[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] What is Google Binary Search and Should We Fear it?
- To: <full-disclosure@xxxxxxxxxxxxxxxxx>
- Subject: [Full-disclosure] What is Google Binary Search and Should We Fear it?
- From: "Michael Sutton" <msutton@xxxxxxxxxxxxxxx>
- Date: Thu, 14 Sep 2006 22:46:52 -0400
When Websense went on record
(http://www.pcworld.com/article/id,126371-page,1/article.html) stating
that they were using an undocumented Google search feature to identify
malcode samples, it garnered a fair bit of media attention. A couple of
weeks later when HD Moore released code for his Malware Search project
(http://metasploit.com/research/misc/mwsearch/mwsearch.html) fear that
GBS was an evil tool surfaced once again.
When I finally got around to investigating the mysterious Google Binary
Search (GBS) functionality, I was surprised to find virtually no
documentation on it from Google or any other sources, beyond HD's Ruby
code. In a blog posting that I released today
(http://portal.spidynamics.com/blogs/msutton/) I've detailed what GBS
is, how it works and why the sky won't be falling any time soon.
Michael Sutton
Security Evangelist
SPI Dynamics
http://portal.spidynamics.com/blogs/msutton
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/