The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

results.

(continued)

Chapter 4 

■

Mapping the Application

73

70779c04.qxd:WileyRed  9/14/07  3:12 PM  Page 73

---

HACK STEPS (continued)

■

Browse to the last page of search results for a given query, and select

Repeat the Search with the Omitted Results Included. By default,

Google attempts to filter out redundant results by removing pages that

it believes are sufficiently similar to others included in the results.

Overriding this behavior may uncover subtly different pages that are

of interest to you when attacking the application.

■

View the cached version of interesting pages, including any content

that is no longer present in the actual application. In some cases,