~/talk

Google Hacking: The Amazing Next Door

TalkinRussianat QA Fest 2014 · on Tuesday, 2014-11-04· [security]
links:none on file
slides:none on file

Explains Google Hacking: using advanced Google queries to find sensitive files and information about web applications that aren’t meant for public access. Describes specific query techniques to discover security holes and demonstrates how to perform these searches, and offers defensive measures to protect applications from such search-based attacks.

AI-written summary · about

  1. 0:00Google hacking intro
  2. 2:11How Google search works
  3. 5:28Google operators for vulns
  4. 7:37Google cache for old data
  5. 9:26Finding logins and passwords
  6. 12:18User login search methods
  7. 13:42Password and sensitive data search
  8. 15:49Admin interface vulns
  9. 17:56Dangerous config files
  10. 21:32Finding logs and databases
  11. 22:56Directory listing vuln
  12. 24:23Google Dorks queries
  13. 25:04Protection from Google hacking
  14. 25:45Robots.txt directory protection
  15. 26:51Data leak via robots.txt
  16. 27:35Passwords and authorization
  17. 28:20Server default risks
  18. 29:02Manual vs automated testing
  19. 30:06Google search tips
  20. 30:51Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.