It's time for the third demo. Let me
show you how you can use Google hacking to
find publicly exposed backup files.
The web application is hosted on the
domain hacking web applications.com.
That's why my Google engine search query starts
with site hacking web applications.com.
Next I will type The Logical operator and
and in between the
round brackets. I will specify the commonly used
extensions for backup files.
Typically, the extension of the
backup file is either backup or
BAC or old
and that's the reason why you
see EXT backup or EXT
BAC or EXT
old in between
the round brackets.
Okay, so far so good.
Let me copy this Google search engine query.
Let me paste it in Google search and
let's see if Google indexed a
file with one of the specified extensions
on the domain hacking web
applications.com.
As you can see one file with backup extension
has been indexed by Google.
Let me download this file and let
me check what is inside.
This is a database backup file.
So I will change the display format from plain
text to SQL and I
will see what interesting can be found in this
file.
Please notice that there is the admins email.
And the hash of the admins password.
When you know the hash of the admins password
The Next Step will be cracking
this password. And for this purpose. You
should use a dedicated tool. For example,
hashcat, which is the number one offline
password cracker.
So as you can see Google hacking can help
you find publicly exposed backup files
and this is what I presented to you
in this demo.
Okay. Now we are done with
this demo. So let me jump to the next one
and let me show you how Google hacking can
be used for finding internal server errors.