Hello, everyone.
So in this video, we are going to discuss about Google Docs, so what actually are Google Docs?
So if we split this word Google Plus doc.
OK, so basically there are two words.
The first is Google, we all know about what actually Google is.
Google is a search engine.
What is a dark now?
So dark is basically a query that you search or query operator that you are hitting.
For example, if you go on to Google and you search for by computer and head end up over here, your
query is by computer, OK?
And based on this, you are getting the results.
As you can see or hear.
The first result is of Amazon.
I'm not counting these results because these are sponsored results.
So the first result that we are getting is for Amazon and then Flipkart and then again, Flipkart.
And chromo, if you look closely into the.
You are.
So let me just copy this.
You are all for you.
Let me be straightforward here.
Let's do Wardrop.
OK, so this is a particular are in this you are if you notice that your particular query that you searched
was passing through this particular parameter, which is Q which stands for query and or.
Q OK, so let me just delete everything else because that is not necessary for us right now.
OK, so it looks something like this by police computer again by plus computer.
OK, so what specific keywords that you are searching or the query that you are searching, you're getting
results based on that.
So based on our query for buying a computer, we got the results from Amazon and Flipkart in a similar
manner.
We can tune up our search queries based on we will get the results for so you can tune up your search
query and you can find the sensitive information as well, which has been saved into the servers by
the developers or the admins by mistake.
So this is basically the whole concept of using a Google doc, but then you will be able to find out
something sensitive into that particular server before going to that.
Let's see some of the search operators, which are very, very useful for us.
So the first one is site second is in you all next, as in text file type and in title.
OK, so let's understand each one.
The first one is site.
So site basically means the website that you want to particularly search for.
So let me just type a site.
So this means the site that you want to search for.
So let me type site star dot com.
So I'm saying any website search for any website which contains in it you url, let's say India.
OK, so you can see any website that ends with a top-level domain dot com.
So you can see we got Web sites, dot com dot com dot com.
Oh here we have got coming because of this.
India in all India means in the US that will be matching something that is India.
So let's see if this matches India.
I can see in the world bar it is matching India perfect.
So let us just modify this to let's see EU and let's try to match koruna and let's see if we get some
results.
Obviously these are the first results which are coming because of government has imposed Google to show
first results from WHL.
Apart from this, let's see if we get some other results.
Yes, we got a Harvard result, not edu.
OK, so let's do one more thing.
Let's try to type this as dot com and let's see if we get some more results so you can see there are
some results which are coming.
But OK, so.
Well, let's first let's see this.
So Edu and coronaviruses matching over here.
OK, let me just try to modify this and let me liquidy in you all.
So let us type hack and hit enter.
OK, so you will see dot com your orders which contains the in your a hack.
OK, so you're a two in the you are.
There must be a keyword or a word that is matching hack as you can see.
Let me open up the three.
So there is is hard there.
Yes.
How is that.
And it ends with dot com.
That's a fact.
Is there.
So it is there.
Let us see over here.
So your hack is again matching.
So this is basically a simple Google dog search operator works, so we understood site sense for the
website that you want to search for in all means that any order that is that you are Albar.
The next one is in text.
In text means inside that particular page text.
So let us see this particular college.
So this particular college is r.p.m..
And do not worry if you see this kind of message by Google because Google understands that you are not
doing something with a normal user usually does.
So just prove that you are not a robot and you are again, good to go.
OK, so let's say our target is this particular cartridge, which is RPM's.
So I want to know all the email ideas of this particular college.
So how to do that?
So I will just use site Kullen or Amazon.com because I can see the website escarpments dot com and let's
say in text I'm going to use.
Ah, Amazon dot com.
OK, so it should start with Aderet, because I know it will start with, let's say example some name
and read R.P.M. as dot com.
It is going to end with this and let's search if we get something.
So we have got a couple of results.
Let me open up some results.
So let's see if we get some results.
Let us go over here.
Let's click this one.
This one as well.
Let's click this.
OK, so let's see if we have got some useful results.
Let's do control f ateret IP address.
So we can so we can see we have got an email address over here.
Let's go over here again.
We have got an e-mail.
OK, so this time this website is still loading.
It's loaded.
And let us see if we add something over here.
No, let us go on this one and let's see if we get something perfect.
As you can see, instead of one, we have got many e-mail addresses, which means that through this
way, you can read inside the text of that particular page, read the text of that particular page.
So this way, you have identified that this is the this is the page and these are the e-mail addresses
which are lying onto this specific page.
OK, so, yeah.
So this was one of the ways of using this particular operator.
Now let's use the next operator wherein we are going to search for any Web site which ends with dot
com and we are going to search for a file typed letter PDF.
OK, so what type of file we are going to search.
So let's say we are going to search something related to hacking so we may get hacking PDF.
As you can see, the first result is from blackhead and you can see the file type SPDM Similarly again,
pdf pdf pdf.
OK, so we have got the results for PDF.
Let's say I want the book, which is a Hacking for Dummies.
Let's see if we get this book in a PDF format.
So I have got a link over here and let's verify if this is the correct book and.
Perfect.
We have got the book, which is Hacking for Dummies.
OK, this is the whole full book that we have got it from there.
So similarly, it is not just related to PDF.
You can search for any file type.
So let's say I want to search for our networking party or let's say I want to submit this next morning
for a project.
So let's search for a.
So if we have got some people.
So let's modify this object.
Let's write it away and networking because our keyword is networking and let's say file type calling
people X.
OK, so did we get anything?
No.
Let us try once more by modifying this particular operator.
Yeah.
And now you can see we got some results with PPD format and these are networking PPD.
So, like, we just open up this basic networking party and it has started downloading.
You can see there are more such.
Please let the state open this and let's see if it is related to networks or it can be utilized or not.
So this is one of the simplest way.
Yeah, this is related to basics of networking, but I actually do not understand what types of.
Networking, it is trying to download, so I'm just going to quickly get this.
OK, so this was one of the way of downloading anything that you want and sort of networking we can
get are trying to download something which contained some sensitive information.
So let's say in and let's say an Excel file, which contains some login information.
So you can see time tracking report, time tracking report.
OK, so we have got something.
So as a server audit report, we have got somewhat more sensitive.
So instead of logins, let's type grades or credentials and so we can see we got something from Google
or something is stole all that.
And even Hawaii is storing some things.
So this may be something sensitive.
OK.
Of course, there are more such Google Docs that you can use.
Let me just go to this website, which is Google Hacking Database, where you can utilize a lot of Google
Docs for your search queries.
OK, so let me just show you one of.
That particular dock, which contains a file containing juicy information and you can utilize any of
this, so let's utilize this one and let's search it on the Google.
If we get something sensitive for secret, start Wireman.
So again, see, I have got multiple websites.
Let's see if there is something secret in there.
There is also a file database that famil in which I can see.
No username and password, at least for now, let's see why is there something secret?
Yeah, so there is a secret key.
Secret key which can be.
Harmful if it falls into some bad hands, as you can see or hear you, the name is Root and Password
is this particular Facebook password for the database, as you can see or hear.
Also, that is a database name, username and password for this particular target.
So this is how you get sensitive information out of Target.
OK, so there are numbers of Google Docs that you can utilize.
So for finding sensitive information about Target, as you can see, this particular Google doc will
give you backup files like this particular Google doc will give you log files and be a key extension.
OK, so let's come back over here.
And I have given some examples through which we can find FTP servers and websites, which is using HTTP.
So you can just use this particular talk to copy this.
Go to Google and let's try to search this.
Yeah.
So as you can see, I have got all the servers which are on FTP in case there is something sensitive
which has been uploaded, then I can directly utilize that particular information for the attack purposes
or for recon purposes as well.
I can modify this also from 2018.
So let's say I want all the data after twenty nineteen twenty twenty two thousand two or twenty twenty.
I don't think anything will be twenty, twenty or twenty nineteen, I even get some useful information.
OK, so this was what have to be you can also get it for HTP.
OK, if you want some information about forums, about HDB can also get that.
OK, moving on to the next one, find locked files with passwords.
OK, so let's try this.
If we can find some log files which contains passwords.
So you can see we got some of the links where we may try to get some of the log files which have the
password.
OK, so this is basically a search honeypot log which contains username and password.
OK, let's see over here, there is something called password dot log, OK, nothing sensitive over
here.
Yea, it looks something sensitive.
JIRA slow, not long.
OK, you can see there are some kind of logs over there.
OK, so here we have some more sensitive information.
Firefox password saward username password server username password for different different accounts.
OK, so this is one more way where you can find log files with passwords.
If you want configuration files with passwords, you can use this particular dark, which I'm going
to use right now.
Let us see if we get DB passwords for this particular Web site.
If you see your.
Excellent.
We have got for my Google TV dot com username is this database's this password is given over here.
So this is something very, very critical.
As we can see for this particular websites.
The DOT in the file contains this particular thing.
And let's see if we have the password and you can see the password.
Is this, again, something?
Password, password, password.
So we have got the password for this particular target as well for this bunghole service dot com, the
only file we can again see the password over here.
And this is kind of very, very poor security where in the database username and password, both are
kept as best we are.
You can see the username.
Is this the password?
Is this for another website, the username and password?
Is this OK?
So this is a sensitive information which has been leaked and I have already reported all this sensitive
information to those target and they are in the process of fixing it already and must have fixed it
while making this video's life.
So I hope you understood how you can utilize this type of sensitive information to find a lot of details
or juicy information from the target.
And you can utilize that for your bug bounty hunting and pen testing work.
So there is one more.
If you want email start Exelis.
You can use this particular Google doc.
We have already seen this type of document in the file type is Excel and in the You are L'viv.
We want something or less email or Exelis.
If you want to find open cameras, you can also do that.
Let's see if we get some cameras as well.
OK, so let us we have got a couple of things, let's try to click each one of them and let's see if
we get something sensitive in there.
OK, so we have here it is live a video.
As you can see, we have a live video stream of someone's camera and we have automatically logged in.
As you can see, there is log out.
So this was an unauthenticated camera through which we have logged in and we are able to see the livestream
currently.
And you can see this is the time, this is the date, and this is the time it is running right now for
this particular camera.
And you can see over here, this is again and unauthenticated camera there.
We are able to see it again.
But when we click on content, it is asking for a password when we try to modify the system administration
here.
Also, there is some type of camera which is open and here are the link camera, which is open.
Again, that is the same for the server room.
This, I think, is some of the college's camera, but this is the date and time which is going on.
So this is how we get sensitive information about Target and we may also get information about the open
Web cameras or poorly authenticated CCTV cameras.
There is one more log that you can utilize.
So let us see if we get something sensitive for this now.
So we have got a couple of domains for this.
Let's try to click and see if we get any camera access.
OK, so we did not get any of those links working.
Not sure why, but this is one of the ways that you can utilize to find out hidden camera links.
OK, and unauthenticated cameras you can always use a lot of information is provided on Google and database.
You can use this particular docs to find out sensitive information about the target.
If you are searching for a specific target as well, you can search for that specific target as well
by providing the name of the target, the website name Inside Call and Stop, for example, site Kulin
dot com.
And if you want to search for any Chesed log tokens, you can do that as well.
So I hope you guys understood how you can use Google Docs for your purpose, for testing for bug bounty
hunting.
And you may get a lot of sensitive information on that.
I have also uploaded some of the Google Docs so you can just use this Google Docs.
These are five entries for a specific category, which is file containing juicy information.
So if I just remove this category and you can see our other Google Docs, for example, for getting
tokens, JWT authentication tokens, secret backup files, settings, aperture logs, etc..
So I hope you guys understood this Google hacking database and upcoming videos, I'm going to teach
you how you can become your own author of one of your own Google Docs, which you can upload it over
here.
As you can see, I am the author of this particular doc which has this specific idea.
You can also contribute to this particular Exploit DBE database for the community and others can use
your particular Google doc for recon purposes.
So I hope you guys understood this.
Thank you.