can use following words instead of inurl :
  73.  
  74. intitle:
  75. inurl:
  76. intext:
  77. define:
  78. site:
  79. phonebook:
  80. maps:
  81. book:
  82. froogle:
  83. info:
  84. movie:
  85. weather:
  86. related:
  87. link:
  88.  
  89. All these also help yo find other things then vulnerables.
  90.  
  91. Anyway now I am going to explain you how to use some for finding vulnerability in websites.
  92.  
  93. INTITLE:
  94.  
  95. You can use the intitle to find anything in the title of the website. Which also could be usefull to find downloads or anything else.
  96.  
  97. intitle: index of mp3
  98.  
  99. This is an example to download mp3 songs for free.
  100.  
  101. INURL:
  102.  
  103. The inurl basicly looks for anything after the : in the site urls.
  104.  
  105. inurl:index.php?id=
  106.  
  107. INTEXT:
  108.  
  109. you can find literally everything using intext, you could even use the inurl dorks whit this.
  110.  
  111. intext:"Design & Developed By Seawind Solution Pvt.Ltd."
  112.  
  113. Google will give you all the websites created by IT Masons taht recently has bypass Admin Page Vulnerability in some websites,
  114.  
  115. to try just choose a target from google and add this to the url /adminpanel/
  116.  
  117. And fill username and password like the information below :
  118. Username : '=' 'OR'
  119. Password : '=' 'OR'
  120. and you will get the admin panel of the website some example:
  121. http://www.vulnerablewebsite.com/adminpanel/index.php
  122.  
  123. DEFINE
  124.  
  125. Google will define this massage and will look for what had this error for example,
  126.  
  127. define:"sql syntax error"
  128.  
  129. SITE:
  130.  
  131. Obvious, when we will use it, google will looks for a site .
  132.  
  133. site:wonderhowto.com
  134.  
  135. Google will look for any site related with wonderhowto.
  136.  
  137. PHONEBOOK:
  138.  
  139. It will look for the phone number related to me, so use your victims name or yours instead.
  140.  
  141. phonebook:Mrnakupenda
  142.  
  143. MAPS:
  144.  
  145. Google will look on google maps for your search.
  146.  
  147. BOOKS:
  148.  
  149. Google has an online library store. If you want to find interesting books use this dork.
  150.  
  151. book:java language
  152.  
  153. This will look for any book gogole hase indexed whith java language in it.
  154.  
  155. FROOGLE:
  156.  
  157. Used for froogle search instead of google.
  158.  
  159. INFO:
  160.  
  161. google looks for anything you inputted but only information about string which you have puted next to info: .
  162.  
  163. info:firefox
  164.  
  165. Above dork will show you alot off things about firefox like what is firefox etc.
  166.  
  167. MOVIE:
  168.  
  169. You can find information about movies on google using this dork.
  170.  
  171. movie:watch Transformers online
  172.  
  173. WEATHER:
  174.  
  175. You can find information about weather on google using this dork.
  176.  
  177. weather: 01/08/2015 london
  178.  
  179. RELATED:
  180.  
  181. This will look for anything related to what you have entered next to related: .
  182.  
  183. related:hacking
  184.  
  185. Google responds whith sites about hacking stuffs.
  186.  
  187. LINK:
  188.  
  189. This one will works better instead of only looking in search url, it will also look in the site for urls that possibly are vulnerable.
  190.  
  191. link:index.php?id=
  192.  
  193. This is verry usefull I would say even more then inurl.
  194.  
  195. Vulnerability Approach :
  196.  
  197. Once you search website using above dorks, now its time to check whether the website is vulnerable to SQL injection or not, we simply put in a quote " ' " at the end of the url address.
  198.  
  199. So our site will look like this,
  200.  
  201. http://www.site.com/index.php?id=123;
  202.  
  203. i will explain how to proceed advanced sqli in the next tutorial
  204.  
  205. 4-SOME EXTRAS
  206.  
  207. As far as i researched Google Dorks can help us getting the data of many websites.
  208. These are some Google Dorks which can affect our online business:
  209. site:.com intitle:"Thank You For Your Order" intext:Click Here to Download
  210. site:.com intitle:"Thank You For Your Purchase" intext:Click Here to Download
  211. intitle:Thank you for your Purchase! intext:PLR OR MRR OR Package OR Bonus
  212. inurl:/thankyou.html intitle:Thank you for your order! intext:Click Here to Download
  213.  
  214. 5-CONCLUSION
  215.  
  216. Google dorks are very important, so I advise before you start your exploits against a particular victim the best way is to use google and see what you can find about the victim, and believe me, byt using google, a lot of times I did not even turn on Linux kali, by simple search on google, I found the password of my victim.
  217.  
  218. 6- USEFUL WEBSITES
  219.  
  220. As far as i researched the best website for fresh google dorks is the exploit db website https://ww.exploit-db.com
  221. here you will find fresh google dorks and you can also submits yours.
  222.  
  223. another cool website is http://www.google-dorking.com
  224. you can also mention some websites here
  225.  
  226. to say that the best way to learn is by teaching, so I'm here to share what I know, and as always
  227. I hope you will make correction where I'm wrong, because it is from mistakes that we learn ..
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!