Google Hacking Against Privacy学习笔记

Google Hacking Against Privacy
title:Google Hacking 挑战隐私

ps:此文档内容为德国一家国立大学的***写出来的
英语烂翻译不是很好，欢迎查错，但我有把握绝对没有扭曲作者文章中的原意
部分搜索语句中还有"(注释内容)" 查询时候请手动删除
-----------------------

[all]inurl
[all]intext
[all]intitle
site
ext,filetype
symbol: - . * |
boolean Epression: and or not

lang:"c++" define

隐私信息
1.用户名和密码
   "create table" insert into" "pass|passwd|password" (ext:sql | ext:dump | ext:txt)
   "your password * is" (ext:csv | ext.doc | ext:txt)

2. 密匙
   "index of" slave_datatrans OR from_master

3.隐私的密码
   "Begin (DSA | RSA)" ext:key
   "index of" "secring.gpg"

4.经过加密的消息
   -"public | pubring | pubkeysignature | pgp | and | or |release" ext:gpg
   -intext:"and" (ext:enc | ext:axx)
   "ciphervalue" ext:xml


机密信息
那些期望成为机密以杜绝未经授权人查看的信息
data that is expected to stay confidential against unauthorized access

1.聊天日志
   "session start" "session ident" thomas ext:txt

2.私人信件/邮件
   "index of" inbox.dbx
   "To parent directory" inurl:"Identities"

3.机密的目录和文件
   "index of" (private | secure | geheim | gizli)
   "robots.txt" "User-agent" ext:txt
   "this document is private | confidential(机密的) | secret" ext:doc | ext:pdf | ext:xls
   intitle:"index of" "jpg | png | bmp" inurl"personal | inurl:private

4.在线网络摄像头

intitle:"live View/ -AXIS" | inurl:view/view.shtml
   inurl:"ViewFrame?Mode="
   inurl:"MultiCameraFrame?Mode="
inturl:"axis-cgi/mjpg"
intext:"MOBOTIX M1"
   intext:"Open Menu"
   inurl:"view/index.shtml"
  www.undertree.us/allcams.html

Google Video
   supergirl duration:(short | medium | long) is:free



在线设备
inurl:"hp/device/this.LCDispatcher"
intitle:liveapplet inurl:LvAppl
"Please wait ....." intitle:"SWW link"

敏感信息
（那些通常公众于世但它的透露可能会给当事人带来麻烦的信息）
Data which is normally public but whose reveal may disturb its owner

1.位于讨论会，邮局等场所
   inurl:"search.php?search_author=thomas"
   inurl:pipermail "thomas fischer"

2.敏感的目录
   intitle:"index of" inurl:"backup"


3.Web 2.0
   "thomas fischer" site:blogspot.com
   "thomas" site:flickr.com
   "thomas" site:youtube.com


鉴定资料
1.描述标识私人的信息
   姓名，地址，电话，电话分机
   allintext: name email phone address intext:"thomas fischer(人物)" ext:pdf
   Twiki inurl:"View/Main" "thomas fischer"

   个人简历
   intitle:CV OR intitle:Lebenslauf "thomas fischer"
   intitle:CV OR intitle:Lebenslauf ext:pdf OR ext:doc

2 用户姓名
   intitle:"usage Statistics(统计表) for" intext:"Total Unique Usernames"


Examples Of Google Hacking 1
不可靠程序透露的信息
"php version" intitle:phpinfo inurl:info.php

程序中含有SQL注入漏洞并且路径可以修改弱口
"advanced guestbook * powered" inurl:addentry.php
intitle:"View img" inurl:viewimg.php

安全扫描报告
"Assessment report" "nessus" filetype:pdf


数据库程序和错误文件
"Welcome to phpmyadmin ***" "running on * as root@*" intitle:phpmyadmin
"mysql error with query"

============================================================================
countermeasure（对策）

Use automatic tools to check your system(e.g. gooscan,sitedigger,goolink)
Install and manage Google Honeypot

sitedigger

free from FoundStone Company
support Both GHD and foundstone's own hacking database

for a given host,all etries in the database are queried


===================================================
References


google hacking database  
http://johnny.ihackstuff.com


google hack honeypot project
http://ghh.sourceforge.net


goolink -security scanner


www.ghacks.net/2005/11/23/goolink-scanner-beta-preview/


siteDigger c2.0 -information Gathering Tool
http://www.foundstone.com
FileSearching
www.filesearching.com

gooscan-google security scanner

http://johnny.ihackstuff.com
=====================================================
Please use this information for no other reason

Online Cameras

inurl:"viewrframe?mode=motion"(Requires ActiveX)
intitle:"snc-rz30 home" (requires activeX)
intitle:"WJ-NT104 Main"
inurl:LvApp1 intilte:liveapplet(great pan and zoom)
intitle:"Live Vew / -AXIS"
inurl:indexFrame.shtml "Axis Video Server"

查看从Google中注销的网站

思路:找到记载这些网站的robots.txt进行筛选
"robots.txt" "disallow:" filetype:txt

Front Page user logins
使用此字符串进行搜索，你可以获取很多登陆密码和账户，搜索到的的这些文件中密码和账户都未进行过加密
inurl:_vti_pvt "service.pwd"

Php Photo Albums
此搜索算法允许你察看PHP用户上传倻面相册，并且你可以上传你自己的照片到里面
   inurl:"phphotoabum/upload"

   VNC User info
   通过虚拟机绕过密码验证使用VNc Brute强行破解密码需求这一验证强行的登陆别人的电脑
   "vnc desktop" inurl:5800

   Network Printers
   察看公网的共享打印机，你可以查看他们的状态，设置 ，你还可以用他们中的一些来打印自己的东西
    inurl:"port_255" -htm
   
    php Administrator Access
    PHPMyAdmin是用户操控网站数据库的一个账户，你可以用它来访问那些安全系数比较低的网站，通过这个账户你可以操控他们的网站
    intitle:phpMyAdmin "Welcome to phpMyAdmin ***" running on * as root@*"