Saturday, August 07, 2004

Google a favorite among hackers, too | CNET News.com

Google a favorite among hackers, too | CNET News.com: "well-crafted searches turned up so many sites with vulnerabilities that even jaded researchers laughed during the session.
'It is an old dog with new tricks,' Long said. 'It never ceases to amaze people, all the vulnerabilities out there.'
By searching for default server page titles, for example, an attacker can find easily exploitable servers. Applications left in default modes can also be found by searching for error pages generated by the software. And searching for specific file names can pinpoint vulnerable servers connected to the Internet.
'It is the first step to finding vulnerable targets,' Long said.
A simple search for the log-in page of Microsoft's Web server software, the Internet Information Server, turned up 11,300 sites on the Internet that exposed the page to the public. Gathering log-in information for poorly configured databases is also easy, he said."

Google
Creative Commons Licence
This work is licensed under a Creative Commons License.