It's time for the third demo. Let
me show you how you can use Google hacking to
find publicly exposed backup files.
The web application is hosted on the domain hacking web
applications.com.
That's why my Google engine search query
starts with site hacking web
applications.com.
Next I will type The Logical operator
and and in between
the round brackets. I will specify the commonly
used extensions for backup files.
Typically, the extension of the backup file is
either backup or BAC
or old and
that's the reason why you see EXT
backup or EXT BAC
or EXT old
in between the round
brackets.
Okay, so far so good.
Let me copy this Google search engine
query.
Let me paste it in Google search and
let's see if Google indexed a
file with one of the specified extensions
on the domain hacking web
applications.com.
As you can see one file with backup extension
has been indexed by
Google.
Let me download this file and let
me check what is inside.
This is a database backup file.
So I will change the display format from plain
text to SQL and I
will see what interesting can be found in
this file.
Please notice that there is the admins email.
And the hash of the admins password.
When you know the hash of the admins password The Next
Step will be cracking this
password. And for this purpose. You should use
a dedicated tool. For example, hashcat, which
is the number one offline password
cracker.
So as you can see Google hacking can
help you find publicly exposed backup
files and this is what I presented to
you in this demo.
Okay. Now we are done with this demo. So
let me jump to the next one and let
me show you how Google hacking can be used for
finding internal server errors.