GOOGLE Search Strings

Here Is queries which can be used in day to day life & for noobs.. 


Below discussed are various Google’s special commands and I shall be explaining each command in
brief and will show how it can be used for critical information digging.

[ intitle: ]

The “intitle:” syntax helps Google restrict the search results to pages containing that word in the title. For
example, “intitle: login password” (without quotes) will return links to those pages that has the word
"login" in their title, and the word "password" anywhere in the page.

Similarly, if one has to query for more than one word in the page title then in that case “allintitle:” can be
used instead of “intitle” to get the list of pages containing all those words in its title. For example using
“intitle: login intitle: password” is same as querying “allintitle: login password”.

[ inurl: ]

The “inurl:” syntax restricts the search results to those URLs containing the search keyword. For
example: “inurl: passwd” (without quotes) will return only links to those pages that have "passwd" in the
URL.

Similarly, if one has to query for more than one word in an URL then in that case “allinurl:” can be used
instead of “inurl” to get the list of URLs containing all those search keywords in it. For example: “allinurl:
etc/passwd“ will look for the URLs containing “etc” and “passwd”. The slash (“/”) between the words will
be ignored by Google.

[ site: ]

The “site:” syntax restricts Google to query for certain keywords in a particular site or domain. For
example: “exploits site:hackingspirits.com” (without quotes) will look for the keyword “exploits” in those
pages present in all the links of the domain “hackingspirits.com”. There should not be any space between
“site:” and the “domain name”.

[ filetype: ]

This “filetype:” syntax restricts Google search for files on internet with particular extensions (i.e. doc, pdf
or ppt etc). For example: “filetype:doc site:gov confidential” (without quotes) will look for files with “.doc”
extension in all government domains with “.gov” extension and containing the word “confidential” either in
the pages or in the “.doc” file. i.e. the result will contain the links to all confidential word document files on
the government sites.

[ link: ]

“link:” syntax will list down webpages that have links to the specified webpage. For Example:
“link:www.securityfocus.com” will list webpages that have links pointing to the SecurityFocus homepage.
Note there can be no space between the "link:" and the web page url.

Demystifying Google Hacks
By Debasis Mohanty

[ related: ]

The “related:” will list web pages that are "similar" to a specified web page. For Example:
“related:www.securityfocus.com” will list web pages that are similar to the Securityfocus homepage. Note
there can be no space between the "related:" and the web page url.

[ cache: ]

The query “cache:” will show the version of the web page that Google has in its cache. For Example:
“cache:www.hackingspirits.com” will show Google' cache of the Google homepage. Note there can be
s
no space between the "cache:" and the web page url.

If you include other words in the query, Google will highlight those words within the cached document. For
Example: “cache:www.hackingspirits.com guest” will show the cached content with the word "guest"
highlighted.

[ intext: ]

The “intext:” syntax searches for words in a particular website. It ignores links or URLs and page titles.
For example: “intext:exploits” (without quotes) will return only links to those web pages that has the
search keyword "exploits" in its webpage.

[ phonebook: ]

“phonebook” searches for U.S. street address and phone number information. For Example:
“phonebook:Lisa+CA” will list down all names of person having “Lisa” in their names and located in
“California (CA)”. This can be used as a great tool for hackers incase someone want to do dig personal information for social engineering. 

Google serves almost 80 % all search queries on the Internet, proving itself as the most popular search engine. However Google makes it possible to reach not only the publicly available information resources, but also gives access to some of the most confidential information that should never have been revealed. In this post I will show how to use Google for exploiting security vulnerabilities within websites.The following are some of the hacks that can be accomplished using Google.


1. Hacking Security Cameras

There exists many security cameras used for monitoring places like parking lots, college campus, road traffic etc. which can be hacked using Google so that you can view the images captured by those cameras in real time. All you have to do is use the following search query in Google. Type in Google search box exactly as follows and hit enter inurl:”viewerframe?mode=motion” Click on any of the search results (Top 5 recommended) and you will gain access to the live camera which has full controls. You will see something as follows

As you can see in the above screenshot, you now have access to the Live cameras which work in real-time. You can also move the cameras in all the four directions, perform actions such as zoom in and zoom out. This camera has really a less refresh rate. But there are other search queries through you can gain access to other cameras which have faster refresh rates. So to access them just use the following search query.
intitle:”Live View / – AXIS”
Click on any of the search results to access a different set of live cameras. Thus you have hacked Security Cameras using Google.


2. Hacking Personal and Confidential Documents

Using Google it is possible to gain access to an email repository containing CV of hundreds of people which were created when applying for their jobs. The documents containing their Address, Phone, DOB, Education, Work experience etc. can be found just in seconds.
intitle:”curriculum vitae” “phone * * *” “address *” “e-mail”
You can gain access to a list of .xls (excel documents) which contain contact details including email addresses of large group of people. To do so, type the following search query and hit enter.
filetype:xls inurl:”email.xls”
Also it’s possible togain access to documents potentially containing information on bank accounts, financial summaries and credit card numbers using the following search query
intitle:index.of finances.xls

3. Hacking Google to gain access to Free Stuffs

Ever wondered how to hack Google for free music or ebooks. Well here is a way to do that. To download free music just enter the following query on google search box and hit enter.
“?intitle:index.of?mp3eminem“
Now you’ll gain access to the whole index of eminem album where in you can download the songs of your choice. Instead of eminem you can subtitute the name of your favorite album. To search for the ebooks all you have to do is replace “eminem” with your favorite book name. Also replace “mp3″ with “pdf” or “zip” or “rar”.

------------------------------------------
Now this what i call Hardcore:
****USE AT UR RISK N DON'T ASK HW TO USE IT*** 



 




*** NOW THIS IS PURE 18+ STUFF ***

Querying for vulnerable sites or servers using Google’s advance syntaxes 

Well, the Google’s query syntaxes discussed above can really
help people to precise their search and get what they are
exactly looking for.

Now Google being so intelligent search engine, malicious users
don’t mind exploiting its ability to dig confidential and secret
information from internet which has got restricted access. Now I
shall discuss those techniques in details how malicious user dig
information from internet using Google as a tool.


Using “Index of ” syntax to find sites enabled with Index browsing 

A webserver with Index browsing enabled means anyone can browse
the webserver directories like ordinary local directories. Here
I shall discuss how one can use “index of” syntax to get a list
links to webserver which has got directory browsing enabled.
This becomes an easy source for information gathering for a
hacker. Imagine if the get hold of password files or others
sensitive files which are not normally visible to the internet.
Below given are few examples using which one can get access to
many sensitive information much easily.

Index of /admin
Index of /passwd
Index of /password
Index of /mail

"Index of /" +passwd
"Index of /" +password.txt
"Index of /" +.htaccess

"Index of /secret"
"Index of /confidential"
"Index of /root"
"Index of /cgi-bin"
"Index of /credit-card"
"Index of /logs"
"Index of /config" 


Looking for vulnerable sites or servers using [/s3]“inurl:” or “allinurl:”[/s3] 
a. Using “allinurl: winnt/system32/ ” (without quotes) will list
down all the links to the server which gives access to
restricted directories like “system32” through web. If you are
lucky enough then you might get access to the cmd.exe in the
“system32” directory. Once you have the access to “cmd.exe”
and are able to execute it then you can go ahead in further
escalating your privileges over the server and compromise it.


b. Using “allinurl: wwwboard/passwd.txt ” (without quotes) in the
Google search will list down all the links to the server which
are vulnerable to “WWWBoard Password vulnerability”. For more info Google it out.

c. Using “inurl: .bash_history ” (without quotes) will list down
all the links to the server which gives access to
“.bash_history” file through web. This is a command history
file. This file includes the list of command executed by the
administrator, and sometimes includes sensitive information
such as password typed in by the administrator. If this file
is compromised and if contains the encrypted unix (or *nix)
password then it can be easily cracked using “John The
Ripper”.



d. Using “ inurl: config.txt” (without quotes) will list down all
the links to the servers which gives access to “config.txt”
file through web. This file contains sensitive information,
including the hash value of the administrative password and
database authentication credentials. For Example: Ingenium
Learning Management System is a Web-based application for
Windows based systems developed by Click2learn, Inc. Ingenium
Learning Management System versions 5.1 and 6.1 stores
sensitive information insecurely in the config.txt file.



Other similar search using “inurl:” or “allinurl:” combined with other syntaxs 

inurl:admin filetype:txt
inurl:admin filetype:db
inurl:admin filetype:cfg
inurl:mysql filetype:cfg
inurl:passwd filetype:txt
inurl:iisadmin
inurl:auth_user_file.txt
inurl: orders.txt
inurl:"wwwroot/*."
inurl:adpassword.txt
inurl:webeditor.php
inurl:file_upload.php

inurl:gov filetype:xls "restricted"
index of ftp +.mdb allinurl:/cgi-bin/ +mailto 


Looking for vulnerable sites or servers using “intitle:” or “allintitle:” 

a. Using [ allintitle: "index of /root”] (without brackets) will
list down the links to the web server which gives access to
restricted directories like “root” through web. This directory
sometimes contains sensitive information which can be easily
retrieved through simple web requests.


b. Using [ allintitle: "index of /admin”] (without brackets) will
list down the links to the websites which has got index
browsing enabled for restricted directories like “admin”
through web. Most of the web application sometimes uses names
like “admin” to store admin credentials in it. This directory
sometimes contains sensitive information which can be easily
retrieved through simple web requests.



Other similar search using “intitle:” or “allintitle:” combined with other syntaxs

intitle:"Index of" .sh_history
intitle:"Index of" .bash_history
intitle:"index of" passwd
intitle:"index of" people.lst
intitle:"index of" pwd.db
intitle:"index of" etc/shadow
intitle:"index of" spwd
intitle:"index of" master.passwd
intitle:"index of" htpasswd
intitle:"index of" members OR accounts
intitle:"index of" user_carts OR user_cart

allintitle: sensitive filetype:doc
allintitle: restricted filetype :mail
allintitle: restricted filetype:doc site:gov



Other interesting Search Queries 

To search for sites vulnerable to Cross-Sites Scripting (XSS) attacks: 
allinurl:/scripts/cart32.exe
allinurl:/CuteNews/show_archives.php
allinurl:/phpinfo.php 

To search for sites vulnerable to SQL Injection attacks: 
allinurl:/privmsg.php
allinurl:/privmsg.php 

What is VPN

How Virtual Private Networks Work.

The world has changed a lot in the last couple of decades. Instead of simply dealing with local or regional concerns, many businesses now have to think about global markets and logistics. Many companies have facilities spread out across the country or around the world, and there is one thing that all of them need: A way to maintain fast, secure and reliable communications wherever their offices are.

Until fairly recently, this has meant the use of leased lines to maintain a wide area network (WAN). Leased lines, ranging from ISDN (integrated services digital network, 128 Kbps) to OC3 (Optical Carrier-3, 155 Mbps) fiber, provided a company with a way to expand its private network beyond its immediate geographic area. A WAN had obvious advantages over a public network like the Internet when it came to reliability, performance and security. But maintaining a WAN, particularly when using leased lines, can become quite expensive and often rises in cost as the distance between the offices increases.

As the popularity of the Internet grew, businesses turned to it as a means of extending their own networks. First came intranets, which are password-protected sites designed for use only by company employees. Now, many companies are creating their own VPN (virtual private network) to accommodate the needs of remote employees and distant offices.

Basically, a VPN is a private network that uses a public network (usually the Internet) to connect remote sites or users together. Instead of using a dedicated, real-world connection such as leased line, a VPN uses"virtual"connections routed through the Internet from the company's private network to the remote site or employee. In this article, you will gain a fundamental understanding of VPNs, and learn about basic VPN components, technologies, tunneling and security
What Makes a VPN ?

A well-designed VPN can greatly benefit a company. For example, it can:

Extend geographic connectivity
Improve security
Reduce operational costs versus traditional WAN
Reduce transit time and transportation costs for remote users
Improve productivity
Simplify network topology
Provide global networking opportunities
Provide telecommuter support
Provide broadband networking compatibility
Provide faster ROI (return on investment) than traditional WAN

What features are needed in a well-designed VPN? It should incorporate:

Security
Reliability
Scalability
Network management
Policy management

There are three types of VPN. In the next couple of sections, we'll describe them in detail.
Remote-Access VPN

There are two common types of VPN. Remote-access, also called a virtual private dial-up network (VPDN), is a user-to-LAN connection used by a company that has employees who need to connect to the private network from various remote locations. Typically, a corporation that wishes to set up a large remote-access VPN will outsource to an enterprise service provider (ESP). The ESP sets up a network access server (NAS) and provides the remote users with desktop client software for their computers. The telecommuters can then dial a toll-free number to reach the NAS and use their VPN client software to access the corporate network.

A good example of a company that needs a remote-access VPN would be a large firm with hundreds of sales people in the field. Remote-access VPNs permit secure, encrypted connections between a company's private network and remote users through a third-party service provider.

Site-to-Site VPN


Through the use of dedicated equipment and large-scale encryption, a company can connect multiple fixed sites over a public network such as the Internet. Site-to-site VPNs can be one of two types:

Intranet-based - If a company has one or more remote locations that they wish to join in a single private network, they can create an intranet VPN to connect LAN to LAN.

Extranet-based - When a company has a close relationship with another company (for example, a partner, supplier or customer), they can build an extranet VPN that connects LAN to LAN, and that allows all of the various companies to work in a shared environment.

VPN Security: Firewalls
A well-designed VPN uses several methods for keeping your connection and data secure:

Firewalls
Encryption
IPSec
AAA Server

In the following sections, we'll discuss each of these security methods. We'll start with the firewall.

A firewall provides a strong barrier between your private network and the Internet. You can set firewalls to restrict the number of open ports, what type of packets are passed through and which protocols are allowed through. Some VPN products, such as Cisco's 1700 routers, can be upgraded to include firewall capabilities by running the appropriate Cisco IOS on them. You should already have a good firewall in place before you implement a VPN, but a firewall can also be used to terminate the VPN sessions
VPN Security: Encryption
Encryption is the process of taking all the data that one computer is sending to another and encoding it into a form that only the other computer will be able to decode. Most computer encryption systems belong in one of two categories:

Symmetric-k*y encryption
Public-k*y encryption

In symmetric-k*y encryption, each computer has a secret k*y (code) that it can use to encrypt a packet of information before it is sent over the network to another computer. Symmetric-k*y requires that you know which computers will be talking to each other so you can install the k*y on each one. Symmetric-k*y encryption is essentially the same as a secret code that each of the two computers must know in order to decode the information. The code provides the k*y to decoding the message. Think of it like this: You create a coded message to send to a friend in which each letter is substituted with the letter that is two down from it in the alphabet. So"A"becomes"C,"and"B"becomes"D". You have already told a trusted friend that the code is"Shift by 2". Your friend gets the message and decodes it. Anyone else who sees the message will see only nonsense.


The sending computer encrypts the document with a symmetric k*y, then encrypts the symmetric k*y with the public k*y of the receiving computer. The receiving computer uses its private k*y to decode the symmetric k*y. It then uses the symmetric k*y to decode the document.

Public-k*y encryption uses a combination of a private k*y and a public k*y. The private k*y is known only to your computer, while the public k*y is given by your computer to any computer that wants to communicate securely with it. To decode an encrypted message, a computer must use the public k*y, provided by the originating computer, and its own private k*y. A very popular public-k*y encryption utility is called Pretty Good Privacy (PGP), which allows you to encrypt almost anything. You can find out more about PGP at the PGP site.


VPN Security: IPSec


nternet Protocol Security Protocol (IPSec) provides enhanced security features such as better encryption algorithms and more comprehensive authentication.

IPSec has two encryption modes: tunnel and transport. Tunnel encrypts the header and the payload of each packet while transport only encrypts the payload. Only systems that are IPSec compliant can take advantage of this protocol. Also, all devices must use a common k*y and the firewalls of each network must have very similar security policies set up. IPSec can encrypt data between various devices, such as:

Router to router
Firewall to router
PC to router
PC to server


VPN Security: AAA Servers

AAA (authentication, authorization and accounting) servers are used for more secure access in a remote-access VPN environment. When a request to establish a session comes in from a dial-up client, the request is proxied to the AAA server. AAA then checks the following:

Who you are (authentication)
What you are allowed to do (authorization)
What you actually do (accounting)

The accounting information is especially useful for tracking client use for security auditing, billing or reporting purposes.


VPN Technologies

Depending on the type of VPN (remote-access or site-to-site), you will need to put in place certain components to build your VPN. These might include:

Desktop software client for each remote user
Dedicated hardware such as a VPN concentrator or secure PIX firewall
Dedicated VPN server for dial-up services
NAS (network access server) used by service provider for remote-user VPN access
VPN network and policy-management center

Because there is no widely accepted standard for implementing a VPN, many companies have developed turn-k*y solutions on their own. In the next few sections, we'll discuss some of the solutions offered by Cisco, one of the most prevelant networking technology companies.

What is Hosting

what is hosting?
Hosting origins from the word host which has different meanings that are familiar to you. Hosting means providing place for your website on the web hosting company’s servers and makes it viewable in the Internet and floating it.
…
Here Is Types Of Hosting
.
.
Free Shared hosting

If you want to host some non-profit-making or your personal web site it’d be more profitable to use basic shared hosting for no fee. This type of web site hosting is a rather logical choice if you are a junior in web site building or if you want to try some new idea and don’t want to pay. But of course you don’t have to suppose it to grant your site the best conditions, such as proper bandwidth and disk space. Some other features can also be limited, I mean MySQL, PHP support. It often also provides poor web statistics.
.
Paid Shared hosting

Almost all small businesses, intermediate and large professional sites use shared hosting, cause they don't need the whole server’s space and besides the whole server costs much. With shared/virtual hosting such necessary features, as multiply e-mail, MySQl, PHP, are supported. The main disadvantage is decrease of your site’s security.
.
Dedicated hosting/Server

This type of hosting is the best choice for those, who need much storage and bandwidth, and are good in server administration. You’ll be able to use all necessary software, but if you don’t have enough knowledge to administrate your server it will be a little bit difficult for you.
.
Co-location

It’s a sub type of dedicated hosting and can be compared with your own house which was built specially for you, with your favorite furniture and all. It’s built on your hoster’s (ISP) ground. This service is implied to fulfill only your tasks and is designed for your needs alone. And it’s cost is correspondingly high.
.
VDS/VPS

Virtual private server is a type of web site hosting that is based on dividing a physical server into several virtual ones. It costs less though gives same possibilities as Dedicated server. Now, when we’ve examined different types of hosting services, you can decide which type of hosting is the most suitable for you.
.
Green Hosting

As the earth is getting increasingly ill the web hosting industry is making an attempt in green hosting to do something about it. Green hosting is eco-friendly and is growing in popularity which has lead to more web hosts offering it to their customers. With eco-friendly means that the web host either purchase carbon offsets or use eco-friendly energy efficient servers. Green hosting is almost exclusively shared hosting which means that it can be a good alternative for you that want to do something for the environment and only require shared hosting for your website.
.
Cloud Computing

The other type of it hosting at the moment is called cloud computing. The easiest way of explaining cloud computing is in the way that it is different from the “traditional” hosting.
1.Cloud computing is elastic which means that the consumer only use as much hosting that is needed.
2.As a consumer you will only have to pay for the amount of hosting that is used. If you require a lot of hosting one month you will pay more that month and other months, when you require less hosting, you will also pay less.

The above mentioned qualities are also what make cloud computing as popular as it is today. Your hosting grows when you need it to and you only pay for the amount of hosting that you are using.