They have to. Beside this is not a Trojans or Keyloggers method it's server indexing and it's almost like all other google's dorks.

Anyhow, I'm just was asking if it's discussed or no .

Thanks for you all opinions guys and have a nice day all of you.





-Sudanese
-CCNA, CCNP, Network+ RHCE, RHCS

I agree with you, but if they want to make it a real certificate they must include everything used by hackers and crackers even and Google is great yahoo also have some tricks but I think Msn is helpful also "in my opinion" .

Thanks for your opinion.

What I want to say about using Msn is something simple but effective for hackers. For example when an attacker want to plan for attacking a website, the first thing need want to do is to index the webserver to see if there's any vulnerable scripts/programs/mods on the machine, then he is just going to use this to put his hand on the machine then start working.

However, it's work like this: Go and get the IP of the site or machine you want to attack, then go to http://www.msn.com. type the IP of the site/machine in the search bar and before the IP type "ip:" so it will be like this: ip:196.168.0.12 and see what I'm talking about.


Note1: Now you just indexed the webserver, but you can edit this search to get the scripts running by keywords or the programs installed in the machine even you can get the kernel version "for *nix OS".

Note2: This is helping script kiddies for sure but it's also should be covered in the CEH. To be a Certified Ethical Hacker means you must be aware of such methods, and thats in my opinion.



-Sudanese
-CCNA, CCNP, Network+ RHCE, RHCS

I'm a new user in your forum, I just finished ready almost all your topics in this forum in a week . About the CEH I think I can't get it because of their stupid options (take the course or 2 years of hell). About this Msn issue I'm wondering if I can show how it's work in your forum. I don't know if it's gonna be ethically .







-Sudanese
CCNA, CCNP, Network+ RHCE, RHCS

Msn is the first tool used by hacker to check the domains and the sub-domains on the machine so they can find the best way to attack it. Now days there's a lot of programs doing this but it's all not giving the specific information you need, but Msn does.







-Sudanese
CCNA, CCNP, Network+ RHCE, RHCS

in the CEH they do talk about using google and how hacker use it, but did they talked about using msn.com?

I'm just wondering.



-Sudanese
CCNA, CCNP, Network+ RHCE, RHCS