Google Hacking Database or GHDB is not a database by using which you can hack Google. Instead, it is used to access the ultimate power of search behind Google’s search engine.
How does Google Search Work?
While you are searching on Google, you are not searching the vast internet but instead, you are searching in Google’s Database.
Google uses a specialized software called as a Spider. This spider crawls a webpage and links in particular. These links redirect the spiders to a new webpage and the process continues.
A large chunk of data, which is the index will be created by the spiders.
When you search anything on Google. Google search compares the keywords that you entered with the index in their database.
What is Google Hacking?
Google hacking doesn’t mean that we are hacking the Google itself. It means that we are going to use some tips and tricks to get the most out of the search engine.
Google hacking can be used to search for and locate security vulnerabilities in web applications on the internet.
Hackers use Google Hacking to get access to sensitive information. For example, Credit card data.
Google hacking helps us to construct a customized search query using different operators which can be used to access any information available on the internet.
Google’s search operators
Google’s search interface uses 2 types of operators:
- Basic operators (symbols)
- Advanced operators (queries)
- Basic operators
- “ ” (double quotes): Accurate Sentences.
- – (minus): Excludes a value or a keyword.
- + (add)): Includes a value or a keyword.
- . (Dot): One wild card character.
- .. (Num Range): Creates a number range between two numbers.
- * (Asterisk): Empty place for a number or string.
- ~ (Tilde): Synonyms of the keywords.
2. Advanced Operators
- Define – Displays a word definition.
- Related – Displays related websites.
- Similar – Displays similar websites.
- Cache – Displays a webpage cache
- Info – Displays the information about a webpage.
- Filetype – Finds a particular type of file.
- Inurl – Finds a keyword in a URL.
- Intitle – Finds a keyword in a Title.
- Site – Concentrated search on a particular website.
When several operators are combined in a search, the best use of advanced operators is made.
For example: Male designer intitle:”Resume” filetype:pdf
Directory listing using Google Search
Yes, you heard it right. You can list directories of webpages by forming the following queries:
- intitle:index.of server at
- intitle:index.of server at site: microsoft.com
- intitle:index.of “parent directory”
- intitle:index.of name size
Accessing unauthorized programs
You can even access the PHP files on a website’s server using the following query:
- “PHP Version” intitle:phpinfo inurl:info.php
Getting texts and passwords
You can get access to login credentials from a less secure site using the following query:
- ext:log inurl:”password”
Getting access to live cameras
Various random live cameras can be accessed by using the following queries:
- inurl:/view.shtml – Accessing security cameras, car parking, colleges etc…
- inurl:/view/index.shtml – Security cameras, airport, traffic cameras etc…
- inurl:viewerframe?mode= – Network and Private cameras.
- inrul:viewerframe?mode=motion – Network cameras.
- inurl:viewerframe?mode=refresh – Parks, security cameras etc…
Google’s search is a powerful tool that is found in today’s generation. It’s all up to you how you mix and match the operators to form complex queries.
The better queries you form the more redefined results will be displayed.