I dont remember it being discussed much or even on the test. Perhaps the latest version gets into it.  But whether the CEH gets into it or not, google hacking is a fundamental  skill.

Msn is the first tool used by hacker to check the domains and the sub-domains on the machine so they can find the best way to attack it. Now days there's a lot of programs doing this but it's all not giving the specific information you need, but Msn does.







-Sudanese
CCNA, CCNP, Network+ RHCE, RHCS

In my experience there is no comparison between google and msn.  Bill Gates himself is on record wanting google to change they way it spiders because of its very invasive nature.

What I want to say about using Msn is something simple but effective for hackers. For example when an attacker want to plan for attacking a website, the first thing need want to do is to index the webserver to see if there's any vulnerable scripts/programs/mods on the machine, then he is just going to use this to put his hand on the machine then start working.

However, it's work like this: Go and get the IP of the site or machine you want to attack, then go to http://www.msn.com. type the IP of the site/machine in the search bar and before the IP type "ip:" so it will be like this: ip:196.168.0.12 and see what I'm talking about.


Note1: Now you just indexed the webserver, but you can edit this search to get the scripts running by keywords or the programs installed in the machine even you can get the kernel version "for *nix OS".

Note2: This is helping script kiddies for sure but it's also should be covered in the CEH. To be a Certified Ethical Hacker means you must be aware of such methods, and thats in my opinion.



-Sudanese
-CCNA, CCNP, Network+ RHCE, RHCS

It's not possible or practical to include everything used by hackers and crackers.

They have to. Beside this is not a Trojans or Keyloggers method it's server indexing and it's almost like all other google's dorks.

Anyhow, I'm just was asking if it's discussed or no .

Thanks for you all opinions guys and have a nice day all of you.





-Sudanese
-CCNA, CCNP, Network+ RHCE, RHCS

amade0 your link is broken. What you meant to post is this link; http://johnny.ihackstuff.com/