3 ms·

>If google released a list of all crawled websites and their IP addresses, if I was inclined I could then take those IP's and scan them for known vulnerabilitie

>If google released a list of all crawled websites and their IP addresses, if I was inclined I could then take those IP's and scan them for known vulnerabilities You can already do that. You want a list of IPs running websites? So scan port 80? Your port 80 scan will be finding hosts and adding them to the list faster than the vuln scanning can grab them off the list.

noahc 15y ago
If your point is that 'it's not impossible to do..' I agree. My point is that this is more efficient, not that it is some super secret 1337 way to hack.
- SomeOtherGuy 15y ago
  No, my point is that it is already completely trivial, and getting a list from google wouldn't even be worth doing if they did provide it, as you can easily and quickly generate a more extensive list with a single command.
  - noahc 15y ago
    What if I'm a link spammer, then I'd love to have google's list. How can the list be more extensive than google? That is verifiably false. For example, generate a list of IP addresses(500,000+) that have the following characteristics: 1. Have websites that been indexed by google with a PR 2+. 2. Run Web Servers 3. Bonus Points if you can tell me which web servers run the most PR 2+ sites. Now hopefully you can see how useful this list would be! I don't think nmap will do that for you.
    - SomeOtherGuy 15y ago
      You are very confused. Asking google for a list of IPs does not provide you with their page rank. IPs are not domains, nor are they websites.
      - noahc 15y ago
        > You are very confused. Asking google for a list of IPs does not provide you with their page rank. IPs are not domains, nor are they websites No, you are again correct. But if I know the IP address and the domains associated with it's very easy to determine PR 2+ websites and also from there figure out which ones have multiple websites hosted on them. Will you promise you're not trolling me?
    - deleted 15y ago
      [deleted]

noahc 15y ago

If your point is that 'it's not impossible to do..' I agree. My point is that this is more efficient, not that it is some super secret 1337 way to hack.

SomeOtherGuy 15y ago
No, my point is that it is already completely trivial, and getting a list from google wouldn't even be worth doing if they did provide it, as you can easily and quickly generate a more extensive list with a single command.
- noahc 15y ago
  What if I'm a link spammer, then I'd love to have google's list. How can the list be more extensive than google? That is verifiably false. For example, generate a list of IP addresses(500,000+) that have the following characteristics: 1. Have websites that been indexed by google with a PR 2+. 2. Run Web Servers 3. Bonus Points if you can tell me which web servers run the most PR 2+ sites. Now hopefully you can see how useful this list would be! I don't think nmap will do that for you.
  - SomeOtherGuy 15y ago
    You are very confused. Asking google for a list of IPs does not provide you with their page rank. IPs are not domains, nor are they websites.
    - noahc 15y ago
      > You are very confused. Asking google for a list of IPs does not provide you with their page rank. IPs are not domains, nor are they websites No, you are again correct. But if I know the IP address and the domains associated with it's very easy to determine PR 2+ websites and also from there figure out which ones have multiple websites hosted on them. Will you promise you're not trolling me?
  - deleted 15y ago
    [deleted]