|
Google Hacking for Penetration Testers, Volume 2 | 
enlarge | Author: Johnny Long Publisher: Syngress Category: Book
List Price: $49.95 Buy New: $30.99 You Save: $18.96 (38%)
New (29) Used (8) from $29.99
Avg. Customer Rating: 24 reviews Sales Rank: 116533
Media: Paperback Edition: 1 Number Of Items: 1 Pages: 448 Shipping Weight (lbs): 2.5 Dimensions (in): 9.2 x 7.5 x 1.4
ISBN: 1597491764 Dewey Decimal Number: 005 EAN: 9781597491761 ASIN: 1597491764
Publication Date: November 2, 2007 Availability: Usually ships in 1-2 business days Shipping: Expedited shipping available Shipping: International shipping available Condition: Paperback. Perfect condition. Never used. Great book.
|
| Also Available In:
|
| Similar Items:
|
| Editorial Reviews:
Product Description A self-respecting Google hacker spends hours trolling the Internet for juicy stuff. Firing off search after search, they thrive on the thrill of finding clean, mean, streamlined queries and get a real rush from sharing those queries and trading screenshots of their findings. I know because Ive seen it with my own eyes. As the founder of the Google Hacking Database (GHDB) and the Search engine hacking forums at http://johnny.ihackstuff.com, I am constantly amazed at what the Google hacking community comes up with. It turns out the rumors are truecreative Google searches can reveal medical, financial, proprietary and even classified information. Despite government edicts, regulation and protection acts like HIPPA and the constant barking of security watchdogs, this problem still persists. Stuff still makes it out onto the web, and Google hackers snatch it right up. Protect yourself from Google hackers with this new volume of information. Johnny Long
Learn Google Searching Basics Explore Googles Web-based Interface, build Google queries, and work with Google URLs. Use Advanced Operators to Perform Advanced Queries Combine advanced operators and learn about colliding operators and bad search-fu. Learn the Ways of the Google Hacker See how to use caches for anonymity and review directory listings and traversal techniques. Review Document Grinding and Database Digging See the ways to use Google to locate documents and then search within the documents to locate information. Understand Googles Part in an Information Collection Framework Learn the principles of automating searches and the applications of data mining. Locate Exploits and Finding Targets Locate exploit code and then vulnerable targets. See Ten Simple Security Searches Learn a few searches that give good results just about every time and are good for a security assessment. Track Down Web Servers Locate and profile web servers, login portals, network hardware and utilities. See How Bad Guys Troll for Data Find ways to search for usernames, passwords, credit card numbers, social security numbers, and other juicy information. Hack Google Services Learn more about the AJAX Search API, Calendar, Blogger, Blog Search, and more.
|
| Customer Reviews: Read 19 more reviews...
Superb Book, great writing style and plenty of useful examples February 8, 2008 1 out of 1 found this review helpful
While Google is for most of us just a search engine, for hackers it is a great tool to gather information and present the attack vector and first of steps against your organization.
The opposite side of Google as a search engine is that a lot of networks and organizations out there have no idea what kind information (classified and potentially dangerous) is presented out on the internet and how data leakage is accomplished that way. This leakage give a significant amounts of password files, confidential information, and configuration data and so on that can be easily found with ingenius queries.
After you read Google Hacking, volume 2, the real power and potential danger of Google is clearly understood. Author Johnny Long does a superb job by presenting insight information on how -not so fiendly - people out there but also penetration testers can use this knowledge and easily harvest information that has been gathered by the Google engine. He's wirting is great and keeps me interested the whole book and besides that he gives away plenty of interesting examples on how to built your own query.
So really worth buying!
Rob Faber , CISSP, CEH, MCTS, MCSE Sr. Information Security Consultant The Netherlands
Superior Text February 6, 2008 1 out of 1 found this review helpful
In reading through this book, I found a wealth of information that was quite useful, most notably the links to all of the other tools, sites and techniques available on the web. I am an internal corporate web application pen tester for a financial institution and will certainly use the techniques described in this text in our next vulnerability assessment. I do have one complaint however in that the corresponding website for the text [...] does not have the code from the book. Overall a great book and a fun read. Highly recommended.
google, hack, hacking January 19, 2007 0 out of 2 found this review helpful
Very informative book, I've been using some of the knowledge I got in the book to improve my searches as well as to test the security of some of my company's web pages.
Great starting Point for New or Intermediate- Reference for advanced November 8, 2006 1 out of 5 found this review helpful
You name it someone may have left it in the wrong place. This text is a good reference for everyone interested in information security and honing their research abilities to a razor's edge. As Obijan says "know your target- get inside of his mind." Experts might scoff, but a handy reference. I use it to nail airline miles, among other things...in all honesty I have found some wild things using the standard techniques- really you need a guide on unraveling people's stupidity or, if you are feeling rather viscious lay a trap and hook it with cheese that has unexpected side effects. Fun for the whole family!
got the warm-fuzzy i was looking for... August 22, 2006 3 out of 4 found this review helpful
I work for a Forture 500 company that is upgrading intranet Search capability using Google Appliance. I bought this book to help determine what risks Google Appliance might expose. The book begins with good overview of the basic Google interface and includes tips for searching. I then expected to get the low-down on hacking using Google. What i discovered was somewhat anticlimactic, there really aren't any serious hacks to be had using Google. Obviously, you must be careful about web-content publishing processes. Also, Google is respectful of content you don't want crawled or exposed (using both Internet Search and intranet appliance).
The book is well-written and was a quick-read. Most of the info can be found online at Google website itself. I am glad i read the book cuz i got the warm-fuzzy i was looking for.
|
|
|
Copyright 2008 - RailroadBookstore.com
| |