It's time for the first demo. Let me
show you how you can use Google hacking to
find the directory listings in a web
application.
The web application is hosted on the domain hacking
web applications.com.
I want to check if directory listing is
enabled in this web application. And for
this purpose. I will use the following Google search
engine query.
site hacking web applications.com and
entitle index of
first I need to type site hacking
web applications.com. This is
where the web application is hosted.
Next I need to type and
entitle index off.
If a directory has been indexed by Google and
directory listing is enabled for
this directory. Then in the
title of the web page, you will see the string index
of
And that's the reason why I need to type
and entitle index off
in my Google search engine query.
Okay. Now you understand how this
Google search engine query works.
So let me copy this query.
Let me paste it in Google search and
let's see if Google indexed a
directory with directory listing enabled
on the domain hacking web
applications Comm.
As you can see directory listing is
enabled for the files directory.
Let's check what is inside?
There is a file database.yml. This
is a database configuration file
which includes credentials to
the database. So this is a very sensitive file.
Let's read the content of this file.
As you can see indeed, there are
credentials to the database. The username
is root and the password is super
secure password.
It clearly shows how easily you
can use Google search engine to find publicly
exposed sensitive files through directory
listing.
Okay. Now we are done with this demo. So
let me jump to the next one and let
me show you how Google hacking can be used for
finding sensitive information in SQL
syntax errors.