Searching the searchers with searchaudit

摘要: Search engines not only assist normal users, but also provide information that hackers and other malicious entities can exploit in their nefarious activities. With carefully crafted search queries, attackers gather such as email addresses misconfigured or even vulnerable servers. We present SearchAudit, a framework identifies queries from massive engine logs order to uncover relationship with potential attacks. SearchAudit takes small set of seed, expands the using logs, generates regular expressions for detecting new queries. For instance, we show that, relying on just 500 discovers an additional 4 million distinct thousands Web sites. In addition, reveals series phishing attacks more than 400 domains compromised large number Windows Live Messenger user credentials. Thus, believe serve useful tool identifying preventing wide class early phases.