Acrobat X Files

Home > Hacking > Google Hacking

Integrating Google Hack and GenIII Honeypots

Sort Desciption:

... this threat. GHH ispoweredbythe Googlesearch engine index and the Google Hacking Database ... need some preliminary results. 3 Summary This document should bring forward new ideas how to integrate Google ...

Content Inside:

Integrating Google Hack and GenIII Honeypots Thorsten Holzand Ryan McGeehan January 18,2006 1 Introduction This document describes some ideas how to integrate twodierent techniques from the area of honeypot-based research. On one hand, there are Google Hack Honeypotsandon the other GenIII Honeypots. At first, we will give abriefin- troductiontoGoogle Hack Honeypotssince presumably not everyone is familiar with this concept. The concept of GenIIIhoneypots should be familiar. 1.1 GoogleHack Honeypots (GHH) From http://ghh.sourceforge.net/: Google HackHoneypot is the reaction to anew type of malicious webtrac: search engine hackers. GHH is a"Google Hack"honeypot. It is designed to providereconaissance against attackers that use search engines as a hacking tool against your resources. GHH implementshoneypot theory to provide additional security to your web presence. Googlehas developeda powerful tool. The search engine that Googlehas implemented allows for searching on an immense amount of information. The Googleindexhas swelled past 8 billion pages (in February 2005) and continues to grow daily. Mirroring the growth of the Googleindex, the spread of web- based applications such as message boards and remote administrative tools has resulted in an increase in the number ofmisconfigured and vulnerable web appsavailableon the Internet. These insecure tools, when combined with the power of a search engine and index which Google provides, results in a convenient attack vector for malicious users. GHH isatooltocombat this threat. GHH ispoweredbythe Googlesearch engine index and the Google Hacking Database (GHDB) maintained by the johnny.ihackstu. comcommunity. Figure1: Explanation at GHH homepage AGHH allowsustolearn more about automated attacks that use Googleor other search engines to find its target. This is anew way to scan for vulnerable hosts and in contrast to simpleportscans, this technique is rather s ...

Source: www.chicagohoneynet.org

 

Related Files

Google Hacking and Defense Cheat Sheet

Filed under: Hacking and Google Hacking
Google Hacking and Defense Cheat Sheet P OCKET R EFERENCE G UIDE SANS Stay Sharp Program http://www.sans. org http ... could also use this sheet as guidance in building innovative operator combinations and new ...

Hacking Google

Filed under: Hacking and Google Hacking
Hacking Google. How to Find and Creat Free Quality. Research Databases on the Web. R Philip Reynolds. Stephen F. Austin State University ...

Google Hacking 101

Filed under: Hacking and Google Hacking
Google Hacking 101. Edited by Don Doumakes. and. Matt Payne CISSP. 15 June 2005 ... Wrote Google Hacking for Penetration. Testers; ISBN 1931836361 ...

Google Hacking

Filed under: Hacking and Google Hacking
Google hackingthe practice of using specially crafted search engine queries to cull information about a targetis now a feather in ...

Google Hacking - The Basics Maniac

Filed under: Hacking and Google Hacking
Hacking - The Basics •What exactly is Google Hacking? •Google Hacking involves using the Google search ... drupal sites that havent been configured yet. •-inurl:drupal.org intext: