《Lord of The Bing - Hacker Halted Singapore 2016 - Rob Ragan》.pdf

Lord of the Bing Taking Back Search Engine Hacking From Google and Bing 26 October 2010 Presented by: Presented by: Presented by: Presented by: Rob Ragan Stach Liu, LLC Goals D E S I R E D O U T C O M E • To improve To improve Google Hacking To improve To improve • Attacks and defenses • Advanced tools and techniques • To think differently To think differently about exposures in To think differently To think differently publicly available sources • To blow your mind! 2 Google/Bing Hacking S E A R C H E N G I N E A T T A C K S 3 Attack Targets G O O G L E H A C K I N G D A T A B A S E • Advisories and Vulnerabilities (215) • Pages containing network or • Error Messages (58) vulnerability data (59) • Files containing juicy info (230) • Sensitive Directories (61) • Files containing passwords (135) • Sensitive Online Shopping Info (9) • Files containing usernames (15) • Various Online Devices (201) • Footholds (21) • Vulnerable Files (57) • Pages containing login portals (232) • Vulnerable Servers (48) • Web Server Detection (72)