It's time for the first demo. Let me
show you how you can use Google hacking to find
the directory listings in a web application.
The web application is hosted on the domain hacking web
applications.com.
I want to check if directory listing is enabled
in this web application. And for
this purpose. I will use the following Google search
engine query.
site hacking web applications.com and
entitled index of
first I need to type site hacking
web applications.com.
This is where the web application is hosted.
next
I need to type and entitle index off.
If a directory has been indexed by Google and
directory listing is enabled for
this directory. Then in the
title of the web page, you will see the string
index of
and that's the reason why I need to type and
entitle index off in
my Google search engine query.
Okay. Now you understand how this
Google search engine query works.
So let me copy this query.
Let me paste it in Google search and
let's see if Google indexed a
directory with directory listing
enabled on the domain hacking web
applications.com.
As you can see directory listing is enabled
for the files directory.
Let's check what is inside?
There is a file database.yml. This
is a database configuration file
which includes credentials to
the database. So this is a very sensitive file.
Let's read the content of this file.
As you can see indeed, there are
credentials to the database. The username is
root and the password is super secure
password.
It clearly shows how easily you can
use Google search engine to find publicly exposed
sensitive files through directory
listing.
Okay. Now we are done with this demo. So
let me jump to the next one and let me
show you how Google hacking can be used for
finding sensitive information in SQL syntax
errors.