Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

8/17/2011
09:09 AM
50%
50%

Botnets And Google Dorks: New Recipe For Hacking

Attackers finding new ways to automate the hunt for vulnerabilities, Imperva researchers say.

Google, hackers have discovered, is very good at finding Web-facing security vulnerabilities. But searching for one vulnerability at a time can be slow--so it's time to automate.

Attackers are now using botnets and Google "dorks"--clearly-defined search parameters--to speed the process of finding exploitable flaws on the Internet, according to a new report issued by researchers at Imperva Tuesday.

"What the hackers are doing is building an army of zombies to perform automated cyber reconnaissance," said Noa Bar Yosef, senior security strategist at Imperva. "This makes the Google search much more efficient, and it also makes it harder to detect, because each zombie only issues two to four queries per minute, which is not enough to raise a red flag."

"Search engines can be directed to return results that are focused on specific potential targets by using a specific set of query operators," the Imperva report explains. "For example, the attacker may focus on all potential victims in a specified geographic location. In this case, the query includes a "location" search operator.

"In another scenario, an attacker may want to target all vulnerabilities in a specific website, and achieves this by issuing different queries containing the 'site' search operator," the report continues. "These particular search queries are commonly referred to as 'Google dorks,' or simply 'dorks.'

"Automating the query and result parsing enables the attacker to issue a large number of queries, examine all the returned results, and get a filtered list of potentially exploitable sites in a very short time and with minimal effort," the report states.

Read the rest of this article on Dark Reading.

In this new Tech Center report, we profile five database breaches--and extract the lessons to be learned from each. Plus: A rundown of six technologies to reduce your risk. Download it here (registration required).

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Zero-Factor Authentication: Owning Our Data
Nick Selby, Chief Security Officer at Paxos Trust Company,  2/19/2020
44% of Security Threats Start in the Cloud
Kelly Sheridan, Staff Editor, Dark Reading,  2/19/2020
Firms Improve Threat Detection but Face Increasingly Disruptive Attacks
Robert Lemos, Contributing Writer,  2/20/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-9338
PUBLISHED: 2020-02-22
SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field.
CVE-2020-9339
PUBLISHED: 2020-02-22
SOPlanning 1.45 allows XSS via the Name or Comment to status.php.
CVE-2020-9340
PUBLISHED: 2020-02-22
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/op_kandidat.php id parameter.
CVE-2020-9341
PUBLISHED: 2020-02-22
CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.
CVE-2020-9336
PUBLISHED: 2020-02-22
fauzantrif eLection 2.0 has XSS via the Admin Dashboard -> Settings -> Election -> "message if election is closed" field.