Penetration Testing mailing list archives

Re: "Ping scan" through Google


From: Robert Wesley McGrew <wesleymcgrew () gmail com>
Date: Sun, 22 Jan 2006 20:32:35 -0600

On 1/20/06, Petr.Kazil () eap nl <Petr.Kazil () eap nl> wrote:
The way I do a "Google Ping scan" is so trivial and badly programmed that
I'm almost ashamed to publish it.
But since two people asked about it, I'll publish it anyway.

This thing could be programmed much better using Perl and the Google API,
but I haven't taken the time to do this.

Happy to see someone else had this idea.  I wrote something similar a
while back in Python with the Google API and called it GoogleSweep. 
It does simple wildcarding of subnets, optional reverse dns (if you
want to search hostnames too and don't mind the DNS traffic),
"bursting" to ration out API calls (you only get 1000 a day), and
pretty output in the form of HTML charts and/or comma-delimited text.

http://cse.msstate.edu/~rwm8/googlesweep/

Loads of fun to run on your network to see how much information's out
there about it.

--
Robert Wesley McGrew
http://cse.msstate.edu/~rwm8/

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: