tailieunhanh - Google hacking for penetration tester - part 18

Ngoài ra, bạn sẽ nhận được kết quả từ các trang web không nằm trong miền gov **** Làm thế nào để chúng ta có được kết quả nhiều hơn và giới hạn tìm kiếm của chúng tôi vào miền gov ****.? Bằng cách kết hợp các truy vấn với từ khoá và các nhà khai thác khác. Xem xét các trang web truy vấn : | Google s Part in an Information Collection Framework Chapter 5 171 Also you will be getting results from sites that are not within the .gov domain. How do we get more results and limit our search to the .gov domain By combining the query with keywords and other operators. Consider the query site .gov -www. . query means find any result within sites that are located in the .gov domain but that are not on their main Web site. While this query works beautifully it will again only get a maximum of 1 000 are some general additional keywords we can add to each query. The idea here is that we use words that will raise sites that were below the 1 000 mark surface to within the first 1 000 results. Although there is no guarantee that it will lift the other sites out you could consider adding terms like about official page site and so on. While Google says that words like the a or and so on are ignored during searches we do see that results differ when combining these words with the site operator. Looking at these results in Figure shows that Google is indeed honoring the ignored words in our query. Figure Searching for a Domain Using the site Operator More Combinations When the idea is to find lots of results you might want to combine your search with terms that will yield better results. For example when looking for e-mail addresses you can add 172 Chapter 5 Google s Part in an Information Collection Framework keywords like contact mail e-mail send and so on. When looking for telephone numbers you might use additional keywords like phone telephone contact number mobile and so on. Using Special Operators Depending on what it is that we want to get from Google we might have to use some of the other operators. Imagine we want to see what Microsoft Office documents are located on a Web site. We know we can use the filetype operator to specify a certain file type but we can only specify one type per query. As a result we will need to automate the .