Google hacking for penetration tester - part 34

Hầu hết máy in mạng lưới sản xuất những ngày này có một số loại giao diện dựa trên web được cài đặt. Nếu những thiết bị này (hoặc ngay cả những tài liệu hoặc các trình điều khiển được cung cấp với những thiết bị này) được liên kết đến từ một trang web, các truy vấn Google có thể được sử dụng để xác định vị trí họ. | Tracking Down Web Servers Login Portals and Network Hardware Chapter 8 331 Figure Webcams Placed Outside a Facility Most network printers manufactured these days have some sort of Web-based interface installed. If these devices or even the documentation or drivers supplied with these devices are linked from a Web page various Google queries can be used to locate them. Once located network printers can provide an attacker with a wealth of information. As shown in Figure it is very common for a network printer to list details about the surrounding network naming conventions and more. Many devices located through a Google search are still running a default insecure configuration with no username or password needed to control the device. In a worst-case scenario attackers can view print jobs and even coerce these printers to store files or even send network commands. 332 Chapter 8 Tracking Down Web Servers Login Portals and Network Hardware Figure Networked Printers Provide Lots of Details Table shows queries that can be used to locate various network devices. Table Queries That Locate Various Network Devices Network Device Query AXIS 2400 PhaserLink Printers Panasonic Network Cameras inurl Axis intitle View and Configure PhaserLink inurl ViewerFrame Mode Continued Tracking Down Web Servers Login Portals and Network Hardware Chapter 8 333 Table Queries That Locate Various Network Devices Network Device Query Sony NC RZ30 Camers SNC-RZ30 HOME Sony NC RZ20 Cameras intitle snc-z20 inurl home Mobotix netcams intext MOBOTIX M1 intext MOBOTIX M10 intext Open Menu Shift-Reload Panasonic WJ-NT104 intitle WJ-NT104 Main Page XP PRO Webcams powered by webcamXP Pro Broadcast AXIS Cameras intitle Live View - AXIS Phaser 6250N Printer Phaser 6250 Printer Neighborhood XEROX CORPORATION Xerox Phaser Printer Phaser740 Color Printer printer named Phaser 8200 Printer Phaser 8200 Xerox refresh Email Alerts Xerox Phaser 840 Phaser 840 Color .