Google Hacks for Dummies

Google is a powerful tool. Most of the time, most users are restricted to using Google as a search engine, and looking at pages on the internet Google has allowed or encouraged you to see, but there is a darker side to Google – “Google Hacks.”

Google hacks are strings of code entered into the search box that will access information that was never intended to be available to the general public. Some enterprising hacker has discovered which particular string of search parameters will provide normally restricted information.

There are many hacking guides, written by hackers. Unfortunately, most of these guides are written for the already initiated and assume a level of knowledge far above the typical user’s. Loosely translated this means they are a, really boring and b, impossible to understand.

The other problem I came across looking for usable hacks is that the hackers are far more comfortable talking to a machine than a person which makes the instructions even more difficult to follow. Here is an example:

Webcams

These hacks allow access to any unprotected web cam camera connected to the network.

This one is courtesy of systemeror11 and he has a selection of other video tutorials on YouTube. I have taken the liberty of collecting a selection of links and rather than trying to follow the tortuous instructions, just click one of these links to try some of them out.

intitle:axis intitle:”video server”
inurl:axis-cgi/mjpg (motion-JPEG)
inurl:view/indexFrame.shtml
intitle:”Live NetSnap Cam-Server feed”
allintitle:”Network Camera NetworkCamera”

inurl:view/view.shtml
liveapplet
inurl:ViewerFrame?Mode=
inurl:ViewerFrame?Mode=Refresh
intitle:liveapplet

inurl:axis-cgi/jpg
intitle:”live view” intitle:axis
intitle:liveapplet inurl:LvAppl
intitle:”EvoCam” inurl:”webcam.html”
inurl:view/index.shtml

intitle:”Live View / - AXIS”
intitle:”Live View / - AXIS 206M”
intitle:”Live View / - AXIS 206W”
intitle:”Live View / - AXIS 210?
inurl:indexFrame.shtml Axis

inurl:”MultiCameraFrame?Mode=Motion”
intitle:start inurl:cgistart
intitle:”WJ-NT104 Main Page”
intext:”MOBOTIX M1? intext:”Open Menu”
intext:”MOBOTIX M10? intext:”Open Menu”

intext:”MOBOTIX D10? intext:”Open Menu”
intitle:snc-z20 inurl:home/
intitle:snc-cs3 inurl:home/
intitle:snc-rz30 inurl:home/
intitle:”sony network camera snc-p1?

intitle:”sony network camera snc-m1?
site:.viewnetcam.com -www.viewnetcam.com
intitle:”Toshiba Network Camera” user login
intitle:”netcam live image”
intitle:”i-Catcher Console - Web Monitor”

Although, if you try too many of these in a single session, Google will cut you off and show you this message:

Who says censorship is dead?

Passwords

There are many hacks that will also provide improperly protected information such as plain text passwords in Frontpage.

Search: “# -FrontPage-” inurl:service.pwd

There is also an interesting hacking tool that allows these king of searches without having to learn strings of parameters such as these. It’s called, appropriately enough, “Google Hacks,” and is available for download here. Google Hacks is a compilation of carefully crafted Google searches that expose novel functionality from Google’s search and map services. For example, you can use it to view a timeline of your search results, view a map, search for music, search for books, and perform many other specific kinds of searches. You can also use this program to use google as a proxy.

If you are worried that your own system may be vulnerable to these or other hacks, Sourceforge has some good advice on testing your vulnerability and protecting your self here.

There are also a range of books available from Amazon, some of which are actually readable. There is a selection at the bottom.

Happy Hacking!

Here is the list of books mentioned above: