Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]

Re: Google Getting (even) smarter

Subject: Re: Google Getting (even) smarter
Date: Sun, 27 Feb 2005 14:26:10 -0500 (EST)
Besides case, it also looks like they're using a unicode preprocessor on the filter too. You used to be able to evade it by "inurl%3Aviewt%6fpic", for example, (in the url, not the browser; the browser will escape the %) but now they've fixed that as well.

--
Jordan Wiens, CISSP
UF Network Security Engineer
(352)392-2061

On Sun, 27 Feb 2005, Josh Zlatin-Amishav wrote:

Google has now broadened their filter range. A simple inurl:viewtopic
gets blocked too with the imfamous message:

===================================================

We're sorry...
... but we can't process your request right now. A
computer virus or spyware application is sending us
automated requests, and it appears that your computer
or network has been infected.

We'll restore your access as quickly as possible, so
try again soon. In the meantime, you might want to run
a virus checker or spyware remover to make sure that
your computer is free of viruses and other spurious
software.

We apologize for the inconvenience, and hope we'll see
you again on Google.

==================================================


Notice that there is no mention of php in the query. This is probably in response to the recent PhpBB path disclosure vulnerability.


Note: In the old days one could circumvent the php filter by changing
case (i.e. pHp) but that no longer works. You can still circumvent the
google filter by using a smarter query like some intext or a different
inurl phrase.



<Prev in Thread] Current Thread [Next in Thread>