Google Hacking
The Google Hacking Database (GHDB) is a database of queries that identify sensitive data. Although Google blocks some of the better known Google hacking queries, nothing stops a hacker from crawling your site and launching the Google Hacking Database queries directly onto the crawled content.The GHDB is maintained by Johhny Long who is a "white hat" Hacker. He made google hacking public in his site: http://johnny.ihackstuff.com/ and he called it Google Hacking Database(GHDB) .There are more than 1500 queries in the GHDB. In Around 1995, it started as not so serious project about discovering network vulnerabilities through Google Search Engine. As Google crawlers crawl on almost every file it can access, many confidential information leak out sometimes. The list of what Long and his fellow Google hackers have been able to dig up is impressive: passwords, credit card numbers and unsecured Web interfaces to things like PBXs, routers and Web sites.
Hackers also use Google for reconnaissance. One of the most basic techniques is to wait for a major security bulletin and then use Google to search for Web sites that are "powered by" the buggy software. Attackers can also map out computer networks using Google's database, making it impossible for the networks' administrators to block the snooper.
Often, this kind of information comes in the form of apparently nonsensical information, something that Long calls "Google turds." For example, because there is no such thing as a Web site with the URL "nasa," a Google search for the query "site:nasa" should turn up zero results. Instead, it turns up what appears to be a list of servers, offering an insight into the structure of NASA's internal network, he says.
But some of the most interesting hacks occur when Google's servers are tricked into doing work for the hackers, Long says. A recent trend has been to create Web pages with thousands of fake links that trick Google into doing hacker reconnaissance work. The technique works on Web sites that require URLs with embedded user names and passwords for access to some areas.
"You load up this page so it has the same user name, but you try a bunch of different passwords in the links," Long says. "Then the search engine picks up those links and tries to follow them all, but only caches the one that works. So then you go back and pick up your results, and you've actually got the search engine doing your dirty work.What a hacker can do if your site is vulnerable
Information that the Google Hacking Database identifies:
- Advisories and server vulnerabilities
- Error messages that contain too much information
- Files containing passwords
- Sensitive directories
- Pages containing logon portals
- Pages containing network or vulnerability data such as firewall logs.
- Vulnerable Files
- Detection of Online Devices
- Web Server Profiling
Adding a Google Custom Search engine in your site
Go to http://www.google.com/coop/cse/. After that check for
Click Create Button.You will see a Form. Let's Start with the Basic Configuration.
Some of these steps are less relevant when you're creating a one-site search engine, but nonetheless, a nice search engine name and description are useful, as are some keywords, requested in the next section:
If your site has information in multiple languages, definitely make sure you choose the predominant language here, and if you're just in English, like I am, then the default works just fine.
Next you need to decide if you are going to create a search engine for multiple sites or just one. Since we're doing an on-site engine, let's just stick with one for the results, as you can see:
Since you want to search your entire site, use the notation shown, of www.xyz.com/* (most likely using www.xyz.com will work too, but the "/*" is what Google recommends, so it's best to play by their rules!)
As you can see, I'm opting for the free one, because I'm okay with ads showing up in the search results as long as I make a small slice of the revenue stream generated from those advertisers.
Finally, it's time to click "Next", at which point you can try out a few searches and ensure it's working, then click "Finish" and you're done!
Now the interesting part, customizing the appearance and getting the code you can add to your site so that the search actually works.
To get the code you need for the page that'll host the search results, click on Code. There are a couple of choices for what kind of behavior you want for the search: You want the default choice of an iframe, which gives you some simple code you can drop on all your pages for the search box and then lets you create a custom template page with code, also from Google, that incorporates the search results.
Now Google offers up a block of code that implements the search box itself. When I paste it into this blog entry, it results in:
Try it if you want, see what happens...
The other block of code you get from Google is the code to put in the search results page, and that too is a sequence of mysterious HTML and Javascript. But it's easily added. If you tried a search, above, you've already had a chance to see the resultant page in action. To get it to work, all I added was the following code in the "middle" of the page HTML:
var googleSearchIframeName = "results_013314643351057663050:lozwmpsfbnu";
var googleSearchFormName = "searchbox_013314643351057663050:lozwmpsfbnu";
var googleSearchFrameWidth = 600;
var googleSearchFrameborder = 0;
var googleSearchDomain = "www.google.com";
var googleSearchPath = "/cse";
</script>
<script type="text/javascript" src="http://www.google.com/afsonline/show_afs_search.js">
</script>
Display your SIte in Multiple Languages
Use Google's Translation Service . Use the Following piece of Javascript + HTML code.
<select name="translate" style="height:18px; font-size:10px;" onchange="javascript:window.location = http://www.google.com/translate_c?hl=en&langpair=en%7C' + this.value + '&u=' + window.location.href;">
<option value="">Translate This Page</option>
<option value="ar">Arabic</option>
<option value="zh-CN">Chinese Simplified</option>
<option value="zh-TW">Chinese Traditional</option>
<option value="nl">Dutch</option>
<option value="fr">French</option>
<option value="de">German</option>
<option value="el">Greek</option>
<option value="it">Italian</option>
<option value="ja">Japanese</option>
<option value="ko">Korean</option>
<option value="pt">Portuguese</option>
<option value="ru">Russian</option>
<option value="es">Spanish</option>
</select>
The following code supports quite a few languages. if u don't want any of theses languages, just cut off the respective lines of code.
If Google Made an OS
Google has been going strong ever since it's inception and it's performance today is very much tough to compare with anyone else. Google has been coming up with various products that are very useful in this internet age.
If Google brings out an OS I would personally want it like that:
- It would be better if they make it free like all other products. I think free software is our right. I don't think it as free beer but free speech.
- Trying out a new OS will take some time but if they bring out a Google version of an existing OS say linux. It would be even better.
- Search Technology will be good in a Google Product.But I want their other technologies also used here. If we can use all the processing power of all the computers in a network it would be even better.That is Processing power Sharing
- It would be even better if we can use the processing power of all Google Linux Computers coonected to the internet at a particular time.
Hope I see it soon. and i don't hv to use much of windows.