Google Hacking Tutorial BASICS 😎 BY RK
Raghav dixit: RK TITANS GROUP
Google Hacking Tutorial SQL Injection Basic
Type : Tutorial
Level : Easy
Purpose : As a website owner you can also aware with this kind of attack to your web server
Why I wrote this tutorial about Google Hacking is because there are some people keep messaging me about how to perform Google Hacking…
A lot of people that learn about hacking they just think that hacking was going through a webserver or computer and make defacement or stealing data or erase the victim disk drive by running rm -rf, etc….but I told you that the purpose isn't that….because this method also can be used to secure your website from bad hackers (you can view the countermeasure part below).
If you just think that it's really cool if you have defaced some website and then put your name on its website such as "Hacked by v4L" and then put the screenshot as a profile picture of your facebook for pride(I've saw this kind of guys…ROFL 🙂 ) I just suggest forget doing this kind of stupid things, before the interpol caught you 🙂
Google hacking doesn't mean that you can hack into another system instantly(even sometimes you can get through it instantly 😛 ), because Google Hacking is a trick to gain and reveal some sensitive information..
While you're in Google, it's impossible you find specifications about program that running by someone computer(except he/she wrote it on facebook status or he wrote it somewhere on the net 😛 ), because Google is a Web Search Engine so Google will only listed a computer/server that act as web server.
Do not think too much about complex hacking steps….because before you move to a higher level you need to know the basic things. In this tutorial actually I will wrote the simple basic thing to perform a Google hacking and also perform a very really basic SQL injection like ' OR 1=1;– …
I believe that some of you that read this tutorial even have a great skill in SQL scripting so you can fit it with your needs.
Okay let's start….
intitle : The intitle operator is used to search websites only within the <title></title> tags, or the actual page title as defined by the website’s author.
inurl : is used to search within a site’s URL itself. This is very useful if you are familiar with a URL string or with standard URL strings used by different content management systems. We will try to find the administrator log in page address by using some of Google parameter above. Usually the programmer will use word "Administrator Login" , "Admin Login", Super User", "Owner Login", etc…etc as the title of administrator page authentication. Google Hacking Tutorial + SQL Injection (Basic)
As you can see from picture above there's about 4,310 search result for that query, but you can narrowing your search result by change some parameter, such as change the .com into .nz , .com.au, .co.id, .com.my, .sg, and many more….
While I'm searching about Google Hacking material on the internet, actually I found about more than 10 website that vulnerable with basic SQL injection above…
see example below
Before :
Google Hacking Tutorial + SQL Injection (Basic)
After :
Google Hacking Tutorial + SQL Injection (Basic)
Countermeasure :
1. For webmaster, put this script <meta name="robots" content="noindex, nofollow"> in your web page between <head></head> to prevent the search engine crawler indexing your private page
2. Still for webmaster, you also can create or modify a robots.txt file to disallow a user agent crawling some of your web server folder. example:
User-agent: *
Disallow: /administrator/
Disallow: /user/
Disallow: /modules/
3. Again for programmers, filter the user input and make sure the data was safe to execute by server.
Just that….hope it's useful 🙂
IF YOU HAVE ANY QUESTION PLEASE FEEL FREE TO CANTACT US
Google Hacking Tutorial SQL Injection Basic
Type : Tutorial
Level : Easy
Purpose : As a website owner you can also aware with this kind of attack to your web server
Why I wrote this tutorial about Google Hacking is because there are some people keep messaging me about how to perform Google Hacking…
A lot of people that learn about hacking they just think that hacking was going through a webserver or computer and make defacement or stealing data or erase the victim disk drive by running rm -rf, etc….but I told you that the purpose isn't that….because this method also can be used to secure your website from bad hackers (you can view the countermeasure part below).
If you just think that it's really cool if you have defaced some website and then put your name on its website such as "Hacked by v4L" and then put the screenshot as a profile picture of your facebook for pride(I've saw this kind of guys…ROFL 🙂 ) I just suggest forget doing this kind of stupid things, before the interpol caught you 🙂
Google hacking doesn't mean that you can hack into another system instantly(even sometimes you can get through it instantly 😛 ), because Google Hacking is a trick to gain and reveal some sensitive information..
While you're in Google, it's impossible you find specifications about program that running by someone computer(except he/she wrote it on facebook status or he wrote it somewhere on the net 😛 ), because Google is a Web Search Engine so Google will only listed a computer/server that act as web server.
Do not think too much about complex hacking steps….because before you move to a higher level you need to know the basic things. In this tutorial actually I will wrote the simple basic thing to perform a Google hacking and also perform a very really basic SQL injection like ' OR 1=1;– …
I believe that some of you that read this tutorial even have a great skill in SQL scripting so you can fit it with your needs.
Okay let's start….
intitle : The intitle operator is used to search websites only within the <title></title> tags, or the actual page title as defined by the website’s author.
inurl : is used to search within a site’s URL itself. This is very useful if you are familiar with a URL string or with standard URL strings used by different content management systems. We will try to find the administrator log in page address by using some of Google parameter above. Usually the programmer will use word "Administrator Login" , "Admin Login", Super User", "Owner Login", etc…etc as the title of administrator page authentication. Google Hacking Tutorial + SQL Injection (Basic)
As you can see from picture above there's about 4,310 search result for that query, but you can narrowing your search result by change some parameter, such as change the .com into .nz , .com.au, .co.id, .com.my, .sg, and many more….
While I'm searching about Google Hacking material on the internet, actually I found about more than 10 website that vulnerable with basic SQL injection above…
see example below
Before :
Google Hacking Tutorial + SQL Injection (Basic)
After :
Google Hacking Tutorial + SQL Injection (Basic)
Countermeasure :
1. For webmaster, put this script <meta name="robots" content="noindex, nofollow"> in your web page between <head></head> to prevent the search engine crawler indexing your private page
2. Still for webmaster, you also can create or modify a robots.txt file to disallow a user agent crawling some of your web server folder. example:
User-agent: *
Disallow: /administrator/
Disallow: /user/
Disallow: /modules/
3. Again for programmers, filter the user input and make sure the data was safe to execute by server.
Just that….hope it's useful 🙂
IF YOU HAVE ANY QUESTION PLEASE FEEL FREE TO CANTACT US
Comments
Post a Comment
Please do not Enter any spam comment