Google Hacking for Penetration Testers

Bill Gardner is an Assistant Professor at Marshall University, where he teaches information security and foundational technology courses in the Department of Integrated Science and Technology. He is also President and Principal Security Consultant at BlackRock Consulting. In addition, Bill is Vice President and Information Security Chair at the Appalachian Institute of Digital Evidence. AIDE is a non-profit organization that provides research and training for digital evidence professionals including attorneys, judges, law enforcement officers and information security practitioners in the private sector. Prior to joining the faculty at Marshall, Bill co-founded the Hack3rCon convention, and co-founded 304blogs, and he continues to serve as Vice President of 304Geeks. In addition, Bill is a founding member of the Security Awareness Training Framework, which will be a prime target audience for this book. Johnny Long is a Christian by grace, a professional hacker by trade, a pirate by blood, a ninja in training, a security researcher and author. He can be found lurking at his website (http://johnny.ihackstuff.com). He is the founder of Hackers For Charity(http://ihackcharities.org), an organization that provides hackers with job experience while leveraging their skills for charities that need those skills. Justin Brown (@spridel11) is an Information Assurance Analyst at a large financial institution. Previously, Justin worked for as a consultant specializing in Open Source Intelligence. Through Google Hacking and dorks Justin has uncovered numerous troves of information leaks regarding his clients. Justin can usually be found at conferences volunteering with Hackers for Charity.

"This book should be a required read for system administrators and infosec pros in general, as it gives a sobering overview of what type of information that should not be publicly available can be found online - if you know how to look for it." --Help Net Security

• Chapter 1 Google Searching BasicsChapter 2 Advanced OperatorsChapter 3 Google Hacking Basics – The new location of the GHDBChapter 4 Document Grinding and Database Digging – Finding Reports Generated By Security Scanners and Back-Up FilesChapter 5 Google’s Part in an Information Collection FrameworkChapter 6 Locating Exploits and Finding TargetsChapter 7 Ten Simple Security Searches That WorkChapter 8 Tracking Down Web Servers, Login Portals, and Network Hardware - Finding Sensitive WordPress and SSH ConfigurationChapter 9 Usernames, Passwords, and Secret Stuff, Oh My! – Finding GitHub, SQL, Gmail, Facebook, and other PasswordsChapter 10 Hacking Google ServicesChapter 11 Google Hacking ShowcaseChapter 12 Protecting Yourself from Google HackersChapter 13 Scripting Google Hacking For Better SearchingChapter 14 Using Google Hacking with Other Web Search Engines and APIs