Penetration Testing mailing list archives
Google AJAX SEARCH API and ghdb
From: "Gleb Paharenko" <gpaharenko () gmail com>
Date: Wed, 12 Dec 2007 12:18:41 +0200
Hi all. Have somebody successfully used google hacks database with its new ajax search api? Tools similar to gooscan are quickly blocked (and it is not legal to use them). Keys for soap interface are not distributed now :-( I've found on the net, that some guys made some reverse engineering of ajax search protocol and published some proof of concept in php, python, java. However in my opinion it will be good to use only documented features. So I've written a simple html+java script page, which uses google ajax api and ghdb and firefox successfully scans sites. But perhaps I'm developing a wheel? For a pity have not found on the net code examples which allows to use all ghdb dorks without being blocked. No, it is a bit not legal, but do you know one? -- Best regards. Gleb Pakharenko. http://gpaharenko.livejournal.com ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Google AJAX SEARCH API and ghdb Gleb Paharenko (Dec 13)