We are approaching till the end of this course.
So let me summarize what you have learned in
this course.
Sensitive data from web applications can be
indexed by Google and then it
becomes publicly exposed to everyone on
the internet.
In this course, you learned about different types
of sensitive data that can be indexed
by Google.
What's more you learned about the technique known
as Google hacking Google hacking
is used by ethical hackers
and professional penetration testers for
finding security weaknesses in web
applications.
If you know the special syntax of Google search
engine queries, then Google can help
you identify many security weaknesses in
web applications. And this is exactly what
I presented in this course.
First I demonstrated how you
can use Google hacking to find the directory listings
and SQL syntax errors.
After that, I presented how you can find publicly
exposed backup files and internal
server errors by means of Google
hacking.
What more I demonstrated how you can use
Google hacking to find sensitive data in
the URL and insecure HTTP web
pages?
I also briefly discussed Google hacking
database this database includes
special Google search engine queries
also known as Google Docs.
There are many Google search engine queries
in Google hacking database.
You can take them directly from this database or
you can treat them as inspiration for
creating your own special Google search engine
queries.
What's more I mentioned one report that
clearly shows the power of Google hacking.
Sometime ago a researcher discovered that
access tokens to Microsoft the armor
social network where indexed by Google and
Google hacking could be used to learn
this very sensitive data.
This vulnerability was reported to Microsoft security
Response Center by atikan from
vulnerability laboratory research team.
And now this vulnerability is
fixed.
Last but not least. You don't want sensitive data
from your web application to be
publicly Exposed on the internet as a
result of Google indexing and you don't want
other people to find this sensitive data
by means of Google hacking. That's why
you also learned how to prevent Google
indexing from happening.
I hope this course has been informative for you.
And I do believe that you will benefit from this
course as much as possible.
Let me wish you good luck in your web application
security testing with Google hacking and
thank you for watching this course.