From: Amal Mohammad Al Hajeri (amal@nis.etisalat.ae)
Date: Mon Jul 19 2004 - 00:06:21 EDT
Hi List,
Did you ever thought of the website search engine as a hacking tool?
During one of the pen-tests, The website search engine, was a valuable
tool to discover interesting directories within the website itself,
these directories were not detected by famous website scanners like
nikto or SPI dynamics,i managed to get documentation pages about the API
application implemented, management login pages, backup files and much
more.
I leave it to your imagination to search for words like:
password,login,oracle,database,administrator, backup...etc
Best Regards,
-----------------------------------
Amal M. Al-Hajeri
E/Network & Information Security
Etisalat
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:58 EDT