Complete Google Hacks List Posted in How To 0 comments Google logo Complete Google Hacks List (and some

more) is moved here from the co mment. I hope `ll ensemble older short list of examples for efective search (hacki ng google). Sometimes you want to find all of your search terms in a document, a nd sometimes you want to find either one term or another. The term for this type of search is Boolean. The term Boolean comes from Nineteenth Century mathematician George Boole. Boolean logic is something that is used in all sorts of computing ap plications, not just search engines. Thx to handymann81 How to Find Some or All of Your Search Terms in Google There are two basic Boolean search commands supported in Google, AND and OR. AND searches search for all the search terms, Car AND Insurance, (all documents conta ining both Car and Insurance) while OR searches search for one term or the other , Car OR Insurance. (all documents containing either Car or Insurance) AND Google defaults to AND searches automatically, so you don't need to type AND into th e search engine to get that result. OR If you want to find one keyword or another, use the term OR. It's important that y ou use all caps, or Google will ignore your request. To find all documents containing either sausages or biscuits, type: sausages OR biscuits. You can also substitute the | character for OR, so sausages | biscuits searches for the same thing. Adding Phrases If you're searching for a phrase rather than just a single word, you can group the words together with quotation marks. Searching for sausage biscuits will search f or only the exact phrase sausage biscuits. It will ignore sausage and cheese bis cuits. Searching for sausage biscuits |cheese sauce searches for either the exact ph rase sausage biscuits or the exact phrase cheese sauce. If you're searching for more than one phrase or keyword in addition to the Boolean , you can group them with parenthesis, such as recipes gravy (sausage | biscuit) to search for gravy recipes for either sausages or biscuits. You could even com bine exact phrases and search for sausage biscuit ( Find Exactly What You Want Sometimes you want to exclude a keyword from Google searches, and sometimes you want to include a word that Google thinks is too common and usually excludes. Including Words Google automatically ignores many common words, such as and, or, of, a, etc. It also ores some single digits or letters. This is usually not a bad thing, because the common words would just slow searches down and not yield better results. Occasionally it might be important to include one of these words in your search results. There are two ways to do this. One technique is to use quotation marks. Anything inside quotation marks is automatically included in the search, and th e search will include the exact phrase. For instance, Rocky I searches for the exa ct phrase Rocky I and will not find lyrics to I Love Rocky Road.

Another way to force common words in your searches is with the plus sign. Search ing for Rocky +I would find references to the movie and the Weird Al song. Make sure that you do put a space before the plus sign and do not put a space between the plus sign and the search word you want to include. Otherwise, the forced in clusion won't work. Excluding Words In some search engines, you'd exclude words by using the NOT syntax. This doesn't work with Google. Use the minus sign instead. If you were researching health issues, and you wanted to find out about pot bell ies, you wouldn't want to find out about pot-bellied pigs. To conduct this search, you could type pot bellied -pig. Just as with the plus sign, put a space before t he minus sign but do not put a space between the minus sign and the word or phra se you want excluded. You can also exclude a phrase by enclosing it in quotation marks, so if you were researching livestock swine, you could search for pigs -pot bellied to exclude an y mention of pot-bellied pigs. This wouldn't exclude pages that talked about pig b ellies, because it only excludes the exact phrase pot bellied. How to Search Only the Body Text of Pages in Google Ignore Links, Titles, and URLs. Occasionally you might want to restrict your sea rches to only the text of Web sites and ignore all the links, Titles, and URLs. This might be useful if you wanted to find Web pages that were talking about oth er Web sites. The command to search only the body text is intext: To find Web pa ges talking about Google, for example, you could search for: intext:review google.com You can also use the variation allintext: Allintext searches for all of the spec ified words in the body text, but it can't be combined with other commands. How to Search Within Web Site Titles - Find Web Pages by Title. The title of a Web page is the name of the page as it a ppears on the top of your Web browser. For instance, the title of this page is H ow to Search Within Web Site Titles Using Google's Intitle: Syntax. Sometimes you may want to find Web pages where one or more words appear in the t itle of the page. For instance, many Web pages may mention feeding iguanas, even if that's not the main focus of the page. If you'd like to find a page dedicated to iguana feeding, you can use the Google syntax intitle: to force Google to only list results that have the word feeding in the title. Do not put a space between t he colon and the next word. The search would look something like this: intitle:feeding iguana This will find Web pages that are relevant to the keyphrase feeding iguana, and it will only list results that have the word feeding in the title. If you'd like to restrict the search further, you could search for: intitle:feeding intitle:iguana You can also use the syntax allintitle: which only list results where all the wo rds in the key phrase are in the title. allintitle:iguana feeding

How to Restrict Your Search to Specific File Types - Find by File Type. Google can let you restrict your searches to only certain f ile types. This can be very helpful if you're looking specifically for file types, such as PowerPoint, (ppt) Word, (doc) or Adobe PDF. To restrict your search to a specific file type, use the filetype: command. For example, try searching for: hotel filetype:doc You can use this same syntax with Google Desktop. To search for that forgotten w idget report, try: widget report filetype:doc How to Use Google to Search Withing a Single Web Site Ever want to use Google to search a single Web site? You can use Google's site: syntax to restrict your search to a single Web site. Ma ke sure there's no space between site: and your Web site. Follow with a space and then your search terms. You don't need to use the http:// portion of your URL. site:googlepowersearch.com power search his same search can be widened to include all the Web sites within a domain. site:edu books site:com vacation site:co.uk holiday Google's site: syntax can be mixed with other syntax How to Restrict Your Google Search to Specific Domains or Specific Countries - Easy Google Trick to Find Better Results. Most Web sites have a .com domain na me. Sometimes it's better to restrict your searches to other domains, such as .edu or .net. One great example of this is if you are looking for information about textbooks, but you didn't want to buy a textbook. An unrestricted Google search would mostly yield results from Web sites selling textbooks. One way to avoid this problem i s to restrict your search to American universities. To do this, you'd search for: site:edu textbook You can use this to restrict searches are to US government sites site:gov, or on ly specific countries site:uk. You can combine the site: syntax with many other types of Google syntax I'm Feeling Lucky ButtonTM Are You Feeling Lucky? One of the most notable objects on the Google Web search is the I'm Feeling LuckyT M button. The button may have been named as a play on the Clint Eastwood line in the movie Dirty Harry. Do you feel lucky, punk? Well, do you? Ordinarily when you type in a key phrase in a Google search, you press the searc h button, (you can also just press return or enter on your keyboard) and Google returns a results page that shows multiple Web sites matching your search phrase

. The I'm Feeling LuckyTM button skips the search results page and goes directly t o the first ranked page for that search phrase. If you type white house in the search box and press I'm Feeling LuckyTM you'll go stra ight to www.whitehouse.gov. If you type apple into the search box and press I'm Feel ing LuckyTM you'll go directly to Apple Computer's Web site. I'm Feeling LuckyTM is very handy if you're fairly confident that the first result i n the search engine is going to be exactly the page you want to find. It saves t ime and clicking to just go to the page with the first click. Using the I'm Feelin g LuckyTM button is also a common game for Google bombs. It adds an element of s urprise to the joke. Searches So, for starters here is a query that will give you a search results page of unp rotected directories: -inurl(html|htm|php) intitle:index of +last modified +parent directory +descriptio n +size But, this is kind of boring. Too many unknown program files, text files, web pag es etc. Let's narrow it down. You can narrow it down by looking for something in t he name of a file in the list, or by the file type, or both. For example, this query tries to find any types of files about Jennifer Lopez. W ithin the directories I found music, image and movie files. -inurl(html|htm|php) intitle:index of +last modified +parent directory +descriptio n +size +jennifer lopez Let's say that we wanted to find any movie files in WMV or AVI format: -inurl(htm|html|php) intitle:index of +last modified +parent directory +descriptio n +size +(wmv|avi) Or audio files in WMA or MP3 format: -inurl(htm|html|php) intitle:index of +last modified +parent directory +descriptio n +size +(wma|mp3) Or images in JPG or GIF format: -inurlhtm|html|php) intitle:index of +last modified +parent directory +description +size +(jpg|gif) You can get more specific by specifying both the file types and a search word to hopefully find in the name. For example, the following will attempt to find the infamous Paris Hilton video tape: -inurlhtm|html|php) intitle:index of +last modified +parent directory +description +size +(wmv|avi) paris hilton Or, you can even take a guess at the file name someone might call it: -inurl(htm|html|php) intitle:index of +last modified +parent directory +descriptio n +(paris_hilton.wmv|paris_hilton.avi) So there you go. You can combine various search terms and experiment with this. As you've seen, this is not an exact science. The directory pages you bring up may have many or even all files which are unrelated to what you are looking for. Bu

t, it does make some good hits very often. Files containing juicy info Squid cache server reports. Google Search: cacheserverreport for This analysis was produced by calamaris Admin rates this entry 5 out of 10. Submitted: 2003-06-24 12:41:16 Added by: Admin Hits: 4111 Score: 5 These are squid server cache reports. Fairly benign, really except when you cons ider using them for evil purposes. For example, an institution stands up a proxy server for their internal users to get to the outside world. Then, the internal user surf all over to their hearts content (including intranet pages cuz well, the admins are stupid) Voila, intranet links show up in the external cache repor t. Want to make matters worse for yourself as an admin? OK, configure your exter nal proxy server as a trusted internal host. Load up your web browser, set your proxy as their proxy and surf your way into their intranet. Not that I've noticed any examples of this in this google list. *COUGH* *COUGH* *COUGH* unresolved DNS lookups give clues *COUGH* *COUGH* ('scuse me. must be a furball) OK, lets say BE ST CASE scenario. Let's say there's not security problems revealed in these logs. Be st case scenario is that outsiders can see what your company/agency/workers are surfing. Ganglia Cluster Reports Google Search: intitle:Ganglia Cluster Report for Admin rates this entry 2 out of 10. Submitted: 2003-06-24 12:44:17 Added by: Admin Hits: 2639 Score: 2 These are server cluster reports, great for info gathering. Lesse, what were tho se server names again? ICQ chat logs, please Google Search: intitle:Index of dbconvert.exe chats Admin rates this entry 2 out of 10. Submitted: 2003-06-24 12:45:51 Added by: Admin Hits: 10557 Score: 2 ICQ (http://icq.com) allows you to store the contents of your online chats into a file. These folks have their entire ICQ directories online. On purpose? AIM buddy lists Google Search: buddylist.blt Admin rates this entry 4 out of 10. Submitted: 2003-06-24 14:21:05 Added by: Admin Hits: 19846 Score: 4 These searches bring up common names for AOL Instant Messenger buddylists. These l

ists contain screen names of your online buddies in Instant Messenger. Not that's no t too terribly exciting or stupid unless you want to mess with someone's mind, and besides, some people make these public on purpose. The thing that's interesting a re the files that get stored ALONG WITH buddylists. Often this stuff includes do wnloaded pictures, resumes, all sorts of things. This is really for the peepers out there, and it' possible to spend countless hours rifling through people's person al crap. Also try buddylist.blt, buddy.blt, buddies.blt. site:edu admin grades Google Search: site:edu admin grades I never really thought about this until I started coming up with juicy examples for DEFCON 11.. A few GLARINGLY bad examples contain not only student grades and names, but also social security numbers, securing the highest of all googledork ratings! phpMyAdmin dumps Google Search: # phpMyAdmin MySQL-Dump filetype:txt From phpmyadmin.net : phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the WWW. Great, easy to use, but don't leave your data base dumps laying around on the web. They contain all SORTS of sensitive informa tion Sensitive Online Shopping Info intext:Powered by X-Cart: shopping cart software -site:x-cart.com Google Search: intext:Powered by X-Cart: shopping cart software -site:x-cart.c om X-Cart (version 4.0.8) has multiple input validation vulnerabilities. There does n't seem to be any way to search for specific versions of the software with Google . See http://www.securitytracker.com/alerts/2005/May/1014077.html for more infor mation. Ups Package tracking Google Search: site:ups.com intitle:Ups Package tracking intext:1Z ### ### ## # ### ### # Ever use the UPS Automated Tracking Service?? Wanna see where packages are going ? Want to Man-in-the-middle their delivery? Well, then here it is. -Digital Spir it Comersus.mdb database Google Search: inurl:/database/comersus.mdb Comersus is an e-commerce system and has been installed all over the world in mo re than 20000 sites. Using Comersus does not require that you know any programmi ng language. BackOffice+ allows you to define virtually all properties of your o n-line store through an intuitive, point-&-click interface. This search goes dir ectly for one of the MS Access files used by the shopping cart. Searching Google and the well know security sites for Comersus reveals more security problems. VP-ASP Shop Administrators only Google Search: inurl:shopadmin.asp Shop Administrators only VP-ASP (Virtual Programming ASP) has won awards both in the US and France. It is now in use in over 70 countries. VP-ASP can be used to build any type of Intern et shop and sell anything. It has been reported that the Shopping Cart Administr

ation script is vulnerable to XSS and SQJ injection, resulting in exposure of co nfidential customer information like credit card details. Various Online Devices Google Search: powered by webcamXP Pro|Broadcast WebcamXP PRO:http://www.webcamxp.com/productsadv.html. This is the most advanced version of the software. It has all the features of the other versions (includi ng advanced users management, motion detector, and alerts manager) plus remote a dministration and external server notification when going offline/online. Axis Network Cameras Google Search: inurl:indexFrame.shtml Axis The AXIS 2400 is a Web server of its own. This means that the server is secured like any other Internet host. It is up to the network manager to restrict access to the AXIS Web Cameras camera server. AXIS Network cams have a cam control pag e called indexFrame.shtml wich can easily be found by searching Google. An attac ker can look for the ADMIN button and try the default passwords found in the doc umentation. An attacker may also find that the directories are browsable. Additi onal security related information was found on the Internet. Seyeon FlexWATCH cameras Google Search: intitle:flexwatch intext:Home page ver

Seyeon provides various type of products and software to build up a remote video monitoring and surveillance system over the TCP/IP network. FlexWATCH Network video s rver series has built-in Web server based on TCP/IP technology. It also has an e mbedded RTOS. The admin pages are at http://sitename/admin/aindex.htm. camera linksys inurl:main.cgi Google Search: camera linksys inurl:main.cgi Another webcam, Linksys style. How to Use Google's Hidden Calculator Calculate, Measure, Convert, and More Not only can you search the Web with Google, you can use it as a calculator. Google's calculator is more than an ordinary number cruncher. It can calculate bot h basic and advanced math problems, and it can convert measurements as it calcul ates. You don't even need to restrict yourself to numbers. Google can understand m any words and abbreviations and evaluate those expressions, too. Google's calculator was designed to solve problems without a lot of math syntax, s o you may occasionally find calculator results when you didn't even realize you we re searching for the answer to a math equation. To use Google's calculator, simply type in whatever you'd like to be calculated in t he search box above. For instance, you could type: 3+3 and Google will return the result 3+3=6. You can also type in words and get resu lts. Type in three plus three and Google will return the result three plus three =six. You know your results are from Google's calculator when you see the picture of the calculator to the left of the result. Complex Math Google can calculate more complex problems such as two to the twentieth power, 2 ^20 the square root of 287, sqrt(2870 or the sine of 30 degrees.

sine(30 degrees) You can even find the number of possible groups in a set. For instance, 24 choose 7 finds the number of possible choices of 7 items from a group of 24 items. Convert and Measure Google can calculate and convert many common measurements, so you could find out how many ounces are in a cup. oz in a cup Google's results reveal that 1 US cup = 8 US fluid ounces. You can use this to con vert just about any measurement to any other compatible measurement. 12 parsecs in feet 37 degrees kelvin in Fahrenheit You can also calculate and convert in one step. Find out how many ounces you hav e when you have 28 times two cups. 28*2 cups in oz Google says that 28 * 2 US cups = 448 US fluid ounces. Remember, because this is a computer based calculator, you must multiply with the * symbol, not an X. Goo gle recognizes most common measurements, including weight, distance, time, mass, energy, and monetary currency. Math Syntax Google's calculator is designed to calculate problems without a lot of complicated math formatting, but sometimes it's easier and more accurate to use some math syn tax. For instance, if you want to evaluate an equation that looks like a phone n umber, 1-555-555-1234 Google will probably confuse this with its hidden phonebook. You can force Googl e to evaluate an expression by using an equal sign. 1-555-555-1234= This only works for problems that are mathematically possible to resolve. You ca n't divide by zero with or without an equal sign. You can force parts of an equati on to be resolved before other parts by enclosing them in parenthesis. (3+5)*9 Some other math syntax Google recognizes: + for addition - for subtraction * for multiplication / for division ^ for exponential (x to the power of y) % for modulo (to find the remainder after division) choose X choose Y fines the number of possible subset groups of Y out of the

set of X. th root of creates the nth root of a number % of finds percentages X % of Y finds X percent of Y. sqrt finds the square root of the number that follows ln logarithm base e log logarithm base 10 lg logarithm base 2 ! factorial This must follow the number you wish to factor. Google's calculator isn't completely documented, so it may take some experimenting t o find all of the hidden features. The next time you find yourself wondering how much five liters is in gallons, rather than searching for a Web site for conver sion, just use Google's hidden calculator. How to Use Google as a Dictionary - Unlock Google's Hidden Dictionary. You may notice occasionally when you're searchi ng for a word, Google will offer a link to Web definitions of your word. This is part of Google's hidden dictionary, a search of definitions on the Web. Say you'd like to find out what a clew is. You could search for define clew, and mos t of the search results would have some sort of definition. However, this is rea lly just a keyword search, so some of the results might be long articles on clew s or only mention the definition in passing. Define: Your Terms If you're really only interested in finding a quick dictionary style definition of clew, use the syntax define:. The search in this case would be define: clew. Fr om that search, we can instantly see that a clew is the lower corner of a boat s ail. The information is coming from a variety of dictionary related Web sites, and th ere's a link to the full entry for each Web site. Google also provides links to re lated searches, such as clew bay. What If You Can't Spell? If you aren't the best speller or you make a typo, don't worr y. Google will still suggest an alternate search, just as it does for regular We b searches. If we type in define: cliw, Google helpfully asks Did you mean: defin e: clew. Use Google as Your Phonebook - Let Your Keyboard Do the Walking. Google's phonebook can find US public business and residential numbers, and it can find them with less information than you ne ed to look through the paper phonebook. Google's phonebook is hiding within http:/ /www.google.com. Occasionally, phone numbers will appear in the search results p age, depending on the keywords you type into the search box. To access the phone book directly, type phonebook: before your search. This opens up Google's resident ial phonebook. You can find someone's phone number, but you do have to give Google a little infor mation. For personal numbers, you generally need at least a last name and a stat e. To find all the Smiths in Alaska, for example, type phonebook: smith ak. That's a lot of Smiths, and probably not very useful to find a specific Smith. If you know more information, such as the city you're looking for or the full name, type that in, too. Limitations Google's phonebook can only find public phone numbers. It can't find cell numbers. Q uite often the numbers are outdated. I found two outdated phone numbers for a re lative of mine, and his current phone number wasn't listed at all, even though it

is public. Reverse Lookup Say you have a phone number and you want to find out who's number it is, such as f rom a message left on your cell phone. To do a reverse lookup, simply type the p hone number into the main Google search engine, including the area code. Type us ing the format 555-555-5555 for best results. Google will still find the phone n umber if you use parenthesis around the area code, but you may also find some ir relevant results. Remember, Google's phonebook doesn't contain any cell phone data. Find Business Phone Numbers Business phone numbers appear within Google search results, but they aren't as eas y to access from the phonebook. How to Use Google to Snoop Security Cams Here's something fun to do when you're bored. Just copy paste one of the lines below into Google search. Happy snooping! * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * inurl:ViewerFrame?Mode= intitle:Axis 2400 video server inurl:/view.shtml intitle:Live View / AXIS | inurl:view/view.shtml^ inurl:ViewerFrame?Mode= inurl:ViewerFrame?Mode=Refresh inurl:axis-cgi/jpg inurl:axis-cgi/mjpg (motion-JPEG) inurl:view/indexFrame.shtml inurl:view/index.shtml inurl:view/view.shtml liveapplet intitle:live view intitle:axis intitle:liveapplet allintitle:Network Camera NetworkCamera intitle:axis intitle:video server intitle:liveapplet inurl:LvAppl intitle:EvoCam inurl:webcam.html intitle:Live NetSnap Cam-Server feed intitle:Live View / AXIS intitle:Live View / AXIS 206M intitle:Live View / AXIS 206W intitle:Live View / AXIS 210 inurl:indexFrame.shtml Axis inurl:MultiCameraFrame?Mode=Motion intitle:start inurl:cgistart intitle:WJ-NT104 Main Page intext:MOBOTIX M1 intext:Open Menu intext:MOBOTIX M10 intext:Open Menu intext:MOBOTIX D10 intext:Open Menu intitle:snc-z20 inurl:home/ intitle:snc-cs3 inurl:home/ intitle:snc-rz30 inurl:home/ intitle:sony network camera snc-p1 intitle:sony network camera snc-m1 site:.viewnetcam.com -www.viewnetcam.com intitle:Toshiba Network Camera user login intitle:netcam live image intitle:i-Catcher Console Web Monitor

THIS IS A LIL OF TOPIC BUT WHAT THE HELL Firefox

This is an interesting from my good friend, Bill Dawson. Using Mozilla, go to ww w.justintimberlake.com. You can see and play his new song on the site, Sexy Back . Type in about:cache in the Address Bar and you'll see all of the files that the pa ge references. Unfortunately for Justin, his Flash developers lead us directly t o the file to download very well disguised I must say!