Google Hacking for Penetration Tester Volume 2

List Price: $49.95 Discount Price: $28.99

Customer Reviews:

got the warm-fuzzy i was looking for... [Posted on 2006-08-22]
I work for a Forture 500 company that is upgrading intranet Search capability using Google Appliance. I bought this book to help determine what risks Google Appliance might expose. The book begins with good overview of the basic Google interface and includes tips for searching. I then expected to get the low-down on hacking using Google. What i discovered was somewhat anticlimactic, there really aren't any serious hacks to be had using Google. Obviously, you must be careful about web-content publishing processes. Also, Google is respectful of content you don't want crawled or exposed (using both Internet Search and intranet appliance).

The book is well-written and was a quick-read. Most of the info can be found online at Google website itself. I am glad i read the book cuz i got the warm-fuzzy i was looking for.

Great starting Point for New or Intermediate- Reference for advanced [Posted on 2006-11-08]
You name it someone may have left it in the wrong place. This text is a good reference for everyone interested in information security and honing their research abilities to a razor's edge. As Obijan says "know your target- get inside of his mind." Experts might scoff, but a handy reference. I use it to nail airline miles, among other things...in all honesty I have found some wild things using the standard techniques- really you need a guide on unraveling people's stupidity or, if you are feeling rather viscious lay a trap and hook it with cheese that has unexpected side effects. Fun for the whole family!

google, hack, hacking [Posted on 2007-01-19]
Very informative book, I've been using some of the knowledge I got in the book to improve my searches as well as to test the security of some of my company's web pages.

Superior Text [Posted on 2008-02-06]
In reading through this book, I found a wealth of information that was quite useful, most notably the links to all of the other tools, sites and techniques available on the web. I am an internal corporate web application pen tester for a financial institution and will certainly use the techniques described in this text in our next vulnerability assessment. I do have one complaint however in that the corresponding website for the text [...] does not have the code from the book. Overall a great book and a fun read. Highly recommended.

Superb Book, great writing style and plenty of useful examples [Posted on 2008-02-08]
While Google is for most of us just a search engine, for hackers it is a great tool to gather information and present the attack vector and first of steps against your organization.

The opposite side of Google as a search engine is that a lot of networks and organizations out there have no idea what kind information (classified and potentially dangerous) is presented out on the internet and how data leakage is accomplished that way. This leakage give a significant amounts of password files, confidential information, and configuration data and so on that can be easily found with ingenius queries.

After you read Google Hacking, volume 2, the real power and potential danger of Google is clearly understood. Author Johnny Long does a superb job by presenting insight information on how -not so fiendly - people out there but also penetration testers can use this knowledge and easily harvest information that has been gathered by the Google engine. He's wirting is great and keeps me interested the whole book and besides that he gives away plenty of interesting examples on how to built your own query.

So really worth buying!

Rob Faber , CISSP, CEH, MCTS, MCSE
Sr. Information Security Consultant
The Netherlands

Click here for more details and discount information...