The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

search engine caches contain resources that cannot be directly

accessed in the application without authentication or payment.

■

Perform the same queries on other domain names belonging to the

same organization, which may contain useful information about the

application you are targeting.

■

If your research identifies old content and functionality that is no longer

linked to within the main application, it may still be present and usable.

The old functionality may contain vulnerabilities that do not exist else-

where within the application. 

■

Even where old content has been removed from the live application,

details about the content obtained from a search engine cache or web

archive may contain references to or clues about other functionality that is