There are chances that you might’ve received an email with a Google document. It could be a google phishing attempt that has gone viral. This attack has affected about 1 million Gmail users. While Google has blocked the attack, make sure to take security check and look for suspicious app permissions.

The notorious cyber criminals keep employing new techniques to make sure that they target new users. In a similar attempt, a new Google Docs phishing scam has spread like a wildfire all across the internet. If you’ve received an email from someone in your contact list with a Google document, don’t open it or click the link in it.

Some of these emails are addressed to hhhhhhhhhhhhhhhh@mailinator.com with the intended target placed in the BCC field. Here’s how this attack takes place:

• If you click the link, it’ll take you to a Google accounts page with different Google accounts.
• It asks you to choose an account and give permissions to an app called “Google Docs.” Here, Google Docs is a fake third party app.
• After you given it the permissions, the fake app has the permission to read your emails and forward a similar phishing email to all your contacts.

Here’s how this attack looks like:

Just got this as well. Super sophisticated. pic.twitter.com/l6c1ljSFIX

— zach latta (@zachlatta) May 3, 2017

Google has now disabled the accounts where the hack originated. The company has pushed updates through Safe Browsing, and the concerned team is working to prevent such spoofing in future. In a second statement, Google made clear that the attack affected fewer than 0.1% Gmail users, which is about 1 million users. The company has now blocked the campaign. If you click on the link now, you’ll see an error page.

| ALSO READ: Amazing hidden features of Google Search you probably don’t know

What to do if you’ve already clicked on the Google Doc link?

To make sure that you haven’t been hit by the phishing attack, check your Google account’s app permissions by visiting this link. Make sure that there isn’t any app named Google Docs; Docs has access to your account by default. If you see it there, remove it.

Did you find this article on Google Docs phishing helpful? Share your views and feedback.

source: https://fossbytes.com

The post Warning! Google phishing – don’t click that google docs link appeared first on ITBlogSec.com.

No one would argue the fact that Google is one of the most useful sites on the Internet. Unfortunately, most people only use about 3% of its power. Smart Google users, on the other hand, know how to turn Google into a quick calculator, translate foreign sites, create their own customized search engine, and search for movie reviews and stock quotes with special search queries. From easter eggs to handy shortcuts that give you want, you want and what you need almost instantly, Google can do it all. Google Search is becoming an indispensable tool to students, travelers, the curious and the bored and here the 15 Amazing Hidden Features Of Google Search You Probably Didn’t Know.

CHECK ALSO: Google hacking (dorking) tutorial #1

1) Play “Atari Breakout”(Google Images)

Breakout is an arcade game developed and published by Atari, Inc. It was conceptualized by Nolan Bushnell and Steve Bristow, influenced by the 1972 Atari arcade game Pong, and built by Steve Wozniak aided by Steve Jobs. The game was ported to multiple platforms and upgraded to video games such as Super Breakout. In addition, Breakout was the basis and inspiration for certain aspects of the Apple II personal computer.

In the game, a layer of bricks lines the top third of the screen. A ball travels across the screen, bouncing off the top and side walls of the screen. When a brick is hit, the ball bounces away and the brick is destroyed. The player loses a turn when the ball touches the bottom of the screen. To prevent this from happening, the player has a movable paddle to bounce the ball upward, keeping it in play.

Google is commemorating the game’s 37th anniversary with a fun, little surprise today. Run a Google image search for “Atari Breakout” and instead of turning up a page of game screenshots, you’ll be treated to a playable version of game!

1. Click to “Images” tab on Google search
2. Type: “Atari Breakout”
3. Enjoy free gaming

2) Play “Pacman”

Pac-Man (Japanese: パックマン Hepburn: Pakkuman), stylized as PAC-MAN, is an arcade game developed by Namco and first released in Japan in May 1980. It was created by Japanese video game designer Toru Iwatani. It was licensed for distribution in the United States by Midway and released in October 1980. Immensely popular from its original release to the present day, Pac-Man is considered one of the classics of the medium, and an icon of 1980s popular culture.

1. Click to “All” tab on Google search
2. Type: “pacman”
3. Enjoy free gaming

3) Play “Zerg Rush”

In video games, rushing is a battle tactic similar to the blitzkrieg or the human wave attack tactics in real-world ground warfare, in which speed and surprise are used to overwhelm an enemy’s ability to wage war, usually before the enemy is able to achieve an effective buildup of sizable defensive and/or expansionist capabilities.

Also known as a zerg or zerg rush, the term originated in the StarCraft strategy game to describe a strategy that was effective with the Zerg race. An Easter egg of a simulated zerg rush is activated in a browser if “zerg rush” is typed into a Google search.

Enjoy playable game originally created by Google with small ‘o’ characters that destroy search results if they are not clicked with the mouse pointer.

1. Click to “All” tab on Google search
2. Type: “Zerg Rush”
3. Enjoy free gaming

4) Input Handwriting for Translation

Go to Google Translator, click the pencil option at the bottom left side of the text box and write the word by hand. This is helpful when translating from character-based languages.

5) Pronouncing of Big Numbers

If you want Google Search to teach you how to pronounce big numbers, just type in the figure, then adds an equal (=) and the language you want it to be pronounced. However, this works for up to 13 digits only.

6) Use it like calculator

You can not only perform direct calculations, e.g. 5^3, 10+5, 15-8, 35*55, 100/50 in the search bar, but also can calculate the results for trigonometric functions as well.

7) Solve Geometrical Shapes

You can solve for geometrical shapes such as circle, rectangle, triangle, trapezoid, ellipse etc. With Google search. To do so type “solve” and add a shape e.g. “Solve triangle”, click the search button and it will return you with a calculator to solve that shape. Not only this but you can also choose to solve for area, perimeter, gamma, height, side (a) or side (c). Each shape carries a different calculator.

8) Generate a graph

You can create a graph instantly for a mathematical function. For instance, search “graph for x^2” or “graph for tan (x)” and so on. The search results returned with the graph drawn.

9) Google tip calculator

You can calculate the Waiter Tip with this if you are poor with math but not with tips. Search “tip calculator”, enter your bill amount, tip % and select the number of people contributing to the bill to get how much your tip is.

10) Currency Conversion

Although currency conversions could be done via Google Currency Converter but if you want to perform currency conversion directly from the Google search bar, then just type, the currency you want to convert from and into like this: 100 GBP to USD. The search result will return with the converted amount.

11) Conversion of Units for Different Quantities

Not just currency, but you can also  convert units for different. There are 9 categories you can do conversions in: temperature, length, mass, speed, volume, area, fuel consumption, time and digital storage.

12) Translation between Languages

Just type the language you want to translate from and the language you want to translate into to turn your search bar into a temporary translator. In this example, we tried “French to English”.

13) Google Timer

Type in Google Timer and a box will pop up, allowing you to enter any amount of time, for example 45 seconds. Google Timer will start the countdown and a beeping alarm will ring once it reaches 0. Google timer can be set for full screen as well.

14) Sunrise and Sunset

One of the amazing hidden features of Google Search is the exact times for sunrise and sunset in your city. Search sunrise or sunset in city_name  and the search result will return to the exact time.

15) Weather Forecast

You can get the weather forecast for any city just by typing the city. Followed by “forecast.”

Extra TIP

By opening website http://elgoog.im/ you will get a fully modified google search home page with many interesting features. Beware elgooG is not affiliated with Google, it is fully designed for fun. Among many features (some of them already mentioned above) you can find there many another amazing hidden features of Google Search:

a) Underwater searching
b) Gravity
c) Terminal
d) Guitar
e) Snake Game
f) Bing Wallpaper
g) My Location
h) Bing Mirror

 source: https://en.wikipedia.org, https://techxerl.net

The post Amazing hidden features of Google Search you probably don’t know appeared first on ITBlogSec.com.

Everybody knows how to use search engine “google”.  But do you know tips, tricks and operators which can be used for google hacking? Here’s a tutorial that will teach you how to use google to hack and obtain even more specific data. Enjoy!

We have decided to start a new tutorial where we are trying to collect all techniques and commands which can be used for google hacking. Google hacking, also named Google dorking, is a computer hacking technique that uses Google Search and other Google applications to find security holes in the configuration and computer code that websites use. Google hacking involves using advanced operators in the Google search engine to locate specific strings of text within search results. Some of the more popular examples are finding specific versions of vulnerable Web applications.

History 

The concept of “Google Hacking” dates back to 2002, when Johnny Long began to collect interesting Google search queries that uncovered vulnerable systems and/or sensitive information disclosures – labeling them googleDorks.

The list of googleDorks grew into large dictionary of queries, which were eventually organized into the original Google Hacking Database (GHDB) in 2004. These Google hacking techniques were the focus of a book released by Johnny Long in 2005, called Google Hacking for Penetration Testers, Volume 1.

Since its heyday, the concepts explored in Google Hacking have been extended to other search engines, such as Bing and Shodan. Automated attack tools use custom search dictionaries to find vulnerable systems and sensitive information disclosures in public systems that have been indexed by search engines.

But in 2012 Google held an open challenge for anyone to infiltrate their resisting servers. For a full visual timeline, detailing the major events and developments in Google Hacking from 2002 to Present, see the Google Hacking History by Bishop Fox.

Search operators

There are many operators which can be used and even combined to achieve required results, see here the list of most popular operators:

The formula of google dorks

Dorks: They are like search criteria in which a search engine returns results related to your dork. The process can be a little time consuming, but the outcome will be worth it after learning on how to use dorks.

Basic Formula of dork: 

"inurl:."domain"/"dorks" "

So now try to understand concept: 
“inurl” = input URL
“domain” = your desired domain ex. .gov
“dorks” = your dork of your choice

Real examples

"intitle:index.of:" mp3 jackson

– download your favorite music for free

intitle:index.of +?last modified? +?parent directory? +pdf "lord of the rings" -htm -html -php -asp

– download book for free

300 -inurl:(htm|html|php|pls|txt) intitle:index.of “last modified” (mp4|wma|aac|avi)

– download your favorite movie directly from the Internet or you can watch it even online (in our example movie 300)
– explanation:

movie Name -inurl:(htm|html|php|pls|txt) intitle:index.of “last modified” (mp4|wma|aac|avi)
– as a result you will see a movie name there you can add any movie name for example 300, deadpool, etc.

inurl(htm|html|php|pls|txt)
– this means search the movie name in the URL. Most of the times there are name of the keywords given in the link itself, and it will search all the links which are having extensions named as htm, html, php, pls, txt.

intitle:index.of “last modified”
– It means that this will search for the recent date when the file was uploaded, so that you can get the HD print of the movie and you can download it in blazing fast speed.

(mp4|wma|aac|avi)
– Your movie will be searched which is having extension of mp4, wma, aac, avi format only. 

Conlusion

In the second part of our tutorial, we will show you more complicated formulas, how to find vulnerable online cameras, web servers and many many another practical tips and tricks. Comment, subscribe or Like us on Facebook so you will get notification about new part of tutorial. Enjoy!

The post Google hacking (dorking) tutorial #1 appeared first on ITBlogSec.com.