pageoneresults - 5:05 pm on Jun 22, 2008 (gmt 0)

Oh, I almost forgot, a topic without good solid references doesn't hold the same amount of water as one with. :) This particular article should be of interest to many (and on topic) as it provides a scanning tool (Goolag) along with complete instructions for the novice hacker. And, you get to use Google to uncover the vulnerabilities of the target domain(s)...

2008-02-23 - Goolag Tool Lets Google Aid Hackers
[pcworld.com...]

Please do be very careful in how you interpret the above. The Goolag tool is not for the "average" Joe and could get you into a pickle. I do not advocate the use of Goolag. Downloading and installing Goolag is an experience in itself, it does things to your system that I've not seen before all while listening to a female version of HAL. I've since uninstalled it as my scanning software flagged it as "unsafe" and there was no need for me to have it on the system, no use for it.

Apparently though there are over 100,000 other users who may have found a use for it.

Download Goolag Scanner (> 100000 downloads to date)

You'll have to excuse my long windedness but, this topic requires a lot of whoosh...

To understand Goolag Scanner, it is important to understand how "dorks" work (see 1.4) and with that, to establish the use of dorks as an acceptable tool for information security experts, penetration testers, and practical paranoids.

Also this below referenced website is an absolute must read. The stuff you will find here is going to open your eyes to a whole new world, I promise. I'm tellin ya right now, very few around here are going to be using the types of advanced search queries you will find at the below reference. Look at all those freakin' googledorks!

Google Hacking Database
[johnny.ihackstuff.com...]

Admins, Mods, I think the above should stay as it is a solid reference point for this topic. It provides a nice outline of those things that are being scanned for and exploited. People really need to see this.