The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Use several different search engines and web archives (listed previously)

to discover what content they indexed or stored for the application you

are attacking.

■

When querying a search engine, you can use various advanced tech-

niques to maximize the effectiveness of your research. The following sug-

gestions apply to Google — you can find the corresponding queries on

other engines by selecting their Advanced Search option:

■

site:www.wahh-target.com

— This will return every resource within

the target site which Google has a reference to.

■

site:www.wahh-target.com login

— This will return all of the

pages containing the expression 

login

. In a very large and complex

application, this technique can be used to quickly home in on interest-