Professional Documents
Culture Documents
Google Hacking
Nam
e : SUBHANKAR DAM
Roll no. : 11916051028
Semester : Seventh.
Dept : Electrical Engineering
ACKNOWLEDGEMENT
1
My sincerest appreciation must be extended to my seminar guide, senior
faculty of Electrical Engineering Department (EE) Mr. J.B.Basu without
whom my seminar presentation would have been impossible, also express
my thanks for providing me with the opportunity to present a seminar on
this field.
Subhankar Dam
Roll No. :
11916051028
Year : 4th
(Seventh semester).
Dept. :
Electrical Engineering
2
Contents
1. INTRODUCTION:
2. So, who is a Hacker Anyhow?
3. What is Google really About?
4. Anatomy of a Google Search:
5. What can Google Search
6. What’s more to Google than Searching the Web?
7. Google Boolean Operator
8. Preferences:
9. ADVANCED SEARCH OPERATORS:
10.Create Your Own Google Search Engine:
11.Gooscan:
12.More Google Fun:
13.Googlism:
14.Froogle:
15.Conclusion:
16.Links and References
3
INTRODUCTION:
‘Hacking’ and ‘Hacker’ are terms that generally tend to have a negative
effect on people. Most people straightway start associating ‘Hacker’ with
computer criminal or people who cause herm to systems, release viruses etc.
And Hackers do not blame them for holding such a negative opinion.
Nowadays the media has been wrongly and outrageously referring to
computer criminals as ‘Hackers’. They fail to recognize the fact that
criminals and hackers are two totally distinct terms and are not associated to
each other whatsoever. People have wrong notions and for reasons not
justified at all, they have a attitude and utter dislike for ‘Hackers’ and
persons associated with ‘Hacking’.
Today, Internet Search Engine are probably the most widely used
means for information retrieval. They are used to find all kind of information
from finding facts, online vendors, looking for entertainment sources to
malicious activities like looking up recipes for weapons or bio hazard by
terrorists. Moreover, such engines are freely available to all. At such a stage,
it is essential to analyze what kind of information in cyberspace. Today
search engines are highly automated and have increased capabilities to
locate and index information.
Three top signs that give away the fact that the person is not a real hacker
are:
1. He uses weird handles (name) like Avenger, dark Cloud, Skull etc.
However, these signs are not necessarily fool proof.
2. He boasts about how much he knows a sure sign of a person who
lacks real knowledge.
3. He flames newbie of people who ask questions, instead of helping
them learn.
Hackers are usually nice people from whom we can learn a lot. Real Hackers
are normally always helpful and really really intelligent and knowledgeable.
We see, hacking is about knowledge. Hackers are those intellectual people
who have the extra bit of information. They know of things normal people
would only dream of.
5
What is Google Really About?
Let’s start straightway by asking Google itself, what is Google?
Goooooooooogle
“Googol” is the mathematical term for a 1 followed by 100 zeros. The term
was coined by Milton Sirotta, nephew of American mathematician Edward
Kasner, and was popularized in the book, Mathematics and the Imaginations
by Kasner and James Newman. Google’s play on the term reflects the
company’s mission to organize the immense amount of information
available on the web.
6
Anatomy of a Google Search:
Process:-
1. The web server sends the query to the index server. The content inside
the index servers is similar to the index in the back of a book. It tells
which pages contain the words that match any particular query term,
2. The query travels to the doc server, which actually retrieve the stored
documents. Snippets are generated to describe each search result.
3. The search results are returned to the user.
7
What can Google Search
With the mention of Google comes to one’s mind the Google Search
Page, with Google written as colored text. Undoubtedly this is the landmark
of Google, but there is a lot, lot more. Some services like Gmail, Google
Earth, Orkut are rapidly gaining popularity but Google means “Googol” and
it true sense talk about infinite possibilities.
Integrated Calculator
Wished there was something simpler than looking for the calculator on the
desk or under programs? Discover Google Calculator straight from the
search field.
8
Book Search:
Allows you to search the full text of books and also collect information
about where to buy or borrow them from.
Currency Conversion:
9
Image Search:
1. Go to image.google.com.
2. Enter the subject of image in the search field.
3. So, how does our new wallpaper look? LOL!
Local Search:
Google Local enables us to search the entire web for just those stores and
businesses in a specific neighborhood. Include a city or zip code in our
search and Google displays relevant results from that region at the top of our
search results.
1. Go to www.google.com.
2. Enter “pizza Siliguri” into the search field.
3. The result for various joints come up, mentioning loads details, which
are very much self explanatory,
4. Enjoy your pizza,
The results not only give the addresses, but also provide with the maps as to
get there and also their phone number.
Movies:
To find reviews and show times for movies playing near you, type “movies”,
“showtimes” or the name of the current film into the Google search box.
Music Search:
Find information about artist, songs, albums and places to buy the music you
are looking for. Google will display user reviews, song titles, stores to
purchase the music and other useful information related to that artist at the
top of your search results.
1. Go to www.google.com.
2. In the search field type in “Summer of 69”.
3. Google displays a personalized caption for Summer of 69 offering all
types of in formations!
Phonebook:
1. Go to www.google.com.
2. Type the name followed by the location.
3. Press Enter.
4. We get few hundred of person of that name with the residence. If we
know what area he/she lives in, it will not remain difficult.
Q & A:
11
Web Page Translation:
The Google service allows you to translate websites or any particular text
to and from a wide list of languages. This goes a long way to bridging the
language gap. Really it is amazing.
Let’s consider an example of a Brazilian website, that of a college. i.e
http://www.virtual.unifesp.br/home/uv.php.
12
Google Boolean Operator:
AND or (+):
This Operator can be used to force Google to search for keywords Google
considers as ‘Stopwords’.
Eg:- Date+of+birth+and+place+of+birth+of+Rabindranath+Tagore
OR or ( | ):
This operator instructs Google to find pages that contain either of the
terms separated by an “OR” or a “|” sign.
NOT or (-):
13
This operator can be used to explicitly ask Google to search for pages
without the keywords preceded by a “NOT” or a (-) sign.
This is another very useful operator; it can be used to find pages the
contain your search term but do not include some other term.
Using Wildcard:
This operator asks Google to search for the word immediate following it,
as well as its synonyms. This is especially useful when you are looking for
a particular type of data, not caring to search all its synonyms differently.
For example: To find all sorts of help information for the software like
NMap, you may using a string like “~help nmap”. This will return pages
searching for synonyms of help too, like tutorial, guides, etc.
Often, searches are not interrupted by search engines in the way they
have been entered; the same goes for Google. The following points should
be kept in mind while making a Google search.
1. Case sensitivity: Google searches are not case sensitive. This means
that whatever you search for “Hacking” or “HaCkInG” no different in
the search results returned.
2. Stopwords: Google automatically excludes common words from the
search. Such words are better known as “Stopwords”. They are
considered when used alone, but lose significance when they are
grouped with other not so common words.
14
Examples of these are: a, about, and, as, and, at, are, be, by, from, how,
I, in, is, it, of, that, the, this, to, we, what, when, where, which, with.
Preferences:
15
On clicking it the following page opens up.
16
So far we have discussed the features of a Google search that are actually
open and publicized. Now we are move on to advanced operators which are
not so publicized and are only used internally by Google while doing an
advanced search. Specifically, these operators allow you to define a region
of a web page which will be searched rather than searching the full content
of the web. Some example are: just searching within the URL, the title that
shows up on top of your window when you open a page, searching for
specific types of files, pages created within a specific time period, etc.
Intitle, Allintitle:
These operators allow you to search the title of web pages. The title is that
shows up on top of the window when you open the web page. It is actually
the text tagged by the “title” HTML tag.
Inurl, Allinurl:
– Inurl: search_term
– Find search term in a Web address
– Allinurl: search_term1 search_term2 search_term3
– Find multiple search terms in a Web address
– Examples: Inurl: “log in”
Allinurl: admin password
Filetype:
Intext, allintext:
This operator does what Google does by default. It searches for the text of
web pages. But there’s one difference: using this operator you can instruct
Google to search in the text of pages all right but not search the other places,
like the title or in the URL usually is present in the main body of the page
too, thus, limiting the direct use of this operator.
– Intext: search_term
– Find search term in the text body of a document.
– Allintext: search_term1 search_term2 search_term3
18
– Find multiple search terms in the text body of a document.
– Examples:
Intext: Administrator login
Allintext: Administrator login
site:
What this operator does in brief is that it builds a custom search engine,
wherein you can define which site Google searches for your keywords.
This is the keyword which is used to launch attacks specific to a particular
organization by restricting all smart searches just to the domain you are
interested in.
This keyword can be used to find out what a particular site think about a
particular keyword. For example, while searching for news, you might
consider trying searching for the news theme limiting it to the websites to
different news providers in different searches.
– Site: Domain_name
– Find Web pages only on the specified domain. If we search a
specific site, usually we get the Web structure of the domain
– Examples: www.microsoft.com
link:
This operator is used to find pages that have hypertext links to the specified
URL. This is useful in finding out the so-called “friends” of a page. Often it
is useful to know which pages have a link to a specified URL; this can be
used as information for social engineering attacks, or finding way through
these “friends” when direct attacks fail.
– Link: URL
– Find the Web pages having a link to the specified URL
– Examples:
Link: www.google.com-site:google.com
daterange:
You can use this operator to locate pages indexed by Google within a certain
date range. Every time Google crawls a page, this date is updated. Often
19
when you are looking for updated information, and are flooded with other
old but popular pages, this operator does the trick.
Syntax: datarange:startingdate-enddate
define:
Syntax: define:word
Example: define: circuit breaker.
related:
This operator also works on a URL. It displays those pages that Google
considers are similar to the URL entered.
Syntax: related:URL
Example: Look for pages related to www.google.com.
Such a result displays about 31 other popular search engines.
Uncomplicated and sweet.
info:
20
This keyword returns the information Google stores about a particular URL.
This information is usually provide when a site is submitted to Google,
specifying what the site contains or is automatically entered into by Google
by its various algorithms.
Syntax: info: URL
Example: info: www.microsoft.com
insubject:
This operator allows you to search within the post’s subject lines. Usually,
any good post will have a subject reflecting its content.
cache:
This keyword allows you to view a copy of a page Google maintained while
crawling the web. This keyword can help you stay anonymous! Google takes
a snapshot of each page examined as it indexes the web and caches these as
a back up in case if original page is unavailable If you click on the cached
link, you will see the web page as it looked when Google indexed it. This
can be used to look up pages which may not be presently up, whose server is
down or pages to which you don’t have access to.
But this is not blocked for Google. And so for us! Here’s how you can view
such blocked or unavailable pages.
1. Go to www.google.com
2. Enter the URL of the page you want to view. Here,
“http://www.hinhuhumanricht.org”
3. If the page has been crawled by Google it will be displayed in the
search results, and a “Cached” will appear below.
4. Click on the cached link. And the page opens up.
This technique can be used for anonymous surfing. That is surfing without
letting the site to know who you are an where you are from.
21
We will not be able to view the multimedia contents of the cached page in
most cases, as the whole page is not cached by Google. The ached link will
be disappeared for sites that have not been indexed, as well as for sites
whose owners have requested that their content should not be cached.
Maps:
Google map and Google Earth are literally changing the way we visualize
the world. It is finally making sense of the term “global village”. Together
they offer numerous options to zoom into nearly and place in the world, find
directions to and from places, locate businesses in an area, and recently even
locate accommodation in a city.
Google Maps has the ability to recognize an address typed into its search
field. Here’s an example.
1. Go to www.google.com.
2. We try finding the map to Siliguri Institute of Technology. We type in the
address we find from the college website. i.e. “Siliguri Institute of
Technology, Siliguri”.
3. Press enter.
4. We select the Google Maps link and the map for our location comes up.
5. Using the options on the top right namely Map, Satellite and Hybrid and
the options to zoom and move on the left, we get a close image a Princeton
as shown below.
22
Create Your Own Google Search Engine:
Google has recently come out with another feature. This allows you to create
your own search engine. Options are available to specify around which
keywords you want to centre your searches, enter the sites which you wish
to search, and more. Such a customised search engine can be used to carry
out penetration testing specific to a site.
Link: http://google.com/coop/cse/
Filling in all these details results in Google providing you with a home pge
where you can use your own custom-made search engine to search the web.
Gooscan:
Link: http://johnny.ihackstuff.com/
Ever wished you could maintain a file system similar to Windows on your
GMail Account? Yes, it is possible and that too with the convenience of a
hard disk drive. So store your files online, share passwords and share data or
23
music or friends with ease. And also have the option to directly email it to
anyone as after all it’s stored in your GMail Account.
1. Go to http://video.google.com/
2. Open the video of your choice.
3. While the videos are being loaded, copy and paste the following code into
the address bar. Press Enter.
4. You will get a prompt to download the video.
5. Click on save.
Code:
Javascript:if(document.getElementById(‘macdownloadlink’)!=null)
{window. Location.href=document.getElementById
(‘macdownloadlink’)}else{alert(‘Go to Google Video to download videos as
AVI.’)};
Google Romance:
Google has been coming up with many hoaxes like offering jobs on the
moon, introducing a new informative drink called Gulp, and others. Even
24
Gmail appeared to be a hoax, until people actually got Gmail Accounts. The
latest in 2006 was starting a new service called Google Romance.
Googlism:
Want to know what Google thinks of you or just about anything else? Check
out www.googlism.com . Options are available to search for anything as
Who? What? Where? When?
Froogle:
Froogle is a pun on the word frugal, which means thrifty. And the name of
the company, Google. Froogal is pronounced the same as frugal.
Steps:
1. Go to froogle.google.com.
2. Type in the item name, here “ipod 30gb”
3. Click on “Search Froogle”.
4. We can see the different prices offered by different vendors, and we
also see various convenient filters on the top.
5. Now when you have googled yourself to finding the best price, let’s
locate the nearest shop selling it.
6. Just enter your zip code, city or state. Here we enter “Siliguri”. The
pages will open up, also constituting a map, showing the exact
locations of the shops!
Froogle is in its Beta stages, so it’ll still take some time to cover every
location, zip code and sellable item in the world!
25
This can be used to find cheap and interesting gifts for someone’s
girlfriend or boyfriend or whoever!
Conclusion:
1. www.google.com/apis
2. www.google.com/remove.html
3. http://johnny.ihackstuff.com/
4. “Google Hacking for Penetration Tester” by Johnny Long.
5. “Google Hacking” by Ankit Fadia.
6. http://www.i-hacked.com/content/view/23/42/
7. “An Unofficial Guide To ETHICAL HACKING” BY Ankit FAdia.
26