A, Google Hacking syntax:
- intext: the text content of a web page as a character in the search criteria
- intitle: the web page title as a character in the search criteria
- inurl: search characters we specify exists in the URL
- link: for example search: inurl: www.4ngel.net can return all done and www.4ngel.net link URL
- site: example: site:. www.4ngel.net returns all relevant and 4ngel.net this station URL
- filetype: search for specific types of files, for example, enter: filetype:. doc will return all files ending in doc URL
- Some basic information about the specified site: info
- cache: search in google cache on some elements, like the Internet Archive
- Search for a definition of the words: define
- stocks: search for a company's stock market information.
- phonebook: Search Directory: will return a list of US street address and phone number, no doubt to the mining of personal information hackers brought great convenience. But also can get comprehensive information on housing,
- inanchor: chain link search: doing the site is sometimes used to anchor links to other parts of a page, so easy to navigate and positioning. That content anchor link is usually the beginning of an important chapter or content of web content, so that their search also better reflect the subject matter of the page, improve the accuracy of search results. For people who are familiar with creating web pages, you can see there is an anchor of HTML code from web page source code
- related: Links: Find a page structure similar content pages, "related" to search for similar content structure page. related syntax certain type of information is very useful to find, such as when you search a library Web site when it will come out a lot with related library's website
Two, CDN
Summary:
CDN: CDN: refers to a through the Internet computer network systems connected to each other, using the server closest to each user, faster and more reliably transmit music, pictures, videos, applications and other files to the user to provide high performance, scalability, and cost of the network contents to the user.
Advantage:
1.CDN (Content Delivery Network) The total carrying capacity can be bigger than a single backbone maximum bandwidth
2. The content distribution networks are typically assigned close, relatively smooth server node to transmit data to a user. Although the distance is not an absolute factor, but doing so can improve performance as much as possible, the user will feel more smooth.
3. When a server fails, the system will call other neighboring regions Server service, thereby providing close to 100% reliability.
Bypassing CDN
1, internal mail Source: General mail systems internally, no CDN is parsed by using the destination site mailbox registration, password recovery features such as RSS feeds or check e-mail, look for the message header of the mail server domain name IP, ping the mail server domain name, you can get the real IP targets.
2, foreign request: In many cases of domestic CDN foreign coverage was not very extensive, therefore you can use this feature to be detected. Access by foreign agents will be able to see the real IP, or through foreign DNS resolution, you may be able to get the real IP.
3, C segment inquiry
4, query DNS records: general site from start to deploy using cdn has a process, if a longer period, then you can get the source station ip through such historical records for such analytical way, view a history of IP and domain name binding , there may be the use of pre-recorded CDN.
5, cyberspace search engine: Shodan, FOFA, zoomeye
Three, DNS
Summary:
DNS: Domain Name System: is an Internet service. It acts as a distributed database of domain names and IP addresses will be mapped each other, it can make it easier to access the Internet. DNS uses TCP and UDP port. Currently, for every level domain name length limit is 63 characters, the total length of the domain name can not be more than 253 characters.
DNS query:
dirs：http://www.dirs.cn/
dnsdb：https://www.dnsdb.io
viewdns：https://viewdns.info/