Google Hacking || Ethical Hacking course

Опубликовано: 21 Февраль 2026
на канале: Coding Master

Hello everybody and welcome back.

And right now we are slowly entering our footprinting section, which will be the last part of the beginner

section, including the scanning section that we will do right after we cover footprinting.

Well before we begin,

while our machine is starting up, let us just explain a little bit more what footprinting is.

So, first of all there, are two types of footprinting.

One is active and one is passive.

Now active footprinting basically requires some interaction with the target that you're

trying to attack. While the passive footprinting is basically just gathering all of the public available

information for your target.

So, for example, if your target has a Facebook account, Twitter, or basically any other account or any other

source of information from which you can gather some of the valuable stuff you might need.

Now let's say, for example, your target is a company and as public information online you have that the

company, for example, uses Windows XP on their machines.

You can already cut out the Linux exploits, and Windows 10 or 7 exploits, and you can basically just focus

on writing a Windows XP exploit.

Now we all know that nobody really uses XP anymore because it is vulnerable and

it is basically an open box,

but that was just an example.

There is lots of public information which you can find.

Sorry,

there was a cut in my recording.

So basically what I was going to say is let's go to some of the practical methods with Google hacking.

We will cover Google hacking in this tutorial.

So let me just log in,

test1234.

And as soon as this machine boots up,

well I mean as soon as my desktop boots up, we will open Firefox and we will run some of the specific

commands in the Google search bar in order to find some of the stuff we might need.

Now this is just one of the tools for footprinting that we will cover.

And basically the other ones which will be, for example, Harvester, Nikto, Shodan and whois we will cover

in the next lectures. But for now on,

let us just open our Firefox.

So just click on your Firefox icon. And, basically, since it will lead you to your Kali Linux website you want

to navigate to Google. So just type here

google.com. I'm just waiting for my Firefox to open.

It is taking a little bit of time.

Here we go.

It is basically opening right now. So you can just click here.

We can add another tab and go onto google.com.

OK,

finally open. Now let's say, for example, let's say that you want to find all the websites that have

a user input that could possibly be vulnerable to the SQL injection, for example.

So you just, on Google's search bar, you just type here inurl: and the

inurl: "index.php?id="

Here we go.

And then apostrophe once again.

Now what this will do is it will find all the Web sites that end in the index.php?

id= and then some number.

Now what does that mean?

Well, basically, if we click on any of these pages...check right here your connection is not secure.

There you go.

Let's go check this one.

I'm not sure why it says that.

Well, I have an idea.

But here we go.

So, basically, as you can see right here, this website could possibly be vulnerable to the SQL injection.

We can check that easily with the apostrophe. And if we try to login, login failed due to incorrect

e-mail address, wrong passphrase.

So basically this site isn't vulnerable, at least at the first try. But we won't try it anymore since we

shouldn't really do that.

Basically, I just wanted to show you how to figure out all of the websites that actually have a user

input which could be vulnerable to the SQL injection.

So, basically, anywhere where you can type something and then the website page can process it could be

vulnerable to the user input, which could be a piece of code that you would trick the server to run for

you.

But more about that in the website hacking section.

Now that was just one of the commands. Let me just go on Google

once again, I don't know why I closed it. In order to find the commands you might need

there is a Google hacking database which basically you just type here in Google, google hacking database,

and you click here on the first link, and it will lead us to a website with a bunch of the commands we

use in order to find out the things we might need.

For example, passwords, or PDF files, or Excel files or anything.

So let's just wait for this to open.

Here it is.
#EthicalHacigCourse #CodingMaster