Hacking with Google

In todays modern society, many companies are trying to cut costs by using the internet in place of their own personal network, to link together office cameras and equipment. They are also using unprotected servers to store massive amounts of personal data (more on that later). What such companies do not count on, are the many creative search options found within Google search that allow exploitation of such security oversights. Using such vulnerabilities it is actually possible to not only find such unsecured devices--but to actually control them.

Let us first start with a few basic Google search commands and work our way up from there.

1. The minus sign (-) to exclude a term from a search. For example, if you do not want all the x rated websites, simply include a (-xxx) after your search to exclude them

2. To search for a phrase, surround the phrase by double quotes (" ").

3. To search for a specific filetype, use the keyword filetype. For example, to search for only txt files, one would include filetype:txt after the search term or phrase.

4. The site: operator allows us to search for a term within a single website.

5. The intitle: operator allows us to search for a term within the title of a document. It can also allow us root access to files on a server, or information about the server that lends itself well to more in depth penetrations. The most typical hack is most likely going to be something along the lines of music pirating (highly illegal).
Consider for example, an unsecured music collection that someone has set up to access remotely for their own convenience. For example, suppose I wanted to do something HIGHLY ILLEGAL and get a copy of Tatu's latest songs. I might type something like intitle:index.of server.at tatu

6. The inurl: operator allows searching within the url of a page. For example, suppose we wished to find a file within the root of a webpage without bothering with the convoluted webpage of the author.

7. The intext: operator scans the contents of websites to locate your search terms. Intext and filetype can be used to fetch emails saved to the web. Yahoo, for example, likes to save emails in text files, replacing the "@" sign by the word "at", and the "." by the word "dot."

And now we will use some of these Google hacks to access a camera or two. The following searches will get you started. Most of the camera searches rely on inclusion of the name of a driver or the camera type. For example, the command /view/index.shtml will result in the site http://82.92.129.195/view/viewer_index.shtml?id=38729 a lovely beach with a controllable camera... Other hacks will result in different camera brands and configurations...Feel free to experiment further with Google Hacks on your own...

# intitle:"Live View / - AXIS" | inurl:view/view.shtml
/view/index.shtml
inurl:/view/index.shtml
inurl:viewerframe?mode=
inurl:/view:shtml
inurl:view/indexframe