Preventing Google Hacking
Short summary:
Directory listings error pages hidden login pagesall of .... list of all email addresses in your company. If it attempted to do this ...
Long summary:
Preventing Google Hacking Page 1Start Secure. Stay Secure.Preventing Google Hacking Steps to protect your web applicationBy SPI LabsPage 2Start Secure. Stay Secure. 2007 SPI Dynamics Inc. All Rights Reserved.No reproduction or redistribution without written permission. ii Preventing Google Hacking Table of Contents Introduction3Google Hacking Overview3Vulnerability Classification 5Common Misconceptions 6Finding the Data First 8Sorting Through the Results 10Folder and File Scanning 11Conclusion13References 15About SPI Labs 17Contact Information18Page 3Start Secure. Stay Secure. 2007 SPI Dynamics Inc. All Rights Reserved.No reproduction or redistribution without written permission. 3 Preventing Google Hacking Introduction The nature of web sites and applications is to be publicly accessible. Whencombined with search engine functionality it makes it easy for regular users and strangers alike to access your site or find out information about yourorganization. This also comes with a price. When a search engine indexes asite it is also inadvertently providing a treasure trove of information forpotential attackers. Directory listings error pages hidden login pagesall of these can be indexed and even cached via search engines. However there are some tactics security professionals can employ before Google or anyone else has a chance to see the site that can greatly improve its security posture and also some methods of recourse which can be taken if yourapplication has already been indexed by search engines. The aim of this white paper is to describe how a hacker utilizes search engine information to exploit vulnerabilities within a web application detail how to test and findsuch vulnerabilities first and list what to do if your application has already been indexed by search engines. Google Hacking OverviewGoogle Hacking is a process of using crawl data that has already been collected and indexed to look for vulnerabilities and not an attempt to find a vulnerability in Google ...
Source: www.spidynamics.com
Search Terms:
Related
Files under this topic are not filed yet. Please use search bar to find other one
