Google Hacking for Penetration Testers, Volume 1

by Johnny Long

Google, the most popular search engine worldwide, provides web surfers with an easy-to-use guide to the Internet, with web and image searches, language translation, and a range of features that make web navigation simple enough for even the novice user. What many users don't realize is that the deceptively simple components that make Google so easy to use are the same features that generously unlock security flaws for the malicious hacker. Vulnerabilities in website security can be discovered through Google hacking, techniques applied to the search engine by computer criminals, identity thieves, and even terrorists to uncover secure information. This book beats Google hackers to the punch, equipping web administrators with penetration testing applications to ensure their site is invulnerable to a hacker's search.

Penetration Testing with Google Hacks explores the explosive growth of a technique known as "Google Hacking." When the modern security landscape includes such heady topics as "blind SQL injection" and "integer overflows," it's refreshing to see such a deceptively simple tool bent to achieve such amazing results; this is hacking in the purest sense of the word. Readers will learn how to torque Google to detect SQL injection points and login portals, execute port scans and CGI scans, fingerprint web servers, locate incredible information caches such as firewall and IDS logs, password databases, SQL dumps and much more - all without sending a single packet to the target! Borrowing the techniques pioneered by malicious "Google hackers," this talk aims to show security practitioners how to properly protect clients from this often overlooked and dangerous form of information leakage.

*First book about Google targeting IT professionals and security leaks through web browsing.

*Author Johnny Long, the authority on Google hacking, will be speaking about "Google Hacking" at the Black
Hat 2004 Briefing. His presentation on penetrating security flaws with Google is expected to create a lot of buzz and exposure for the topic.

*Johnny Long's Web site hosts the largest repository of Google security exposures and is the most popular destination for security professionals who want to learn about the dark side of Google.

Genres: Hackers, Technology, Reference, Computers, Nonfiction, Computer Science, Google

448 pages, Paperback

First published January 1, 2004

About the author

Johnny Long is a Christian by grace, a professional hacker by trade, a pirate by blood, a ninja in training, a security researcher and author. He can be found lurking at his website (http://johnny.ihackstuff.com). He is the founder of Hackers For Charity(http://ihackcharities.org), an organization that provides hackers with job experience while leveraging their skills for charities that need those skills.

Reviews

[Edwin · Rating 4 out of 5]

Must read for searchers. This is about using Google beyond advanced search. This is super advanced search

[Jay · Rating 4 out of 5]

Excellent information, a little dry but hard not to have that in an essential programming book. This will help all readers get more specific results and if you want to play around with it and find things deeply hidden there is that as well. Great book.

[Tab · Rating 5 out of 5]

Great book and perfect for people looking for a deeper dive into the information dumping ground of google. It's scary the information that can be pulled up just by following many of the techniques described in the book and you really don't need to be overly technical. I've uncovered some fantastic information. ;-)

[Petett2011 · Rating 4 out of 5]

Excellent book, after 7 years many of these techniques still work. It is not difficult to find some scary information in the Google megasphere.

FYI - Exploit-DB has re-established the initial Google Hackers Database

[Chris · Rating 5 out of 5]

Great book by one of my favorite speakers, Johnny Long. This is much more than stupid pet tricks with Google. Now if Johnny would just publish his Hacking Hollywood style presentation!

[Imran]

High octane content. one of my all time favourites

[David · Rating 4 out of 5]

Getting old now, but the concepts are still useful.

[Pedro Marcano Delbert · Rating 5 out of 5]

1321312313

[Kati Ais-ł · Rating 5 out of 5]

kkh

[BBFlyer · Rating 4 out of 5]

interesting introduction to hacking using the Google search engine. last chapter has some suggestions for securing Web sites.