Google (Google) is the largest search engine on the Internet, which began operating in September 1998.

Google is owned by the American corporation Google Inc. and ranks first in the world in popularity with an indicator of 77%.

Google.ru - Home page

There is no doubt that the main function of Google.ru is search. necessary information based on queries entered by users. In order to find necessary information, the user only needs to enter the desired word, phrase or sentence into the search bar. After this, just click on “Enter” on your keyboard or on the magnifying glass image directly on the site. By the way, in order to find the necessary information on the Internet, you can also use the portal.

It is quite convenient that when searching for the necessary information using Google.ru, the user can enter the desired queries not only directly from the keyboard of his device, but also use on-screen keyboard or voice search, which is undoubtedly convenient and accessible.

Google.ru - On-screen keyboard

In order to be able to access Gmail, YouTube, Google+ and other Google services, the user only needs to create an account. After that, using a single login and password for it, you can visit various Google services.

Google.ru - Account creation

It’s worth saying right away that Google.ru has a lot of services and tools, each of which has its own purpose and application.

There are products whose task is to make working on the Internet easier. Among them is the famous Google browser Chrome.

Google.ru - Google Chrome

Products have been developed for mobile devices (Search, Maps) and specifically for business, which include AdWords, AdMob, AdSense and others.

For those who are interested in multimedia, YouTube, Image Search and Video Search, Books, News and Picasa will be useful.

Google.ru - YouTube

Undoubtedly, the service will be useful Google Maps, which is a map and satellite images of the Earth. There is also a business directory and a road map.

Google.ru - Google Maps

This is only a part of the available services. You can view their full list directly on the Google.ru website by clicking on the “Services” icon located at the top of the page.

Google.ru - Tabs

For those who find this not enough and need even more information about Google.ru, it is worth visiting the tab called “All about Google,” which is located at the bottom of the page.

Google.ru - Tabs

Obtaining private data does not always mean hacking - sometimes it is published in public access. Knowledge Google settings and a little ingenuity will allow you to find a lot of interesting things - from credit card numbers to FBI documents.

WARNING

All information is provided for informational purposes only. Neither the editors nor the author are responsible for any possible harm caused by the materials of this article.

Today, everything is connected to the Internet, with little concern for restricting access. Therefore, many private data become the prey of search engines. Spider robots are no longer limited to web pages, but index all content available on the Internet and constantly add non-public information to their databases. Finding out these secrets is easy - you just need to know how to ask about them.

Looking for files

In capable hands, Google will quickly find everything that is not found on the Internet, for example, personal information and files for official use. They are often hidden like a key under a rug: there are no real access restrictions, the data simply lies on the back of the site, where no links lead. Google's standard web interface only provides basic settings advanced search, but even these will be sufficient.

You can limit your Google search to a specific type of file using two operators: filetype and ext . The first specifies the format that the search engine determined from the file title, the second specifies the file extension, regardless of its internal content. When searching in both cases, you only need to specify the extension. Initially, the ext operator was convenient to use in cases where the file did not have specific format characteristics (for example, to search for ini and cfg configuration files, which could contain anything). Now Google's algorithms have changed, and there is no visible difference between operators - in most cases the results are the same.


Filtering the results

By default, Google searches for words and, in general, any entered characters in all files on indexed pages. You can limit your search by domain top level, a specific site or at the location of the desired sequence in the files themselves. For the first two options, use the site operator, followed by the name of the domain or selected site. In the third case, a whole set of operators allows you to search for information in service fields and metadata. For example, allinurl will find the given one in the body of the links themselves, allinanchor - in the text equipped with the tag , allintitle - in page titles, allintext - in the body of pages.

For each operator there is a lightweight version with a shorter name (without the prefix all). The difference is that allinurl will find links with all words, and inurl will only find links with the first of them. The second and subsequent words from the query can appear anywhere on web pages. The inurl operator also differs from another operator with a similar meaning - site. The first also allows you to find any sequence of characters in a link to the searched document (for example, /cgi-bin/), which is widely used to find components with known vulnerabilities.

Let's try it in practice. We take the allintext filter and make the request produce a list of numbers and verification codes of credit cards that will expire only in two years (or when their owners get tired of feeding everyone).

Allintext: card number expiration date /2017 cvv

When you read in the news that a young hacker “hacked into the servers” of the Pentagon or NASA, stealing classified information, in most cases we are talking about just such a basic technique of using Google. Suppose we are interested in a list of NASA employees and their contact information. Surely such a list is available in electronic form. For convenience or due to oversight, it may also be on the organization’s website itself. It is logical that in this case there will be no links to it, since it is intended for internal use. What words can be in such a file? At a minimum - the “address” field. Testing all these assumptions is easy.


Inurl:nasa.gov filetype:xlsx "address"


We use bureaucracy

Finds like this are a nice touch. A truly solid catch is provided by a more detailed knowledge of Google's operators for webmasters, the Network itself, and the peculiarities of the structure of what is being sought. Knowing the details, you can easily filter the results and refine the properties of the necessary files in order to get truly valuable data in the rest. It's funny that bureaucracy comes to the rescue here. It produces standard formulations that are convenient for searching for secret information accidentally leaked onto the Internet.

For example, the Distribution statement stamp, required by the US Department of Defense, means standardized restrictions on the distribution of a document. The letter A denotes public releases in which there is nothing secret; B - intended only for internal use, C - strictly confidential, and so on until F. The letter X stands out separately, which marks particularly valuable information representing a state secret of the highest level. Let those who are supposed to do this on duty search for such documents, and we will limit ourselves to files with the letter C. According to DoDI directive 5230.24, this marking is assigned to documents containing a description of critical technologies that fall under export control. You can find such carefully protected information on sites in the top-level domain.mil, allocated for the US Army.

"DISTRIBUTION STATEMENT C" inurl:navy.mil

It is very convenient that the .mil domain contains only sites from the US Department of Defense and its contract organizations. Search results with a domain restriction are exceptionally clean, and the titles speak for themselves. Searching for Russian secrets in this way is practically useless: chaos reigns in domains.ru and.rf, and the names of many weapons systems sound like botanical ones (PP “Kiparis”, self-propelled guns “Akatsia”) or even fabulous (TOS “Buratino”).


By carefully studying any document from a site in the .mil domain, you can see other markers to refine your search. For example, a reference to the export restrictions “Sec 2751”, which is also convenient for searching for interesting technical information. From time to time it is removed from official sites where it once appeared, so if you cannot follow an interesting link in the search results, use Google’s cache (cache operator) or the Internet Archive site.

Climbing into the clouds

In addition to accidentally declassified government documents, links to personal files from Dropbox and other data storage services that create “private” links to publicly published data occasionally pop up in Google's cache. It’s even worse with alternative and homemade services. For example, the following query finds data for all Verizon customers who have an FTP server installed and actively using their router.

Allinurl:ftp:// verizon.net

There are now more than forty thousand such smart people, and in the spring of 2015 there were many more of them. Instead of Verizon.net, you can substitute the name of any well-known provider, and the more famous it is, the larger the catch can be. Through the built-in FTP server, you can see files on an external storage device connected to the router. Usually this is a NAS for remote work, a personal cloud, or some kind of peer-to-peer file downloading. All contents of such media are indexed by Google and other search engines, so you can access files stored on external drives via a direct link.


Looking at the configs

Before the widespread migration to the cloud, simple FTP servers ruled as remote storage, which also had a lot of vulnerabilities. Many of them are still relevant today. For example, the popular WS_FTP Professional program stores configuration data, user accounts and passwords in the ws_ftp.ini file. It is easy to find and read, since all records are saved in text format, and passwords are encrypted with the Triple DES algorithm after minimal obfuscation. In most versions, simply discarding the first byte is sufficient.


It is easy to decrypt such passwords using the WS_FTP Password Decryptor utility or a free web service.


When talking about hacking an arbitrary website, they usually mean obtaining a password from logs and backups of configuration files of CMS or e-commerce applications. If you know their typical structure, you can easily indicate keywords. Lines like those found in ws_ftp.ini are extremely common. For example, in Drupal and PrestaShop there is always a user identifier (UID) and a corresponding password (pwd), and all information is stored in files with the .inc extension. You can search for them as follows:

"pwd=" "UID=" ext:inc

Revealing DBMS passwords

In the configuration files of SQL servers, names and addresses Email users are stored in clear text, and instead of passwords, their MD5 hashes are recorded. Strictly speaking, it is impossible to decrypt them, but you can find a match among the known hash-password pairs.


There are still DBMSs that do not even use password hashing. The configuration files of any of them can simply be viewed in the browser.

Intext:DB_PASSWORD filetype:env

Since appearing on Windows servers The place of configuration files was partially taken by the registry. You can search through its branches in exactly the same way, using reg as the file type. For example, like this:

Filetype:reg HKEY_CURRENT_USER "Password"=

Let's not forget the obvious

Sometimes it is possible to get to classified information with the help of accidentally opened and caught in the field of view Google data. The ideal option is to find a list of passwords in some common format. Store account information in text file, Word document or electronic Excel spreadsheet Only desperate people can, but there are always enough of them.

Filetype:xls inurl:password

On the one hand, there are a lot of means to prevent such incidents. It is necessary to specify adequate access rights in htaccess, patch the CMS, not use left-handed scripts and close other holes. There is also a file with a list of robots.txt exceptions that prohibits search engines from indexing the files and directories specified in it. On the other hand, if the structure of robots.txt on some server differs from the standard one, then it immediately becomes clear what they are trying to hide on it.


The list of directories and files on any site is preceded by the standard index of. Since for service purposes it must appear in the title, it makes sense to limit its search to the intitle operator. Interesting things are in the /admin/, /personal/, /etc/ and even /secret/ directories.


Stay tuned for updates

Relevance here is extremely important: old vulnerabilities are closed very slowly, but Google and its search results change constantly. There is even a difference between a “last second” filter (&tbs=qdr:s at the end of the request URL) and a “real time” filter (&tbs=qdr:1).

Date time interval last update Google also indicates the file implicitly. Through the graphical web interface, you can select one of the standard periods (hour, day, week, etc.) or set a date range, but this method is not suitable for automation.

From the look of the address bar, you can only guess about a way to limit the output of results using the &tbs=qdr: construction. The letter y after it sets the limit of one year (&tbs=qdr:y), m shows the results for the last month, w - for the week, d - for the past day, h - for the last hour, n - for the minute, and s - for give me a sec. The most recent results that Google has just made known are found using the filter &tbs=qdr:1 .

If you need to write a clever script, it will be useful to know that the date range is set in Google in Julian format using the daterange operator. For example, this is how you can find a list PDF documents with the word confidential, uploaded from January 1 to July 1, 2015.

Confidential filetype:pdf daterange:2457024-2457205

The range is indicated in Julian date format without taking into account the fractional part. Translating them manually from the Gregorian calendar is inconvenient. It's easier to use a date converter.

Targeting and filtering again

In addition to specifying additional operators in the search query, they can be sent directly in the body of the link. For example, the filetype:pdf specification corresponds to the construction as_filetype=pdf . This makes it convenient to ask any clarifications. Let's say that the output of results only from the Republic of Honduras is specified by adding the construction cr=countryHN to the search URL, and only from the city of Bobruisk - gcs=Bobruisk. You can find a complete list in the developer section.

Google's automation tools are designed to make life easier, but they often add problems. For example, the user’s city is determined by the user’s IP through WHOIS. Based on this information, Google not only balances the load between servers, but also changes the search results. Depending on the region, for the same request, different results will appear on the first page, and some of them may be completely hidden. The two-letter code after the gl=country directive will help you feel like a cosmopolitan and search for information from any country. For example, the code of the Netherlands is NL, but the Vatican and North Korea do not have their own code in Google.

Often, search results end up cluttered even after using several advanced filters. In this case, it is easy to clarify the request by adding several exception words to it (a minus sign is placed in front of each of them). For example, banking, names and tutorial are often used with the word Personal. Therefore, cleaner search results will be shown not by a textbook example of a query, but by a refined one:

Intitle:"Index of /Personal/" -names -tutorial -banking

One last example

A sophisticated hacker is distinguished by the fact that he provides himself with everything he needs on his own. For example, VPN is a convenient thing, but either expensive, or temporary and with restrictions. Signing up for a subscription for yourself is too expensive. It’s good that there are group subscriptions, but with using Google It's easy to become part of a group. To do this, just find the Cisco VPN configuration file, which has a rather non-standard PCF extension and a recognizable path: Program Files\Cisco Systems\VPN Client\Profiles. One request and you join, for example, the friendly team of the University of Bonn.

Filetype:pcf vpn OR Group

INFO

Google finds password configuration files, but many of them are encrypted or replaced with hashes. If you see strings of a fixed length, then immediately look for a decryption service.

Passwords are stored encrypted, but Maurice Massard has already written a program to decrypt them and provides it for free through thecampusgeeks.com.

Google does hundreds of things different types attacks and penetration tests. There are many options, affecting popular programs, major database formats, numerous vulnerabilities of PHP, clouds, and so on. Knowing exactly what you're looking for will make it much easier to find the information you need (especially information you didn't intend to make public). Shodan is not the only one that feeds with interesting ideas, but every database of indexed network resources!

Search engine Google system the most popular in the world, so if you don't know how to use it, you might feel overwhelmed. If you want to learn how to use a simple Google search or want to improve your Google skills, this article is for you. Follow the instructions below and you will learn how to search for anything on Google.

Steps

Simple Google Search

    Open your browser.

    Dial in address bar at the top of www.google.com and you will be taken to the Google home page. You will see White screen with a search field and a colored Google logo above it.

    Type the word or phrase you want to find in the search field. For example, you can search for “how to find a job” or “the best restaurant in Moscow.”

    Press enter on your keyboard. You can also click on the blue magnifying glass, the effect will be the same. You will then be provided with a list of results that match your search query.

    Review your results and scroll down the page to see all the options. If you don't find anything suitable on the first page, scroll to the bottom of the page and click Next to view the next page of results.

    Click on the result that suits you. If you find an article that answers the question, you can open it. A new website page will open. If, after reading this article, you want to read something else on the same topic, click on the left-facing arrow (located in the upper left corner of your browser) to return to the search page.

    • You can continue searching as long as you like.
  1. If you haven't found anything that matches your request, please clarify it. To do this you need to return to the page Google search. Make your request more specific. For example, instead of searching for “Best restaurant in Moscow” and getting a bunch of links in response, you can type into the search “Best Chinese restaurant in Moscow in 2013”, this will significantly narrow the search.

    • You may also need to clarify your request in cases where it is too specific. If key phrase too long or specific, you may not get relevant results, in which case you'll have to go back and look for something more general.
  2. Use these tips to refine your search. In addition, you can refine your query not only by changing the words used, but also by using the tips below:

    • Common words appear more frequently in Google searches, so if you're looking to find queries with the words "how" or "where", prefix them with +
    • If a set of words is combined into a phrase, you can put it in quotation marks or parentheses. This is quite useful if, for example, you know a few words from a song and want to know its name:
      • Steps-on-glass or “Steps on glass.”
    • You can put a minus sign next to the words you want to avoid in the results. For example, if you search for "nano" and don't want the search to return an iPod Nano, you could phrase the query as "nano - iPod."
    • If you are looking for the price of an item, enter the lower limit after the currency icon, followed by "...", then the currency icon again and the upper price limit. For example: “Mattress $250...$400”
  3. Move your search to other areas of Google. Instead of searching through the regular search bar with home page Google, you can make your search more specific - depending on what you need to find. These could be news, image or google maps. Links to them are located in the upper left above the search bar. Here's what you can do:

    • Select the "Pictures" section. He's third from the right on the panel. With it, you can search solely by images. For example, if you want to find a photograph of a celebrity or footage from a fashion show, Google's images section can be a useful source of information.
    • Go to the "News" section. This section is the fifth from the right edge of the panel. This is very useful thing, if you want to find something related to the news, and not just some general concept.
    • Once you have entered the "News" section, you can select your country by selecting the arrow under the current news version and changing it to the desired one. This feature is located directly below the search bar.
    • Select "cards". With the help of Google maps you can find your way from one place to another.

    Advanced Search

    1. Open your browser

    2. Visit Google's advanced search page. You can get there in two ways:

      • Go to: http://www.google.ca/advanced_search
      • If you're already searching for something on Google, you can click the button on the right side of the search page. Select Advanced Search.
    3. Find pages with the words you need. To do this, you will have to fill in as many fields as possible on new page, you won't need to fill them all out, just focus on the categories you need to narrow your search query. Here is the information you must provide.

      • In the "using these words" line, enter the keywords for your search
      • In the “exact word or phrase” line, write the word or phrase you are looking for.
      • In the “any of these words” line, write any words that you want to see in the results.
      • In the line “does not include words” enter unwanted words
      • Under "numeric range" enter numbers in any desired range.
      • It should be noted that Google provides you with tips on how to search using different ways, you can find these tips to the right of the search tools.
    4. Narrow down your findings. You can add more information about what you're searching for to further narrow down your results. You don't need to enter information in all categories, focus only on those that can help you find more specific information about what you are looking for. Here are some options on how you can do this:

      • Language. Select the language in which you want to receive search results.
      • Region. Shows results published in a specific region. For example, searching sites in Eastern Europe.
      • Update date. Find pages that have been updated since that date.
      • Website or domain. If you want to narrow your search to a specific site, enter its name and you'll only get results from that site.
      • Keywords. Decide where exactly they should appear: in the headlines or in the body of the articles.
      • Safe search. Select "show closest results". If you want to exclude potentially inappropriate articles from your search results, select "filter to exact results."
      • Reading level. Modify your search criteria to suit your reading level.
      • File type. Find pages with files in in the required format, it can be PDF or Word Doc(.doc).
      • Rights of use. Select the pages that contain material for free use.
    5. The same search query may return different results after several days.
    6. You can set your preferences for Google search using the Settings link located next to the search bar.
    7. If you want to implement voice search Google, you need to download the Google application on your iPhone, Android phone, and others mobile devices that support installation Google apps. After downloading the app, you can select "voice search" and say any words that interest you. The search will begin after you start speaking.

Guys, we put our soul into the site. Thank you for that
that you are discovering this beauty. Thanks for the inspiration and goosebumps.
Join us on Facebook And In contact with

In the era digital technologies and high-speed Internet you can find out any information. In a few minutes we find recipes for a delicious pie or get acquainted with the theory of wave-particle duality.

But often the necessary information has to be sifted out bit by bit and spend more than one hour on it. website I've collected the best for you effective ways, which will help you find precious materials in a couple of clicks.

1. Either one or the other

Sometimes we are not exactly sure that we remembered or heard the right information correctly. No problem! Just enter a few suitable options via the “|” icon or English "or", and then select the appropriate result.

2. Search by synonym

As you know, the great and mighty Russian language is rich in synonyms. And sometimes this is not at all beneficial. If you need to quickly find sites on a given topic, and not just a specific phrase, use the "~" symbol.

For example, the results of the query “healthy food” will help you learn the principles of healthy eating, introduce you to healthy recipes and products, and also suggest visiting healthy restaurants.

3. Search within the site

4. Star power

When an insidious memory fails us and hopelessly loses words or numbers from a phrase, the “*” icon comes to the rescue. Just put it in place of the forgotten fragment and get the desired results.

5. Lots of missing words

But if not just one word, but half a phrase has been lost from memory, try writing the first and last word, and between them - AROUND (the approximate number of missing words). For example, like this: “I didn’t really love you AROUND(7).”

6. Time frame

Sometimes we desperately need to get acquainted with the events that occurred in a certain period of time. To do this, we add a time frame to the main phrase, written through an ellipsis. For example, we want to know what scientific discoveries were made between 1900 and 2000.

History of creation

The Google search engine was created as an educational project by Stanford University students Larry Page and Sergey Brin. In 1995 they worked on search engine BackRub, and in 1998 the Google search engine was created on its basis.

Website indexing

Ranking algorithm

The Keywords meta tag is not taken into account when ranking sites.

PageRank

Google uses an algorithm to calculate the authority of a page, PageRank. PageRank is one of the auxiliary factors in ranking sites in search results. PageRank is not the only, but very important way to determine the position of a site in Google search results. Google uses the PageRank of pages found for a query to determine the order in which those pages appear in search results to a visitor.

Search queries

Query syntax

Google's interface contains a fairly complex query language that allows you to limit your search to specific domains, languages, file types, etc. For example, searching for "intitle:Google site:wikipedia.org" will return all Wikipedia articles in all languages ​​that have the word in the title Google.

Search found

For some search results, Google provides a repeat search field that allows the user to find what they are looking for within a specific website. This idea came from the way users used search. According to software engineer Ben Lee and product manager Jack Menzel, "teleporting" on the network is exactly what helps Google users complete your search. Google has taken this concept a step further, and instead of simply “teleporting,” which means users only need to type part of the website name into Google to find the site they want (they don’t have to remember the entire address), users can enter keywords to search within the selected site. It turned out that users often have a hard time finding what they are looking for inside a corporate website.

Although this search tool is new to users, it has caused controversy among some publishers and distributors. Google search results pages display paid (pay per click) advertisements from competing companies that base their advertisements on brands. "While the service could help increase traffic, some users are being 'leaked' as Google uses brand recognition to sell advertisements, usually to rival companies." To smooth out this conflict, Google proposed disabling this feature for companies who wish to do so.

Notes

see also

Links


Wikimedia Foundation. 2010.