tailieunhanh - Google hacking for penetration tester - part 23

Một cách khác để tìm ra những gì mọi người đang tìm kiếm là để nhìn vào Referer: tiêu đề của các yêu cầu đến với trang web của bạn. Tất nhiên có ý tưởng ở đây được rằng ai đó tìm kiếm cái gì trên Google, trang web của bạn hiển thị trên danh sách kết quả, và họ nhấp vào liên kết trỏ đến trang web của bạn. Trong khi điều này có thể không được siêu thú vị cho những người có các trang web lưu lượng truy cập không hay thấp, nó hoạt động tuyệt. | Google s Part in an Information Collection Framework Chapter 5 221 Referrals Another way of finding out what people are searching for is to look at the Referer header of requests coming to your Web site. Of course there are idea here being that someone searches for something on Google your site shows up on the list of results and they click on the link that points to your site. While this might not be super exciting for those with none or low traffic sites it works great for people with access to very popular sites. How does it actually work Every site that you visit knows about the previous site that you is sent in the HTTP header as a referrer. When someone visits Google their search terms appear as part of the URL as it s a GET request and is passed to your site once the user arrives there. This gives you the ability to see what they searched for before they got to your site which is very useful for marketing people. Typically an entry in an Apache log that came from a Google search looks like this - - 10 Jul 2007 11 45 25 -0400 GET HTTP 304 - http search hl en q evolution beta gui btnG Search Mozilla Windows U Windows NT en-GB rv Gecko 20070515 Firefox From this entry we can see that the user was searching for evolution beta gui on Google before arriving at our page and that he or she then ended up at the page. A lot of applications that deal with analyzing Web logs have the ability to automatically extract these terms for your logs and present you with a nice list of terms and their frequency. Is there a way to use this to mine search terms at will Not best option and it s really not that practical is to build a popular site with various types of content and see if you can attract visitors with the only reason to mine their search terms. Again you ll surely have better uses for these visitors than just their search terms. 222