Hi, my name is David. Welcome to
my course web application security testing with
Google hacking.
Sensitive data from web applications can be
indexed by Google and then it becomes
publicly exposed to everyone on the
internet.
In this course, you will learn about different types
of sensitive data that can be indexed
by Google.
What's more you'll learn about the technique
known as Google hacking and you
will see how Google hacking can be used
by ethical hackers and professional penetration testers
for finding security weaknesses in
web applications.
If you know the special syntax of Google search
engine queries, then Google can help you
identify many security weaknesses in
web applications. And this is exactly what
I will show you in this course.
First I will present how you can use Google
hacking to find the directory listings
and SQL syntax errors.
After that, I will demonstrate how you can find publicly
exposed backup files and internal
server errors by means of
Google hacking.
Next I will show you how you can use Google hacking
to find sensitive data in the URL and
insecure HTTP web pages.
Then I will explain to you what Google hacking
database is and I will tell you about a
critical vulnerability in Microsoft
Yammer social network that allowed the
attacker to gain an authorized access
to users accounts by means of
Google hacking.
And finally, I will tell you how to prevent Google
indexing from happening.
Of course, you don't want sensitive data from
your web applications to be publicly Exposed on
the internet as a result of Google indexing and
you don't want other people to
find this sensitive data by means of
Google hacking. That's why the countermeasure
to this problem will be also discussed in
this course.
What you will see primarily in this course
are demos and real world scenarios because
I want you to make the most of this
course and apply this knowledge in your own penetration
testing projects.
Okay, basically this is it. And now
without further delay. Let me
jump to the next clip and let me show you how Google
hacking Works in practice.