Google Hacking for Auditors - Association of College & University Auditors (ACUA)
←
→
Page content transcription
If your browser does not render page correctly, please read the page content below
Google Hacking for Auditors Association of College & University Auditors (ACUA) Brian Markham // August 12, 2021
WEBINAR MODERATOR
Don’t forget to
connect with us on
social media!
ACUA Virtual Learning Director ACUA Virtual Learning Committee
Lisa Gendusa Connie Applebech, CISA
Internal Auditor Auditor II
Texas State University System University of Houston System
bmarkham-01-MBP:~ bmarkham$ whoami Brian Markham Present: CISO @ EAB Past: PwC, KPMG, University of Maryland, George Washington University
Search Engines
• Thereare a number of different search engines but
for the purposes of this webinar, we will focus on
Google.
• Googleallows a user to create powerful search
criteria to find exactly what they are looking for.
• Let’sreview Google Dorking, cached pages, and
Image Searches
4
Everybody’s looking for something
• Org charts
• Documentation
• Reports
• SOPs
• Contact information
• Training
5
6
7
Search Engines
• Byadding a single search operator we’re able to
narrow our search from 7M results to only eight.
• Thesesearch operators make Google the most
effective of all OSINT tools.
• Youcan chain search operators together to find
more specific information. Let’s review some of the
most useful search operators.
8
Google Search Operators
Site
Use the site operator to search within a specific
website.
Site:gwu.edu “CFO”
Search the entire GW official website for matches on
CFO.
9
10
Google Search Operators
inurl:
Use the inurl operator to search for a string in a
URL.
site:umd.edu inurl:login
Look for any University of Maryland website with
login in the URL.
1112
Google Search Operators
intext
Use the intext operator to search for a string in
the body of webpages or content of documents
site:nd.edu intext:”data warehouse”
Searches the entire nd.edu domain for the term “data
warehouse” in all html pages and documents.
1314
Google Search Operators
filetype
Use the filetype operator to search for files. You
can specify a specific site and string for
additional granularity
site:*.edu filetype:pem
Search all websites in the .edu TLD for .pem files
(usually stores cryptographic keys)
1516
17
18
Other useful tricks
• Usethe minus sign (-) to exclude terms from your
search. One that I frequently use is -inurl:www as it
will exclude all sites with www in the url and show me
other subdomains.
• ANDis assumed (you don’t have to explicitly use this
operator) but OR is not. A pipe (|) is identical to OR.
• Use * as a wild card.
• before:YYYY-MM-DD or after:YYYY-MM-DD
1920
Google Hacking Database
• https://www.exploit-db.com/google-hacking-database
• Databaseof Google search queries to help you find
specific technologies, devices, and much more.
2122
Google Dorking Exercise (10 minutes)
• Lookup your employer or school; try to find
interesting files from the main domain.
• Whatoperators do you have to use to reliably find
yourself on Google?
• Findwebcams on Google, share anything interesting you
find in the chat
24Google Search Operators
• Site:
• Intext:
• Inurl:
• Filetype:
• Before:
• After:
• | = OR
• * = wild card
25Google Reverse Image Search
• https://www.google.com/imghp?hl=en&ogbl
• Uploador link a photo and let Google find a matching
photo for you.
2627
28
29
30
Reverse Image Search
• https://yandex.com/images/
• Yandexreverse image search can also return some useful
results.
31Cached Pages
• Dependingon the nature of our investigation, we may
not want to visit any of the sites that we find.
Rather, let’s look for cached pages.
• Cachedpages are essentially complete web pages that
Google scrapes during its web crawls.
• You’revisiting some version of the site but accessing
it through Google.
3233
34
Internet Archive
• TheInternet never forgets…thanks to the Internet
Archive
• Ifyou’re looking for pages and websites that are no
longer available, the Internet Wayback Machine is a
great resource
• https://archive.org/web/
• TheInternet Archive may have information that is not
otherwise available via a Google Search (cached or
live)
35Google Alerts
• Google Alerts are a great way to create search queries
that will automatically return results if that criteria
is met.
• Visit google.com/alerts
• Enteryour search query in the search field (you
probably want to test it first)
• Click “Create Alert”
3636
Wrapping Up
• Googleis an incredibly powerful tool for gathering
information about just about anything.
• Thereare many great resources for crafting Google
searches to find very specific information or devices on
the Internet.
• Cachedpages can help you access content no longer
available and without connecting to the target's webpage.
• Googlenews alerts can report when new information
becomes available.
37Survey link: https://forms.gle/YgTwxDoYF3ezv5Vi8 Thank you!! @maru37 bmarkham@eab.com
Stay Updated Get Involved Connect with Colleagues
• The College and University Auditor is ACUA's • The latest Volunteer openings are posted • Subscribe to one or more Forums on the
official journal. Current and past issues are on the front page of the website. Connect ACUA to obtain feedback and
posted on the ACUA website. • Visit the listing of Committee Chairs to share your insights on topics of concern to
learn about the various areas where you higher education internal auditors.
• News relevant to Higher Ed internal audit is might participate.
posted on the front page. Articles are also • Search the Membership Directory to
• Nominate one of your colleagues for an
connect with your peers.
archived for your reference under the ACUA annual award.
Resources/ACUA News.
• Submit a conference proposal. • Share, Like, Tweet & Connect on social
• Present a webinar. media.
• Become a Mentor
Get Educated • Write an article for the C&U Auditor. Solve Problems
• Write a Kick Starter.
• Take advantage of the several FREE • Discounts and special offers from
webinars held throughout the year. ACUA's Strategic Partners
• Attend one of our upcoming conferences: • Kick Starters
Audit Interactive • Risk Dictionary
TBD • Mentorship Program
• NCAA Guides
AuditCon • Resource Library
September 19 – 23, 2021 • Internal Audit Awareness Tools
Hybrid • Governmental Affairs Updates
• Contact ACUA Faculty for training needs. www.ACUA.org •
.
Survey Results
• Career Center......and much moreACUA Kick Starters
Use a Kick Starter to launch your next audit!
• Developed by ACUA members with subject matter
expertise
• Focused on higher education specific topics
https://acua.org/Audit-Tools/ACUA-Kick-Starters
Do you have a great idea for an
ACUA Kick Starter? Contact John
Winn at
HJWINN@mailbox.sc.edu.New Kick Starter Available! Stress Testing Download today in the members-only Audit Tools section of ww
Next Kick Starter Coming September 15th! IT Security in Remote Work Environment
ASSOCIATION OF COLLEGE & UNIVERSITY AUDITORS
Did you know that Connect ACUA allows you
to post new messages directly from your
email without logging in to the Connect
ACUA website?
For more details, check out the Quick Tip post on
Connect.ACUA.orgACUA MENTORSHIP PROGRAM • Mentorship is a proven method to help colleagues feel supported, drive workplace satisfaction, and foster member engagement in higher ed auditing. • The program is no longer focused on only small audit shops! The program has been expanded to be more inclusive of all types of shops. • The program is only a one-year commitment, but we encourage the mentorship to continue even after one year. • Consider signing up! Watch for registration deadlines to be communicated via email. For more information, go to https://acua.org/Member-Resources/Mentorship-Program
The ACUA Board of Directors decided to make AuditCon
2021 a limited hybrid event for all ACUA members and
attendees.
AuditCon will be held September 19-23: live in Miami, Florida for a limited
number of attendees, and live-streamed virtually!
We are confident with the new CDC guidelines that this hybrid option will
bring the most value to ACUA members.
Registration is open!WEBINARS Join us for our upcoming webinar. U C A
Upcoming ACUA Events Webinar November 4, 2021 - Baker Tilly - NIST Cybersecurity Assessment AuditCon S eptember 19 - 23, 2021
You can also read
