More fun with Google Code Search! [updated #5]
October 7th, 2006 by SecuriTeam, Filed under: Web, Commentary, Google
find a whole lot of valid email addresses
from the secure coding mailing list:
robert c. seacord points to the arbor blog, which discusses static analysis using this service:
http://asert.arbornetworks.com/2006/10/static-code-analysis-using-google-code-search/
robert also points to some searches from derek jones:
how many instances of:
if (…) ; are there out there (skip the first half dozen unusual macro uses)?
long long link
security holes in php web applications
“backdoor password” 
gunnar peterson points to searching dtds
stephen de vries points to several cool searches:
xss in java apps
(obvious) sql injection in java apps
xss in code from o’reilly and sun
from the daily wtf, more light and fun searches:
http://thedailywtf.com/forums/thread/94630.aspx
fun!
very similar searches also bring interesting results, such as tbd or tbd security.
another regex search for xss
a regex for format strings
wsdl
a previous post on this subject, with other searches:
http://blogs.securiteam.com/index.php/archives/661
with:
user-supplied variable used in an opentextfile query
write unsanitized user input into a browser
disable warnings
cdonts, my new leetle fren
sql query one
sql query two
sql query three
sql query four
sql query five
crypto one
crypto two
old school one
old school two
old school three
random injection
and lev’s original post:
http://blogs.securiteam.com/index.php/archives/659
what’s your fav?
sun shine,
sunshine@beyondsecurity.com.
-
Scan your web site for vulnerabilities with a Vulnerability Scanner - Be Safe!
Subscribe
Subscribe
Ehrm… try this:
“VIRUS FOUND”
And we’ll find what?… source codes for scanners? engines?
This is scary!…
This is not knew -
http://www.cipher.org.uk/index.php?p=projects/bugle.project
Hacken lernen mit Google Code Search…
In den SecuriTeam Blogs habe ich eine Liste gefunden, wie man mit Google Code Search nach Schwachstellen in Quellentexten suchen kann.
Ein triviales Beispiel ist die Suche nach Hintertür-Passwörter.
Weiter lesen:
Google Releases Code Search
Code …
Hey,
Here are some more hacks for google code search
http://ankitjain.info/ankit/2006/10/06/code-search-useful-for-hackers
~ Ankit
Shocker: Internet files are searchable!…
Last week Google released a code search engine that makes it easier to search through programming code that has been made publicly available on web and FTP sites. It’s nothing new… other code-specific search engines like koders.com have bee…
SUPER SITE
thank you
thank you
sharing for thanks.
In den SecuriTeam Blogs habe ich eine Liste gefunden, wie man mit Google Code Search nach Schwachstellen in Quellentexten suchen kann.