Jose Nazario posted a good review of the book “Google Hacking for Penetration Testers” on slashdot,
Google Hacking for Penetration Testers (Google Hacking for short) is Johnny Long and company’s tome on the subject of using what is widely considered to be the web’s only worthwhile search engine and the myriad of ways that you can get very specific information out of it. Not just for web pages, you can find Excel spreadsheets, Word documents, and all sorts of information that the owners thought was hidden. This is what makes Google hacking, as an activity, so interesting.
The Google Hacking book starts with Google search basics, which is usually way more than most people do in a given week of using Google. With nary a pause, Chapter 2 covers advanced Google search operators, such as exclusions, file types, and restrictions like “inurl:” and “phonebook:”. By this point, you should be sufficiently armed to do some serious Google hacking. Together with the skills and the imagination to phrase what it is you’re looking for, you can mine the web.
The books don’t add anything new expect collecting tips “if you’re the kind of person who prefers to get right to productive work with a book, it’s probably the best book I’ve seen on using Google for more than simple searches.”
