Threat Actor Mindset | LegionHunter

You Should Know:

Google Dorking is a technique used by cybersecurity professionals and threat actors to find vulnerable or exposed assets on the internet. Below are some practical commands and codes related to Google Dorking and cybersecurity practices:

1. Basic Google Dork Commands:

– `site:example.com` – Searches within a specific website.
– `intitle:”index of”` – Finds directories with open directory listings.
– `inurl:admin` – Searches for URLs containing “admin”.
– `filetype:pdf` – Searches for specific file types, e.g., PDFs.
– `intext:”password”` – Searches for pages containing the word “password”.

2. Advanced Google Dorking:

– `site:example.com intitle:”index of” “parent directory”` – Finds open directories on a specific site.
– `inurl:wp-content/uploads` – Searches for WordPress upload directories.
– `intitle:”login” inurl:admin` – Finds admin login pages.

3. Linux Commands for Cybersecurity:

– `nmap -sV example.com` – Scans for open ports and services on a target.
– `nikto -h example.com` – Scans a website for vulnerabilities.
– `gobuster dir -u example.com -w /path/to/wordlist.txt` – Brute-forces directories on a web server.
– `sqlmap -u “http://example.com/page?id=1″` – Tests for SQL injection vulnerabilities.

4. Windows Commands for Cybersecurity:

– `netstat -an` – Displays all active connections and listening ports.
– `tasklist /svc` – Lists all running processes and their associated services.
– `netsh advfirewall show allprofiles` – Displays firewall settings.
– `wmic qfe list` – Lists installed Windows updates.

5. Python Script for Google Dorking:

import requests
from bs4 import BeautifulSoup

query = "site:example.com intitle:\"index of\""
url = f"https://www.google.com/search?q={query}"
headers = {"User-Agent": "Mozilla/5.0"}

response = requests.get(url, headers=headers)
soup = BeautifulSoup(response.text, 'html.parser')

for link in soup.find_all('a'):
print(link.get('href'))

What Undercode Say:

Google Dorking is a powerful tool for both cybersecurity professionals and threat actors. It allows for the discovery of exposed assets, misconfigured servers, and sensitive information. By understanding and utilizing these techniques, you can better secure your systems and identify potential vulnerabilities. Always ensure you have permission before performing any scans or tests on systems you do not own. For further reading, visit Google Hacking Database.