Sinisterly
Google Hacking Database {easy way} - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Google Hacking Database {easy way} (/Thread-Google-Hacking-Database-easy-way)

Pages: 1 2

Google Hacking Database {easy way} - satz333 - 05-19-2011

[Image: slide16.png]

If you do not already know, Google can be used by malicious person to hack websites, servers, credit cards, and ………..


Ohhh yes, Google is the best friend of hackers, using what is called GOOGLE DORKS, a hacker can easily find exploitable vulnerabilities and mount attacks that will allow access to the vulnerable target.


Google dorks are a combination of words used as search keyword.


The Google Hacking Database (GHDB)
For more information follow the link: http://www.exploit-db.com/google-hac...tabase-reborn/


Now time to demonstrate the power of the Google Hacking Database,

We start by choosing a dork, in this example I'll use:


filetypeConfusedql "insert into" (pass|passwd|password)
&
filetypeConfusedql ("values * MD5" | "values * password" | "values * encrypt")


Ok, now let's see the result: filetypeConfusedql insert into users


As you can see, we come across databases dump, and we can clearly see the username and the password, but unfortunately the passwords may be encrypted

The solution is to combine the two dorks: filetypeConfusedql insert into users values MD5


Now we see the username and password "NON-ENCRYPTED"


To find specified targets you can tweak your dork, for example if you want to find database dump of a content management system (Drupal, Joomla, ……), all you have to do is to add the table name;


ok try this one (Joomla):
filetypeConfusedql insert into jos_users values md5

[Image: demo.JPG]

RE: Google Hacking Database {easy way} - TheShadow1 - 05-20-2011

Awesome TUT. Thanks! I forgot how awesome the Google Hacks DB is.

RE: Google Hacking Database {easy way} - satz333 - 05-20-2011

(05-20-2011, 12:31 PM)TheShadow1 Wrote: Awesome TUT. Thanks! I forgot how awesome the Google Hacks DB is.

Hey Kool M8.. Anyways Appie hacking :thumbs:


RE: Google Hacking Database {easy way} - horaceallen77 - 05-22-2011

bro

you are doing good

good job

RE: Google Hacking Database {easy way} - Arthur555 - 05-23-2011

Wow O.O Never thought that google was so helpful for hacking ^_^'

RE: Google Hacking Database {easy way} - satz333 - 05-23-2011

(05-22-2011, 10:44 PM)horaceallen77 Wrote: bro

you are doing good

good job

Thnx Keep Supporting..



RE: Google Hacking Database {easy way} - Shining White - 06-16-2011

Great job dude.., Awesome !!!

RE: Google Hacking Database {easy way} - jsavanto - 06-28-2011

The password I got is encrypted. I don't know how to combine the two dorks because you did not explain that part. Please help

RE: Google Hacking Database {easy way} - satz333 - 07-02-2011

yea thnx for your replies buddies..

RE: Google Hacking Database {easy way} - ibnea - 07-02-2011

I got encrypted password.
what the next should i do?