Using Google to Peek into Internal Networks and Intranets

Contributed by AlexTheBeast August 4, 2005  
Tagged: Google

Google will often hint to links that are not suppose to be reachable by the public. This tutorial will get a user started in using this information to gain valuable data regarding internal networks.

Searching google for site:nasa yields links that do not exist. For example…

knowledge.itd.nasa/
Similar pages

lheawww.gsfc.nasa/
Similar pages

www.nasajobs.nasa/
Similar pages

soho.nascom.nasa/gov
Similar pages

These are all links within their internal network. However, many of these are reachable to the outside by appending .gov to the end of the link. lheawww.gsfc.nasa doesn’t exist, but lheawww.gsfc.nasa.gov does. You are already seeing ways to use this to find “hidden” domains.

The more evil-ish uses for this; however, require gaining access to the internal network.

Here are some interesting peeks into some internal networks:
site:apple
site:ebay

And if you think you can never find cool stuff through this method, when searching microsoft’s site, I found this…

http://netscan.research.microsoft.com/

You think microsoft is exploring newsgroups?

Can you find anything interesting? Post it in the comments.