Table of contents
Introduction to Google Hacking
Introduction to Google Hacking
Use Google search engine or other Google applications to find security holes in website configuration or code with specific syntax. The characteristics are: fast - the search engine prepares a large amount of processed information in advance for retrieval; accurate - the search engine performs various filtering measures such as relevance and importance; concealment - searches and queries are carried out through the database of the search engine ;cache - holds sensitive information that no longer actually exists.
Basic usage of Google Hacking
1.inurl: Used to search for URLs contained on web pages. This syntax is useful for finding searches on the web, help, etc.
2.intitle: Limit the title of the web page you search for.
3.intext: Search the text content contained in the web page (that is, ignoring the title, URL and other text).
4.site: The domain name that limits your search scope.
5.allintitle: Search all the web pages whose keywords form the title.
6.link: Search all the web pages whose keywords form the title.
7.filetype: The suffix or extension of the search file.
The specific application of Google Hacking
1. Search for websites that contain admin characters in their URLs: inurl:admin
2. Search for websites that contain login characters in their URLs: inurl:login
3. Search for websites that contain the characters site:eu.cn inurl:admin: site:edu.cn inurl:admin
4. Search for websites that contain pdf documents in the URL: site:offcn.com filetype:pdf
5. Search for websites that must contain "Shanghai" in the title: intitle:Shanghai
6. inurl: Login admin will return the web page with Login and admin in the url
7. Go back to all pages that contain links to www.baidu.com. link:www.baidu.com
8. Return to a website with a similar layout to the website page. related:www.offcn.com
9. Query the website that may have SQL injection. Search for sites with php?id= characters in the URL: inurl:php?id=
Google Hacking Repository
https://www.exploit-db.com/google-hacking-database