tailieunhanh - Google hacking for penetration tester - part 50

Gooscan của các tùy chọn thường được sử dụng sẽ được nêu trong tập tin README kèm. Chúng ta hãy xem cách các tùy chọn khác nhau làm việc: | Protecting Yourself from Google Hackers Chapter 12 491 Figure Gooscan s Usage r 0 0 rootlSlocalhost - file final bash K2 Desktop . gooscan gooscan -q query I -i -t target -o -p proxy port -v d s site -x query is a standard google query EX intitle query_file is a list of google queries see README target is the Google appliance server is where the HTML-formatted list of results goes proxy port address port of a valid HTTP proxy for bouncing site restricts search to one domain like are required for appliance scans -v turns on verbose mode -d hex-encodes all non-alpha characters Friendly example gooscan -t -q food -x Sc Iient FDA si te FDA output xmI_no_dtd oe S Ir 8proxystyIesheet FDA Google terms-of-service violations gooscan -t -q linux gooscan -t -q linux -s gooscan -t -f Gooscan google scanner by j0hnny http Desktop Gooscan s most commonly used options are outlined in the included README file. Let s take a look at how the various options work -t target required argument This is the Google appliance or server to scan. An IP address or host name can be used here. Caution Entering here violates Google s terms of service and is neither recommended nor condoned by the author. -q query -i query_file required argument The query or query file to send. Gooscan can be used to send an individual query or a series of queries read from a file. The -q option takes one argument which can be any valid Google query. For example these are valid options -q googledorks -q microsoft sucks -q intitle secret -i input_file optional argument The -i option takes one argument the name of a Gooscan data file. Using a data file allows you to perform multiple queries with Gooscan. See the following list for information about the .