forked from Nothing2Hide/slides
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathen-atelier-investigation.html
135 lines (110 loc) · 4.03 KB
/
en-atelier-investigation.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
---
layout: slide
lang: EN
ref: investigation
permalink: /en/online-investigation.html
title: "Advanced search"
transition: slide
order: 1
onhome: false
categories: [OSINT]
licence: "CC BY 3.0"
---
<section>
<section>
<h1>Google Dorking</h1>
</section>
<section>
<h2>Operators</h2>
<ul>
<li><pre>"exact expression"<pre></li>
<li><pre>OR</pre> ⇨ this word <strong>OR</strong> the other word: <pre>Google OR privacy</pre></li>
<li><pre>-</pre> ⇨ exclude a word from the search: <pre>Google -privacy</pre></li>
<li><pre>*</pre> ⇨ joker caracter: <pre>rock * roll</pre></li>
<li><pre>10..20</pre> ⇨ scale: <pre>Sarkozy 2002..2003</pre></li>
</ul>
</section>
<section>
<h2>Targets</h2>
<ul>
<li><pre>intitle:</pre> search something in the title of the page</li>
<li><pre>site:mysite.com</pre> search something only on mysite.com </li>
<li><pre>inurl:</pre> search something in the url of a page</li>
<li><pre>intext: search something inthe page body</pre></li>
<li><pre>filetype:pdf search a specific file type</pre></li>
<li><pre>link:http://site.com</pre> search every pages linking to site.com</li>
</ul>
</section>
<section>
<h2>Combinations</h2>
<code>"Macron" -site:youtube.com inurl:2015</code>
</section>
<section>
<h2>Juicy stuffs</h2>
<code>intitle:”curriculum vitae” “Tel * * *” “adresse *” “e-mail”
</code>
</section>
<section>
<h2>Find copied pasted text</h2>
<code>intext:"My sentence copied somewhere" -site:monsite.com
</code>
</section>
<section>
<h2>Find other TLD</h2>
<code>site:amazon.* -site:amazon.com</code>
</section>
<section>
<h2>Twitter search</h2>
<code>site:twitter.com & intext:dvdrip
</code>
</section>
</section>
<section>
<section>
<h1>Extra tools</h1>
<ul>
<li>Leaks portal : <a href="https://offshoreleaks.icij.org/">OffShore leaks</a>, <a href="https://www.icij.org/investigations/west-africa-leaks/">West africa leaks</a>
</li>
<li>Corporations: <a href="https://opencorporates.com/">Open Corporates</a> or <a href="https://data.occrp.org/">OCCRP Data</a></li>
<li>If you're not afraid of pyton, use <a href="https://github.com/x0rz/tweets_analyzer">account profiling tools</a></li>
<li>Whois <strong>is</strong> also your friend</li>
</ul>
</section>
<section data-background="/assets/i/use-the-force.jpg">
<h2>Use the Cache Luke</h2>
</section>
<section data-background="/assets/i/use-the-force.jpg">
<p><img src="/assets/i/encache.png" alt="Google Cache" title="" /></p>
</section>
<section data-markdown>
<textarea data-template>
## Search Engines
Search in automated cache during crawling
* Google
* Bing
* Yandex
</textarea>
</section>
<section data-markdown>
<textarea data-template>
## Cache Platorms
Search and backup your findings
* https://archive.org/web/
* https://archive.fo/
![wayback](/assets/i/wayback.png)
</textarea>
</section>
</section>
<section>
<h1>References</h1>
<ul>
<li><a href="https://moz.com/learn/seo/search-operators">Google Search Operators on moz.com</a>
</li>
<li><a href="https://moz.com/blog/mastering-google-search-operators-in-67-steps">Mastering Google Search Operators in 67 Easy Steps</a>
</li>
<li><a href="http://www.tekgyd.com/2015/07/how-to-use-google-dork-for-hacking.html">How To Use GOOGLE DORK for Hacking</a>
</li>
<li><a href="https://www.exploit-db.com/google-hacking-database/">Google Hacking Database</a>
</li>
</ul>
</section>