Mastering Kali Linux for Web Penetration Testing
上QQ阅读APP看书,第一时间看更新

Open source Intel with Google and the Google hacking database

Search engines are now so integral to our hyper-connected global society that it is easy to overlook each engine's strengths and capabilities. Google, Bing, and to a lesser degree, Yahoo have dominated the market in the United States, but given that our role as a pen tester may cross borders, it is useful to work with engines and their localizations to ensure we are getting the most up-to-date information.  The Search Engine Colossus (https://www.searchenginecolossus.com) provides the leading options in each of the countries, including those that are embargoed. General information searches, especially those in non-technical realms, should include search engines local to the target or their partner organizations. Google's search engine, however, provides excellent coverage and extensive syntax all its own that can take those general engine findings and use them with great efficacy to unearth architectural details, sensitive files, and potential ways into our target's servers.