Hello everyone, and welcome to the section 5 called
search engines of our little journey through open
source, intelligence in the last section. We discussed and
went through the note-taking and password managing part
of osint Investigations. And this section is dedicated to
the first stop of almost any online open-source activities.
The search engines, if you immediately thought
of Google. When I mentioned the search engines,
You could not be that, of course, but believe me, there
are a lot of other great resources out there in the
context of search engines, which we will cover now.
Now, I would like to do a quick overview of this section, so you can learn
what are we in for? Okay, our first
stop is Google and as you are probably familiar
with there are entire books dedicated to
Google searching and Google hacking just to demystify Google
hacking as a search activity, Google
hacking or Google Dorking is related to using
Advanced operators in the Google search engine to
locate specific strings of text within
search results. Mostly it.
Used in penetration testing and securing computer
networks, and it could easily become
an overkill for your organization of someone's personal
information via the search engine, but that is
the way it works. I will show you the most popular and
useful advanced search operators for Euro Cent investigations
and a great resource for search engine,
inquiries that you can use. Remember searching
cannot break anything. Besides
this advanced search operators. I'll
show you a
Great resource for Google search queries on
exploit dashdb.com. After
that. I will show you a quick overview have to create your own
custom search engine, based on the Google searches also,
as additional tips. I will show you the
good use of Google Images searches. Then the
I searched from.com Tool and the Wayback machine,
but won't spoil the fun on telling you now what
they are.
After Google will discuss other search engines and
I have to be honest here. Google is not my main search
engine in any of my search related activities. Will
go through the Privacy oriented engines and
also the country-specific engines because almost
every bigger country has its own flavor of
a search engine. And as a last topic, I
left FTP or the file transfer protocol
to cover because I think that
is one of the biggest
overlooked or maybe forgotten parts of the
internet when conducting searches and you will see later
what I mean by that. Hi, and welcome back to
our first Hands-On video of the search engine section. Now,
I will demonstrate a few of the most useful advanced
search operators. You can use on Google to
get the search results. You want plus a great
resource for Google search queries.
Here we are on our secure and private browser as
I have mentioned before. Google is our first stop. So
let's go there. Okay, you will have a
much better time finding what you're looking for. If you
learn some of the special keywords, and symbols that
search engines, use our first one are
the quotation marks.
Like this place in quotes around any search term
tells Google to search exactly what you
tell it to search. For example, when
I type in learn open source, intelligence,
and press enter.
I get all
over 650 Million
results and
that is a lot, but when I put a search term,
learn open source, intelligence in quotations, press
enter. I get around
12,000 results,
and that is much better, but
still too much for me.
Let's add the word about. So
it goes quotation.
Learn about.
Open source, intelligence and quotation.
Now we get about 2300 results.
And that is much better. Try this
out with the anything. I would recommend it for
you to use your name first.
Now, for the second Advanced operator, and that
is, which I use a lot in any of mine, search
engine activities. And that is the site. Operator.
Just, let's clear this up. This
search operator, simply allows you to
get results only from one website. It shows you only
the results containing the Search terms from one domain. Allow
me to show you how easy to used type site
column and now the targeted website
of order.
I mean I'm going to use code.
Red Dot. Ec-council dot-org.
Space and the search term black
hat.
And enter as you can see in the search results
only the results from the Code Red Dot
ec-council that org domain are being shown and
there are only 24 results, which is great.
Try putting the search term in quotations and see
how that goes. Maybe we'll be lucky and get only let
only cut maybe we'll be lucky and
get only a few results.
Let's clear this up again. And now one
of my favorite operators and that
is the file type operator. This advanced
search operator. When used tells Google to
only provide your results with a specific file type.
You included allow me to show you. I
want to, I want to search only
for PDF files in regard to the search term open
source intelligence. So I will type file
type.
Type column PDF
as the file type of Interest space
open source, intelligence.
And enter.
we got a lot of results, but
as you can see, we got only the PDFs in
regard to our search term.
This operator also works on search, the search engine bing.com, just
for you to have in mind.
And now I have to show you the to search operators.
Did I also often used and they
can make your searches easier
and more efficient and there are the
or and The Hyphen operators, the
or operator searches
for web pages. Containing one of two
similar queries. It is used in uppercase characters
type.
Quotation, ec-council and
quotation. Space. Oh
our space quotation.
Code
red quotation.
It's pretty straightforward.
With this Google will give you the results from
the search term, easy Council, or the search term
Code Red.
And now for the second operator The Hyphen The Hyphen operator
is great to use when you want to exclude some content from
appearing within the results. Let's try it.
Type quotation, mark code,
red and quotation mark.
Space hyphen ec-council.
As you can see, there
is no EC.
Council mentioned in the search results.
but when I remove the hyphen,
press enter.
The easy Council. Codered immediately appears all over the
search results. This is very useful. When,
when you have to filter your search results when
you look for some event or a person,
Now, there are more advanced search operators
and I would just mention them for you to check them out
after this video.
The first one is in Ural in
url column, operator
with this operator. You can specify only,
you can specify, or you can focus
only on the data within the Euro or
address of the website after that.
You have the entitle operator.
In title. Column the entire Del operator is
similar to the in Ural operator. But
only it finds pages with a certain word or
words in the title of the website.
Then also, one of my favorite other favorite
operator is the cash operator.
It's spelled c-- a CH E column.
This operator provides you with the cached version of some website
from a prior time. The main prerequisite here.
Is that the Google did the
index of the website sometime before?
As I have mentioned, there are more of the search operators to
use, but this would be the main ones I use in
my investigations.
And I have to show you a quick look at a great resource
for created, Google
search queries, by other people in
your browser, go to the address.
Exploit dashdb.com, /
Google.
Python hacking hyphen database.
And as its described on the site, the
Google hacking database or ghd be
is a categorized index of internet
search engine. Queries is designed to uncover interesting.
And usually sensitive information. Made
publicly available on the internet. I
go here to get inspired when I'm at a
dead end. The ordered point with my search engine activities.
I have to put a disclaimer here or
better to say. I have to emphasize
Something searching is, okay, but accessing
and visiting search results. May not be, please
be careful not to get yourself in any trouble and always
consult with legal team when you're in doubt, and
now after our Google hacking, we are ready to go to
the next step and that is the Google custom search engine
part that we will cover in the next video. So see you
there.