6. Google Hacking

Summary

In this video, the presenter introduces the concept of Google hacking, a method of using Google search engine queries to find specific information online. The presenter demonstrates how to use queries (known as 'Google Dorks') to locate various pages, such as login pages, by leveraging specific search operators like 'inurl' and 'intitle'. The tutorial emphasizes using certain syntax and extensions for more precise searches, with practical examples. Viewers are encouraged to explore resources like exploit DB and to experiment with different Google hacking techniques for learning purposes. The session concludes with an invitation for further questions.

Takeaways

• 😀 Google Hacking refers to using Google search engine queries to find specific information more efficiently, including through advanced techniques.
• 😀 Google queries can be used to search for login pages, particularly using search operators like 'inurl' and 'intitle'.
• 😀 The website Exploit DB offers many Google hacking 'dorks' (search queries) that users can use to perform specialized searches.
• 😀 By customizing Google search queries with domain-specific information (e.g., 'go.id'), users can tailor their search results to local websites.
• 😀 Google Hacking requires knowledge of specific search operators such as 'inurl', 'intitle', 'filetype', and others to filter results effectively.
• 😀 Using search operators like 'inurl' helps in narrowing down results to specific types of pages, such as login pages or admin interfaces.
• 😀 Google Hacking is not just about finding specific pages but understanding how to use the right combination of search operators for more refined results.
• 😀 Search queries can be adjusted further with specific keywords or phrases, such as 'admin' or 'login', to find more relevant pages.
• 😀 Using quotes around keywords in queries makes the search more specific, ensuring results are more accurate.
• 😀 Google Hacking involves experimenting with different queries to locate vulnerabilities or useful information, often for educational or ethical hacking purposes.

Q & A

What is Google Hacking?

Google Hacking is a technique used to search for specific information on the internet by using custom Google search queries that reveal hidden or non-obvious information, which is not typically found through standard searches.

Which browser is used in the tutorial for Google Hacking?

In the tutorial, the Brave browser is used, although the search engine being used is Google.

What is Exploit DB, and how is it related to Google Hacking?

Exploit DB is a website that provides a collection of search queries or 'dorks' for Google Hacking. These queries help users find specific security vulnerabilities or sensitive information on websites through Google searches.

What is the purpose of using Google Hacking queries (dorks)?

The purpose of using Google Hacking queries is to find specific types of information on websites that might be exposed due to poor security practices, such as login pages or sensitive files.

How can you narrow your Google search to specific regions or domains?

You can narrow your search by adding domain-specific keywords, such as using 'go.id' for Indonesian websites, or using a country code to target results within a specific country.

What are some examples of basic search operators used in Google Hacking?

Some basic search operators include 'inurl', 'intitle', 'intext', which allow you to search for specific words in the URL, title, or body text of a webpage respectively.

How does combining Google search operators enhance your search results?

By combining multiple search operators, you can create more refined and specific searches. For example, combining 'inurl' and 'intitle' can help find pages that have both keywords in their URL and title.

Why would you use 'inurl:login' in a Google search?

'inurl:login' is used to find webpages that contain the word 'login' in their URL, which is useful when looking for login pages on websites.

What does 'filetype:pdf' do in a Google search?

'filetype:pdf' restricts the search results to only PDF files. This can be useful for finding specific documents or reports available in PDF format on the web.

How can adding keywords like 'prod' in a Google search query help?

Adding specific keywords like 'prod' can help filter results and find webpages that contain those exact keywords in their content, such as searching for 'prod' in login page titles to identify certain types of admin pages.