Google hacking for penetration tester - part 39

Web phần để chúng tôi nhận được truy vấn đầy đủ. Chú ý rằng nhiều kết quả điểm để jpg, Gif hoặc png khá một vài dịch vụ sẽ chỉ thị quảng cáo do Google cung cấp, nhưng những cái thú vị nhất là những điểm đến GwebSearch dịch vụ. Hình 10,7 cho thấy những gì người chụp có thể sống như thế nào. | Hacking Google Services Chapter 10 381 Web section so we get the complete query. Notice that many of the results point to .jpg .gif or png are quite a few going to the Ad Indicator service provided by Google but the most interesting ones are those that point to GwebSearch service. Figure shows what the live capture might look like. Figure Show all Results Button Local 8 Web S Google Google. Advanced Search Preferences Language Tools Advertising Programs -Business Solutions - About Google. 2007 Google. . com Figure LiveHTTP Headers Capture Figure shows the format of the URL that is used to retrieve the queries. Here is an example 382 Chapter 10 Hacking Google Services http uds GwebSearch callback context 0 ls tkp 0 rsz large hl en gss .com sig 51248261809d756101be2fa94e0ce277 q VW 20Beetle k ey internal v Table lists each of the GET parameters and describes what they do. Table GET Parameters parameter value description callback the callback JavaScript function the results context 0 - lstkp 0 - rsz large the size of the query hl en language preferences gss .com - sig 51248261809d756101 be2fa94e0ce277 - q VW 20Beetle the actual query search key internal the key use the internal key v version of the API As an exercise we can build a URL from these parameters providing different values that we think are suitable for the task. For example uds GwebSearch callback our_callback context 0 rsz large q GHDB key internal v Notice that we have changed the callback parameter from Completion to our_callback and we are executing a search for GHDB. Executing this URL inside your browser will result in a JavaScript return technique is also known as JavaScript on Demand or JavaScript remoting and the results of this are shown below. our_callback 0 results GsearchResultClass GwebSearch unescapedUrl htt p .