Comments on: GHDB http://www.gnucitizen.org/blog/ghdb/ Information Security Think Tank Fri, 21 Nov 2008 17:43:46 +0000 http://wordpress.org/?v=2.6.3 By: pdp http://www.gnucitizen.org/blog/ghdb/#comment-123702 pdp Sat, 13 Sep 2008 06:31:09 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-123702 it will be back online soon. we are still moving infrastructures. i will post an update when we are done. thanks. it will be back online soon. we are still moving infrastructures. i will post an update when we are done. thanks.

]]> By: Varun http://www.gnucitizen.org/blog/ghdb/#comment-123693 Varun Fri, 12 Sep 2008 04:34:29 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-123693 http://www.gnucitizen.org/ghdb/ is broken :-( http://www.gnucitizen.org/ghdb/ is broken :-(

]]> By: Neo Anderson http://www.gnucitizen.org/blog/ghdb/#comment-122227 Neo Anderson Sat, 24 May 2008 00:11:53 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-122227 Hey i am able to produce some key combination for brute force but how can i send it to a running application password area to break the password Hey i am able to produce some key combination for brute force but how can i send it to a running application password area to break the password

]]> By: Quasi.dot › links for 2008-03-05 http://www.gnucitizen.org/blog/ghdb/#comment-115865 Quasi.dot › links for 2008-03-05 Wed, 05 Mar 2008 01:18:31 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-115865 [...] GHDB | GNUCITIZEN (tags: google hacking database security) [...] [...] GHDB | GNUCITIZEN (tags: google hacking database security) [...]

]]> By: Quasi.dot » Goolag Scanner http://www.gnucitizen.org/blog/ghdb/#comment-115855 Quasi.dot » Goolag Scanner Tue, 04 Mar 2008 20:13:02 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-115855 [...] Avevo archiviato la cosa annotando i relativi link su del.icio.us. Poi oggi leggo che il Guru rilancia la notizia. Volevi che mi lasciassi scappare l’occasione di notare che gli e’ sfuggito come il tutto sia stato anche reso disponibile via web? [...] [...] Avevo archiviato la cosa annotando i relativi link su del.icio.us. Poi oggi leggo che il Guru rilancia la notizia. Volevi che mi lasciassi scappare l’occasione di notare che gli e’ sfuggito come il tutto sia stato anche reso disponibile via web? [...]

]]> By: The Extreme, Web-based Google Hacking Tool | GNUCITIZEN http://www.gnucitizen.org/blog/ghdb/#comment-115843 The Extreme, Web-based Google Hacking Tool | GNUCITIZEN Tue, 04 Mar 2008 14:17:47 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-115843 [...] published: March 4th, 2008 I am happy to inform you that I’ve been doing some work on our Google Hacking Database Tool lately. The tool is now pretty stable and it has a better looking, and a lot more intuitive [...] [...] published: March 4th, 2008 I am happy to inform you that I’ve been doing some work on our Google Hacking Database Tool lately. The tool is now pretty stable and it has a better looking, and a lot more intuitive [...]

]]> By: gpaharenko http://www.gnucitizen.org/blog/ghdb/#comment-86334 gpaharenko Fri, 14 Dec 2007 10:34:20 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-86334 Hi! Perhaps it could be interesting for funs of ghdb. I've made a sample page which scans automaticall all 1500 entires from ghdb against set of sites, details here: http://gpaharenko.livejournal.com/2869.html Hi!

Perhaps it could be interesting for funs of ghdb. I’ve made a sample page which scans automaticall all 1500 entires from ghdb against set of sites, details here:
http://gpaharenko.livejournal.com/2869.html

]]> By: My Ghillie » GHDB | GNUCITIZEN http://www.gnucitizen.org/blog/ghdb/#comment-60055 My Ghillie » GHDB | GNUCITIZEN Sun, 21 Oct 2007 04:30:51 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-60055 [...] Check it out! While looking through the blogosphere we stumbled on an interesting post today.Here’s a quick excerpt [...] [...] Check it out! While looking through the blogosphere we stumbled on an interesting post today.Here’s a quick excerpt [...]

]]> By: Google Hacking Database [GHDB] - HTML/JavaScript wrapper | Daily Revolver http://www.gnucitizen.org/blog/ghdb/#comment-44923 Google Hacking Database [GHDB] - HTML/JavaScript wrapper | Daily Revolver Sat, 01 Sep 2007 06:41:42 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-44923 [...] via gnucitizen [...] [...] via gnucitizen [...]

]]> By: Mashups with the Google Mashup Editor | GNUCITIZEN http://www.gnucitizen.org/blog/ghdb/#comment-31812 Mashups with the Google Mashup Editor | GNUCITIZEN Mon, 25 Jun 2007 21:15:59 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-31812 [...] origin policies, online filesystem based on TinyURL (again in JavaScript) and last but not least, GHDB, the online Google Hacking Database Interface. I am going to talk a lot more on the security [...] [...] origin policies, online filesystem based on TinyURL (again in JavaScript) and last but not least, GHDB, the online Google Hacking Database Interface. I am going to talk a lot more on the security [...]

]]> By: Sergey Vzloman http://www.gnucitizen.org/blog/ghdb/#comment-24207 Sergey Vzloman Tue, 29 May 2007 13:26:17 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-24207 For this purposes can be used Google - CodeSearch. Malware can search inside code lines like <pre><code>include($_GET"</code></pre> More info: http://www.neworder.box.sk/newsread.php?newsid=15697 For this purposes can be used Google - CodeSearch. Malware can search inside code lines like

include($_GET"

More info: http://www.neworder.box.sk/new.....wsid=15697

]]> By: Aodhhan http://www.gnucitizen.org/blog/ghdb/#comment-23634 Aodhhan Fri, 25 May 2007 13:11:40 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-23634 The curse of Web Services. Having to expose your network to anothers in order to obtain the service. Not knowing their standards for security, and how well they maintain them. Right now, we restrict WS to very few enclaves. Even then, every packet route is restricted restricted in its routing from subnet to subnet. Which is good current, yet it undermines the true vision of webservices. IN which you can find anything you need, anytime you want. Getting and sending information to profit both ends. A big headache. Thanks for keeping it visible! We need all the help we can get. The curse of Web Services. Having to expose your network to anothers in order to obtain the service. Not knowing their standards for security, and how well they maintain them. Right now, we restrict WS to very few enclaves. Even then, every packet route is restricted restricted in its routing from subnet to subnet.

Which is good current, yet it undermines the true vision of webservices. IN which you can find anything you need, anytime you want. Getting and sending information to profit both ends. A big headache.

Thanks for keeping it visible! We need all the help we can get.

]]> By: pdp http://www.gnucitizen.org/blog/ghdb/#comment-23352 pdp Wed, 23 May 2007 12:05:49 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-23352 script kid, it will take some time for people like you to grasp the idea and see the real potentials behind the work we do in GNUCITIZEN. So, I am not worried at all. Moreover, I am far from thinking that I am the only one that has been toying with Mashups in the last couple of months. script kid, it will take some time for people like you to grasp the idea and see the real potentials behind the work we do in GNUCITIZEN. So, I am not worried at all. Moreover, I am far from thinking that I am the only one that has been toying with Mashups in the last couple of months.

]]> By: script kid http://www.gnucitizen.org/blog/ghdb/#comment-23294 script kid Wed, 23 May 2007 05:07:06 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-23294 Yay more tools to cause damage and do no good! Without you I don't know what I'd do! I hope this will plug into jikto, no? Thanks PDP! - Script Kiddie Yay more tools to cause damage and do no good!
Without you I don’t know what I’d do! I hope this will plug into jikto, no?

Thanks PDP!

- Script Kiddie

]]> By: pdp http://www.gnucitizen.org/blog/ghdb/#comment-23191 pdp Tue, 22 May 2007 13:49:31 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-23191 cool man, thanks cool man, thanks

]]> By: f0rg3 http://www.gnucitizen.org/blog/ghdb/#comment-23078 f0rg3 Tue, 22 May 2007 00:21:25 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-23078 Nice work man. I just bought the book you co-authored and I am enjoying it immensely. Most people should not be fooled by FUD. The dangers are there but mitigation is also there. Enlightenment is the key and gnucitizen is providing just that. Big up. Love your work. Nice work man. I just bought the book you co-authored and I am enjoying it immensely. Most people should not be fooled by FUD. The dangers are there but mitigation is also there. Enlightenment is the key and gnucitizen is providing just that. Big up. Love your work.

]]> By: RobotSkirts » Blog Archive » GNUCITIZEN » GHDB http://www.gnucitizen.org/blog/ghdb/#comment-23031 RobotSkirts » Blog Archive » GNUCITIZEN » GHDB Mon, 21 May 2007 19:02:06 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-23031 [...] GHDB PDP wrapped Johnny Long’s Google hacking database making it even easier/faster to use. [...] [...] GHDB PDP wrapped Johnny Long’s Google hacking database making it even easier/faster to use. [...]

]]> By: pdp http://www.gnucitizen.org/blog/ghdb/#comment-22997 pdp Mon, 21 May 2007 16:35:42 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-22997 <div class="message">The Dapper service is sometimes unreliable. However, it is still very good. There are bunch of other similar services but I prefer this one. So, if it is down, or it is not responding, give it a couple of minutes and try again.</div> The Dapper service is sometimes unreliable. However, it is still very good. There are bunch of other similar services but I prefer this one. So, if it is down, or it is not responding, give it a couple of minutes and try again. ]]> By: Dain http://www.gnucitizen.org/blog/ghdb/#comment-22996 Dain Mon, 21 May 2007 16:34:44 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-22996 Most impressive, as is all of the work you're doing. Javascript masters give me nightmares. Most impressive, as is all of the work you’re doing. Javascript masters give me nightmares.

]]> By: Martin http://www.gnucitizen.org/blog/ghdb/#comment-22978 Martin Mon, 21 May 2007 14:34:48 +0000 http://www.gnucitizen.org/blog/google-hacking-database#comment-22978 I think this example really highlights the dangers you have spent the last god-knows-how-many posts talking about - Same Origin Policy violations are so easy with JSON services developing before browsers have even had a chance to implement JSONRequest or similar. Not that that will necessarily fix anything - offsite script linking isn't going to disappear - I guess we should all just agree - you are right and the way the web is heading this will only get worse. I think this example really highlights the dangers you have spent the last god-knows-how-many posts talking about - Same Origin Policy violations are so easy with JSON services developing before browsers have even had a chance to implement JSONRequest or similar. Not that that will necessarily fix anything - offsite script linking isn’t going to disappear - I guess we should all just agree - you are right and the way the web is heading this will only get worse.

]]>