Google today launched Code Search, a useful developer tool which gives programmers a single place to search publicly accessible source code.

As i have discussed earlier how hackers can use google to to find vulnerable webpages and later use these vulnerabilities for hacking (Read here).

Google code search again have given lots of flashlights to people interested in exploring dark corners. Lot of these are the result of people zipping/tarring up their files and putting the zip/tar file in a publicly accessible directory. Google code search can index the readable content of your zip/tar files.

Here are some things that people have uncovered already:

• Key generation algorithm for WinZip
• Wordpress Usernames and passwords
• More here.

So be careful before putting confidential files in publicly accessible directories.

Technorati Tags: code, search, google, hacking, dork, exploit

Share This

If you enjoyed this post, make sure you subscribe to my RSS feed!