10/21/2008

Google Hacking Belgian Sites : some practical tips

The book to read (you can get it in the amazon club next to here)

dutch, vlaams Mijn allereerste artikel over Google Hacking

* what we already found before

* Who is working at the callcenter of the Flemish Administration ?

* check out if you are a spammer or blacklisted

* check out if Google found the files you have on your server. This was a test with exell files and emailadresses. We have seen that the problemsites have taken the files away. You can test this with whatever filetype. If you have for example confidential word documents you do filetype:doc and so on

* check out if your logfiles are available. The less information that you give, the better. So keep your logfiles and errorfiles private at all times.

* Find the links to your PC (the local folder on your pc where you keep your files) so a virus can be written to attack exactly that folder

* Find still 200 IIS 5 servers (we are at 6 or better 7 now) in .be today

* Find technical information about the servers (change or delete that) and error messages

11:11 | Permalink | Comments (0) | Email this | |  del.icio.us | | Digg! Digg |  Facebook

Post a comment