1. Copyright © 2004 - The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License. The OWASP Foundation OWASP AppSec June 2004 NYC http://www.owasp.org ADVANCED GOOGLE HACKING -KARTIK TRIVEDI Consultant / Trainer - Foundstone LA Chapter Chair / Contributor Kartik.trivedi@foundstone.com

2. OWASP AppSec 2004 “Using public sources openly and without resorting to illegal means, it is possible to gather at least 80 percent of all information required about the enemy” - Al Qaeda training manual

3. OWASP AppSec 2004 AGENDA  How Google works  Information disclosure with Google  Tools  Countermeasures

4. OWASP AppSec 2004 How Google Works

5. OWASP AppSec 2004 Information Disclosure with Google

6. OWASP AppSec 2004 Information Disclosure with Google  Advanced Search Operators  site: (.edu,.gov, foundstone.com, usc.edu)  filetype: (txt, xls, mdb, pdf,.log)  Daterange: (julian date format)  Intitle / allintitle  Inurl / allinurl

7. OWASP AppSec 2004 Information Disclosure with Google

8. OWASP AppSec 2004 Information Disclosure with Google

9. OWASP AppSec 2004 Information Disclosure with Google

10. OWASP AppSec 2004 Information Disclosure with Google

11. OWASP AppSec 2004 Information Disclosure  Private information  Remote Admin Interface  Configuration management  Error messages  Backup files  Public vulnerabilities  Technology Profile

12. OWASP AppSec 2004 Tools  Using Web interface  Athena  GooScan  Using Web Service API  SiteDigger

13. OWASP AppSec 2004 Automated Tools - GooScan

14. OWASP AppSec 2004 Tools - Athena

15. OWASP AppSec 2004 Tools - SiteDigger

16. OWASP AppSec 2004 Tools - SiteDigger

17. OWASP AppSec 2004 Tools - SiteDigger  Version 2 features (tentative release 15 th July)  Proxy support / Google appliance support  XML signatures in OASIS WAS format  Adding signatures for OWASP top 10  Signature contribution option  Raw search tab  Configurable # of results

18. OWASP AppSec 2004 Countermeasures  Keep sensitive data off the web!!  Perform periodic Google Assessments  Update robots.txt  Use meta-tags: NOARCHIVE  http://www.google.com/remove.html. http://www.google.com/remove.html

19. OWASP AppSec 2004 SUMMARY  How Google works  Information disclosure with Google  Tools  Countermeasures

20. OWASP AppSec 2004 Thanks ….for listening Kartik.trivedi@foundstone.com