{"id":290,"title":"Web Sitenizdeki G\u00fcvenlik A\u00e7\u0131klar\u0131n\u0131 Google Dorking ile Test Etme Rehberi","content":"

Web Güvenli\u011fi: Google\/Bing\/DuckDuckGo Dorking, Burp Suite, OSINT & Otomasyonu <\/h1>\r\n

ÖNEML\u0130 YASAL UYARI<\/h2>\r\n


YASAL VE ET\u0130K SORUMLULUK UYARISI             <\/p>\r\n

                                                              
  \ud83d\udeab BU REHBER YALNIZCA:                                     
  \u2705 Kendi web sitenizde\/sistemlerinizde                     
  \u2705 Yaz\u0131l\u0131 izin ald\u0131\u011f\u0131n\u0131z sistemlerde                       
  \u2705 Yasal penetration testing projelerinde                  
  \u2705 E\u011fitim ve güvenlik fark\u0131ndal\u0131\u011f\u0131nda kullan\u0131labilir       
                                                              
  \ud83d\udeab BU REHBER \u0130LE YAPILMASI YASAK:                          
  \u274c \u0130zinsiz 3. taraf sistemlere sald\u0131r\u0131                     
  \u274c Ba\u015fkas\u0131n\u0131n verilerine yetkisiz eri\u015fim                   
  \u274c Ticari maals\u0131 ve kötü niyetli amaçlar                   
                                                              
                                                   
  Türk Ceza Kanunu (TCK) 215, 217, 524 maddeleri             
             
                                                              
  BA\u015eLAMADAN ÖNCE:                                        
  1. Yaz\u0131l\u0131 yetkilendirme al\u0131n\u0131z (email\/sözle\u015fme)           
  2. \u0130zin kapsam\u0131n\u0131 net belirleyin                           
  3. Kanuni dan\u0131\u015fman ile dan\u0131\u015f\u0131n\u0131z                           
  4. Denetim izleri tutunuz   <\/p>\r\n

\r\n<\/code><\/h2>\r\n
\r\n

Google Dorking Nedir?<\/h2>\r\n

Tan\u0131m<\/h3>\r\n

Google Dorking<\/strong> (veya Google Hacking<\/strong>), Google arama motorunun geli\u015fmi\u015f operatörlerini kullanarak normalde eri\u015filmesi zor olan veya gizlenmi\u015f bilgileri bulmak tekni\u011fidir.<\/p>\r\n

Örnek:\r\n\u274c Zay\u0131f Arama: \"password\"\r\n\u2705 Güçlü Dorking: intitle:\"index of\" site:hedefsite.com filetype:sql\r\n\r\nSonuç: Sitenizde aç\u0131kta kalm\u0131\u015f SQL dosyalar\u0131 bulunur\r\n<\/code><\/pre>\r\n
Dorking vs. Hacking Fark\u0131<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Dorking<\/th>\r\nHacking<\/th>\r\n<\/tr>\r\n<\/thead>\r\n
Yasal<\/strong> (ço\u011funlukla)<\/td>\r\nYasad\u0131\u015f\u0131<\/strong><\/td>\r\n<\/tr>\r\n
Herkese aç\u0131k verileri kullan\u0131r<\/td>\r\nGüvenlik k\u0131rmaya çal\u0131\u015f\u0131r<\/td>\r\n<\/tr>\r\n
Arama motoru operatörü<\/td>\r\nYaz\u0131l\u0131m aç\u0131klar\u0131n\u0131 istismar<\/td>\r\n<\/tr>\r\n
Pasif ke\u015fif<\/td>\r\nAktif sald\u0131r\u0131<\/td>\r\n<\/tr>\r\n
\"Elimde ne var?\"<\/td>\r\n\"Nas\u0131l içeri girebilirim?\"<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n
Gerçek Dünya Örnekleri<\/h3>\r\n
\ud83d\udcf0 SKANDALLAR:\r\n\r\n1. Tesla (2018)\r\n   \u2514\u2500 Google Dorking → Tesla'n\u0131n dahili belgeler bulundu\r\n   \u2514\u2500 Tüm çal\u0131\u015fanlar\u0131n\u0131n E-mail listesi\r\n   \u2514\u2500 Patent bilgileri\r\n   \u2514\u2500 Sonuç: Acil olarak gizlendi\r\n\r\n2. Yahoo (2014)\r\n   \u2514\u2500 Exposed phpmyadmin arayüzü (dorking ile)\r\n   \u2514\u2500 500 milyon kullan\u0131c\u0131 verisi s\u0131zd\u0131\r\n   \r\n3. Fort Meade (ABD Askeri Üs)\r\n   \u2514\u2500 intitle:\"Fort Meade\" intext:password\r\n   \u2514\u2500 Aç\u0131k havada radar görüntüleri\r\n   \u2514\u2500 Sonuç: Derhal silinmi\u015f\r\n\r\n4. Twitter API Keys (2021)\r\n   \u2514\u2500 filetype:env site:github.com intext:API_KEY\r\n   \u2514\u2500 Yüzlerce gizli anahtar tespit edilmi\u015f\r\n<\/code><\/pre>\r\n
Neden Dorking Önemli?<\/h3>\r\n
SORU: \"E\u011fer birisi Google ile bulabiliyorsa, neden gizlemeliyim?\"\r\nCEVAP: \r\n  \u21b3 Bilgi s\u0131z\u0131nt\u0131s\u0131 = \u0130ç kontroller ba\u015far\u0131s\u0131zl\u0131\u011f\u0131\r\n  \u21b3 Denetçilere kötü görünüyor\r\n  \u21b3 Sald\u0131rganlar bunu kullanan \u015fu an\r\n  \u21b3 \u0130lk ad\u0131m = Ke\u015fif, ikinci ad\u0131m = Sald\u0131r\u0131\r\n<\/code><\/pre>\r\n
\r\n
\ud83d\udd0d Google Dorking Operatörleri: Detayl\u0131 Rehber<\/h2>\r\n
Temel Operatörler<\/h3>\r\n
1. site:<\/code> - Belirli sitede arama<\/h4>\r\n
site:hedefsite.com password\r\nsite:hedefsite.com admin\r\nsite:example.org filetype:pdf\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: Sadece hedef alan ad\u0131nda arama yap<\/p>\r\n
2. intitle:<\/code> - Ba\u015fl\u0131kta kelime bulunma<\/h4>\r\n
intitle:\"index of\" \r\nintitle:\"admin login\"\r\nintitle:\"phpinfo()\"\r\nintitle:\"Apache Status\"\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: Sayfa ba\u015fl\u0131\u011f\u0131nda belirli metin ara<\/p>\r\n
3. inurl:<\/code> - URL'de kelime bulunma<\/h4>\r\n
inurl:admin\r\ninurl:\/phpmyadmin\r\ninurl:wp-admin\r\ninurl:backup\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: URL yolunda belirli metin ara<\/p>\r\n
4. filetype:<\/code> - Dosya türü<\/h4>\r\n
filetype:pdf\r\nfiletype:doc\r\nfiletype:xls\r\nfiletype:sql\r\nfiletype:env\r\nfiletype:conf\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: Belirli uzant\u0131daki dosyalar\u0131 bul<\/p>\r\n
5. intext:<\/code> - Sayfan\u0131n içeri\u011finde metin<\/h4>\r\n
intext:\"password:\"\r\nintext:\"username:\"\r\nintext:\"confidential\"\r\nintext:\"restricted\"\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: Sayfa içerisinde belirli metin ara<\/p>\r\n
6. ext:<\/code> - Dosya uzant\u0131s\u0131 (filetype'\u0131n alternatifi)<\/h4>\r\n
ext:sql\r\next:bak\r\next:old\r\next:conf\r\next:config\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: Filetype gibi, uzant\u0131ya göre ara<\/p>\r\n
7. -<\/code> (Eksi) - Hariç tutma<\/h4>\r\n
site:example.com filetype:pdf -sample\r\nfiletype:sql password -test\r\nintitle:\"index of\" -apache\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: Sonuçlardan belirli terimleri ç\u0131kar<\/p>\r\n
8. \"\"<\/code> (T\u0131rnak) - Tam e\u015fle\u015fme<\/h4>\r\n
\"password123\"\r\n\"admin@example.com\"\r\n\"database backup\"\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: Tam cümle ara (bo\u015fluk ve özel karakterler dahil)<\/p>\r\n
9. OR<\/code> \/ |<\/code> - Veya operatörü<\/h4>\r\n
filetype:sql OR filetype:bak\r\nintitle:admin OR intitle:administrator\r\nsite:example.com OR site:example.org\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: Çok seçenekli arama<\/p>\r\n
10. *<\/code> - Wildcard (Joker)<\/h4>\r\n
intitle:\"index of\" *\r\nfiletype:* password\r\ninurl:*\/admin\/*\r\n<\/code><\/pre>\r\n
Kullan\u0131m<\/strong>: Herhangi bir kelime yerine koyma<\/p>\r\n
\u0130leri Operatörler<\/h3>\r\n
cache:hedefsite.com\r\n\u2514\u2500 Google'\u0131n önbelle\u011finde sayfa nas\u0131ld\u0131?\r\n\r\nrelated:hedefsite.com\r\n\u2514\u2500 Benzer siteleri bul\r\n\r\nlink:hedefsite.com\r\n\u2514\u2500 Hangi siteler ba\u011flant\u0131 vermi\u015f?\r\n\r\ninfo:hedefsite.com\r\n\u2514\u2500 Site hakk\u0131nda genel bilgi\r\n\r\ndefine:\r\n\u2514\u2500 Tan\u0131m ara (genellikle dorking'de kullan\u0131lmaz)\r\n<\/code><\/pre>\r\n
Operatör Kombinasyonu Örnekleri<\/h3>\r\n
ÖRNEK 1: SQL Backup Dosyas\u0131 Bulma\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\nsite:hedefsite.com filetype:sql backup\r\n\r\nÖRNEK 2: Aç\u0131k Admin Paneli\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\nintitle:\"admin login\" site:*.com -sample -test\r\n\r\nÖRNEK 3: Yap\u0131land\u0131rma Dosyalar\u0131\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\nfiletype:conf -example -sample intext:password\r\n\r\nÖRNEK 4: API Keys\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\nfiletype:env intext:\"API_KEY\" OR intext:\"SECRET_KEY\"\r\n\r\nÖRNEK 5: Hata Mesajlar\u0131\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\nsite:hedefsite.com intext:\"Fatal error\" OR intext:\"SQL syntax error\"\r\n<\/code><\/pre>\r\n
\r\n
\ud83d\udd0e 20 Pratik Dorking Sorgusu (Kategorilere Ayr\u0131lm\u0131\u015f)<\/h2>\r\n
KATEGOR\u0130 1: Dizin Listeleme & Yap\u0131 Ke\u015ffi<\/h3>\r\n
# 1. Tüm dizinleri liste yap\r\nintitle:\"index of\" site:hedefsite.com\r\n\r\n# 2. Admin dizini\r\nintitle:\"index of \/\" +admin site:hedefsite.com\r\n\r\n# 3. Yedekleme dizini\r\nintitle:\"index of\" +backup site:hedefsite.com\r\n\r\n# 4. Hassas dosya eri\u015fimi\r\nintitle:\"index of \/\" +passwd\r\nintitle:\"index of \/\" +password.txt\r\nintitle:\"index of \/\" +.htaccess\r\n\r\nSonuç: Site yap\u0131s\u0131n\u0131 haritala, eri\u015filebilir dosyalar bul\r\n<\/code><\/pre>\r\n
KATEGOR\u0130 2: Yap\u0131land\u0131rma Dosyalar\u0131<\/h3>\r\n
# 5. Database yap\u0131land\u0131rmas\u0131\r\nfiletype:conf inurl:proftpd.conf -sample\r\nfiletype:ini inurl:ws_ftp.ini\r\nfiletype:config web.config -sample\r\n\r\n# 6. Web sunucu yap\u0131land\u0131rmas\u0131\r\next:xml php.xml\r\next:conf httpd.conf -example\r\nfiletype:properties \"db.password\"\r\n\r\nSonuç: Sunucu ayarlar\u0131, veri taban\u0131 ba\u011flant\u0131 bilgileri\r\n<\/code><\/pre>\r\n
KATEGOR\u0130 3: Gizli Panel ve Admin Sayfalar\u0131<\/h3>\r\n
# 7. Admin login arayüzleri\r\ninurl:admin intitle:login\r\ninurl:administrator intitle:login\r\ninurl:moderator intitle:login\r\ninurl:webadmin intitle:login\r\n\r\n# 8. CMS giri\u015f sayfalar\u0131\r\ninurl:wp-admin site:hedefsite.com\r\ninurl:joomla\/administrator\r\ninurl:drupal\/user\/login\r\n\r\nSonuç: Sald\u0131rganlar buradan brute force ata\u011f\u0131 yapabilir\r\n<\/code><\/pre>\r\n
KATEGOR\u0130 4: Veritaban\u0131 Dosyalar\u0131<\/h3>\r\n
# 9. SQL dump dosyalar\u0131\r\nfiletype:sql intext:password\r\nfiletype:sql intext:username\r\nfiletype:sql \"IDENTIFIED BY\" -git\r\n\r\n# 10. Database backup'lar\u0131\r\next:sql dump\r\next:sql backup\r\nfiletype:sql intext:\"CREATE TABLE\"\r\n\r\nSonuç: Tüm kullan\u0131c\u0131 bilgileri, \u015fifreler, veri taban\u0131 yap\u0131s\u0131\r\n<\/code><\/pre>\r\n
KATEGOR\u0130 5: Log Dosyalar\u0131<\/h3>\r\n
# 11. Hassas log dosyalar\u0131\r\nfiletype:log username\r\nfiletype:log password\r\next:log inurl:access.log\r\n\r\n# 12. Hata loglar\u0131\r\nfiletype:log \"PHP Parse error\"\r\nfiletype:log \"Software error\"\r\next:log inurl:error.log\r\n\r\nSonuç: Sistem zafiyetleri, hata mesajlar\u0131, potansiyel aç\u0131klar\r\n<\/code><\/pre>\r\n
KATEGOR\u0130 6: Ortam De\u011fi\u015fkenleri & Gizli Dosyalar<\/h3>\r\n
# 13. Çevre dosyalar\u0131\r\nfiletype:env \"DB_PASSWORD\"\r\nfiletype:env \"API_KEY\"\r\nfiletype:yml \"DB_PASSWORD\"\r\n\r\n# 14. Özel yap\u0131land\u0131rma dosyalar\u0131\r\nfiletype:ini \"mysql.default_password\"\r\nfiletype:properties \"db.password\"\r\nfiletype:config \"password\"\r\n\r\nSonuç: Database credentials, API keys, encryption keys\r\n<\/code><\/pre>\r\n
KATEGOR\u0130 7: Hata Mesajlar\u0131 & Stack Trace'ler<\/h3>\r\n
# 15. Verbose hata sayfalar\u0131\r\nintext:\"sql syntax near\"\r\nintext:\"error mysql\"\r\nintext:\"Fatal error: Call to undefined function\"\r\n\r\n# 16. Detayl\u0131 hata bilgileri\r\nintitle:\"Fatal Error\" intext:\"Stack trace\"\r\nintext:\"Warning: mysql_connect()\"\r\n\"Index of \/errors\"\r\n\r\nSonuç: Sistem yap\u0131s\u0131 if\u015fa, zamanlanm\u0131\u015f kod yollar\u0131, veri taban\u0131 türü\r\n<\/code><\/pre>\r\n
KATEGOR\u0130 8: Sunucu Bilgileri & Panel Arayüzleri<\/h3>\r\n
# 17. Sunucu yönetim panelleri\r\nintitle:\"Apache Status\"\r\nintitle:\"phpinfo()\"\r\ninurl:phpmyadmin\/setup\/index.php\r\ninurl:server-info\r\n\r\n# 18. Sistem bilgileri\r\nintitle:\"Server Information\" \"System Memory\"\r\nintitle:\"System Information\"\r\nintitle:\"IIS Windows Server\"\r\n\r\nSonuç: Sunucu versiyonu, PHP sürümü, yüklü modüller, sistem info\r\n<\/code><\/pre>\r\n
KATEGOR\u0130 9: Dosya Payla\u015f\u0131mlar\u0131 & SSH<\/h3>\r\n
# 19. Aç\u0131k FTP dizinleri\r\nintitle:\"index of\" inurl:ftp\r\nintext:\"Index of \/\" +.ssh\r\nintitle:\"Apache2 Ubuntu Default Page\"\r\n\r\n# 20. Varsay\u0131lan sunucu sayfalar\u0131\r\nintitle:\"Welcome to nginx\"\r\nintitle:\"IIS Windows Server\"\r\n\r\nSonuç: FTP eri\u015fimi, SSH anahtarlar\u0131, varsay\u0131lan konfigürasyon\r\n<\/code><\/pre>\r\n
\r\n
\u2705 Kendi Sitenizi Test Etme: Ad\u0131m Ad\u0131m Güvenlik Denetimi<\/h2>\r\n
FAZA 1: Envanter (Haftada 1 kez)<\/h3>\r\n
# Script: Google_Dorking_Site_Audit.ps1\r\n\r\n$SiteURL = \"hedefsite.com\"\r\n$OutputFile = \"dorking_audit_$(Get-Date -Format yyyyMMdd).txt\"\r\n\r\n# Tüm sorgular\u0131 test et\r\n$Queries = @(\r\n    \"intitle:`\"index of`\" site:$SiteURL\",\r\n    \"filetype:sql site:$SiteURL\",\r\n    \"filetype:env site:$SiteURL\",\r\n    \"filetype:conf site:$SiteURL\",\r\n    \"inurl:admin intitle:login site:$SiteURL\",\r\n    \"filetype:log site:$SiteURL\",\r\n    \"intext:password site:$SiteURL\",\r\n    \"inurl:phpmyadmin site:$SiteURL\",\r\n    \"intitle:phpinfo site:$SiteURL\",\r\n    \"filetype:bak site:$SiteURL\"\r\n)\r\n\r\nWrite-Host \"\ud83d\udd0d Google Dorking Denetimi Ba\u015flad\u0131...\" -ForegroundColor Cyan\r\nWrite-Host \"Sorgulanacak site: $SiteURL`n\" -ForegroundColor Yellow\r\n\r\n# NOT: Bu script manuel olarak Google'da çal\u0131\u015ft\u0131rman\u0131z gerekir\r\n# Automated'\u0131n yerine, her sorguyu taray\u0131c\u0131da kontrol edin\r\n\r\nforeach ($Query in $Queries) {\r\n    $GoogleURL = \"https:\/\/www.google.com\/search?q=$Query\"\r\n    Write-Host \"\ud83d\udccd Sorgu: $Query\"\r\n    Write-Host \"\ud83d\udd17 URL: $GoogleURL`n\"\r\n}\r\n\r\n# AÇIK BULGU KAYDET\r\n$Findings = @(\r\n    \"\u274c SQL Dosyas\u0131 Bulundu\",\r\n    \"\u274c .env Dosyas\u0131 Eri\u015filebilir\",\r\n    \"\u26a0\ufe0f Admin Panel Google'da \u0130ndeksli\",\r\n    \"\u26a0\ufe0f Log Dosyalar\u0131 Aç\u0131k\"\r\n)\r\n\r\n$Findings | Out-File -Path $OutputFile\r\nWrite-Host \"\u2705 Rapor: $OutputFile\" -ForegroundColor Green\r\n<\/code><\/pre>\r\n
FAZA 2: Manuel Test Ad\u0131mlar\u0131<\/h3>\r\n
ADIM 1: Dizin Listeleme Testi\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\ud83d\udd0d Sorgu:    intitle:\"index of\" site:hedefsite.com\r\n\u2705 Beklenen:  Sonuç yok (veya sadece istenilen dizinler)\r\n\u274c Risk:      Tüm dizinler listeleniyorsa = Veri s\u0131z\u0131nt\u0131s\u0131 riski\r\n\r\nADIM 2: Yap\u0131land\u0131rma Dosya Testi\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\ud83d\udd0d Sorgu:    filetype:env site:hedefsite.com\r\n\u2705 Beklenen:  Sonuç yok\r\n\u274c Risk:      .env bulunursa = Database credentials if\u015fa\r\n\r\nADIM 3: Hata Sayfas\u0131 Testi\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\ud83d\udd0d Sorgu:    intext:\"Fatal error\" site:hedefsite.com\r\n\u2705 Beklenen:  Sonuç yok\r\n\u274c Risk:      Verbose hata = Sistem yap\u0131s\u0131 if\u015fa\r\n\r\nADIM 4: Admin Panel Testi\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\ud83d\udd0d Sorgu:    inurl:admin intitle:login site:hedefsite.com\r\n\u2705 Beklenen:  Sonuç yok (private admin panel'i)\r\n\u274c Risk:      Google'da indeksli admin = Brute force hedefi\r\n\r\nADIM 5: SQL Backup Testi\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\ud83d\udd0d Sorgu:    filetype:sql site:hedefsite.com\r\n\u2705 Beklenen:  Sonuç yok\r\n\u274c Risk:      SQL dosyas\u0131 = Tüm veri taban\u0131 indirilmi\u015f\r\n<\/code><\/pre>\r\n
FAZA 3: Bulgular\u0131 Belgeleme<\/h3>\r\n
DORK\u0130NG DENETIM RAPORU\r\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\r\n\r\nTARIH: 2025-10-24\r\nS\u0130TE: hedefsite.com\r\nDENETÇI: [\u0130sim]\r\n\r\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\r\n\u2502         BULUNMU\u015e RISKLER                \u2502\r\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\r\n\u2502                                          \u2502\r\n\u2502 \ud83d\udd34 KRITIK:                              \u2502\r\n\u2502    \u251c\u2500 SQL Backup Dosyas\u0131 Accessible     \u2502\r\n\u2502    \u251c\u2500 .env Dosyas\u0131 \u0130ndeksli            \u2502\r\n\u2502    \u2514\u2500 Database Credentials Exposed      \u2502\r\n\u2502                                          \u2502\r\n\u2502 \ud83d\udfe1 UYARI:                               \u2502\r\n\u2502    \u251c\u2500 Admin Panel Google'da \u0130ndeksli   \u2502\r\n\u2502    \u251c\u2500 Hata Mesajlar\u0131 Verbose           \u2502\r\n\u2502    \u2514\u2500 Log Dosyalar\u0131 Aç\u0131k               \u2502\r\n\u2502                                          \u2502\r\n\u2502 \ud83d\udfe2 NORMAL:                              \u2502\r\n\u2502    \u251c\u2500 Dizin Listeleme Kapal\u0131           \u2502\r\n\u2502    \u2514\u2500 Yap\u0131land\u0131rma Dosyalar\u0131 Gizli     \u2502\r\n\u2502                                          \u2502\r\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\r\n\r\nÖNER\u0130LER:\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n1. robots.txt güncelle (hassas dosyalar\u0131 gizle)\r\n2. .htaccess ile admin paneli koru\r\n3. .env dosyalar\u0131 web root'ün d\u0131\u015f\u0131na ta\u015f\u0131\r\n4. SQL backup'lar\u0131 indeksleme d\u0131\u015f\u0131 b\u0131rak\r\n5. Hata mesajlar\u0131n\u0131 verbose moddan ç\u0131kar\r\n<\/code><\/pre>\r\n
\r\n
Savunma Stratejileri: Google'\u0131n Endekslemesini Kontrol Etme<\/h2>\r\n
YÖNTEM 1: robots.txt (\u0130lk Savunma Hatt\u0131)<\/h3>\r\n
# robots.txt\r\n# Tüm arama motorlar\u0131 için\r\n\r\nUser-agent: *\r\n\r\n# \u274c G\u0130ZLE: Hassas dizinler\r\nDisallow: \/admin\/\r\nDisallow: \/backup\/\r\nDisallow: \/private\/\r\nDisallow: \/config\/\r\nDisallow: \/.env\r\n\r\n# \u274c G\u0130ZLE: Hassas dosya türleri\r\nDisallow: *.sql\r\nDisallow: *.bak\r\nDisallow: *.conf\r\nDisallow: *.log\r\nDisallow: *.env\r\n\r\n# \u274c G\u0130ZLE: Sistem dosyalar\u0131\r\nDisallow: \/wp-config.php\r\nDisallow: \/web.config\r\nDisallow: \/phpmyadmin\/\r\n\r\n# \u2705 \u0130Z\u0130N VER: Gerekli dosyalar\r\nAllow: \/css\/\r\nAllow: \/js\/\r\nAllow: \/images\/\r\n\r\n# Crawl gecikmesi\r\nCrawl-delay: 10\r\n\r\n# Sitemap\r\nSitemap: https:\/\/hedefsite.com\/sitemap.xml\r\n<\/code><\/pre>\r\n
NOT<\/strong>: robots.txt SADECE iyi niyetli bot'lar\u0131 durduruyor! Kötü amaçl\u0131 bot'lar bunu yok sayar.<\/p>\r\n
YÖNTEM 2: .htaccess (Aktif Koruma)<\/h3>\r\n
# .htaccess - Apache sunucular için\r\n\r\n# 1. Dizin listelemeyi devre d\u0131\u015f\u0131 b\u0131rak\r\nOptions -Indexes\r\n\r\n# 2. Belirli dosya türlerine eri\u015fimi engelle\r\n<FilesMatch \"\\.env$|\\.sql$|\\.bak$|\\.conf$|\\.log$\">\r\n    Order allow,deny\r\n    Deny from all\r\n<\/FilesMatch>\r\n\r\n# 3. Gizli dosyalar\u0131 koru\r\n<Files \"wp-config.php\">\r\n    Order allow,deny\r\n    Deny from all\r\n<\/Files>\r\n\r\n<Files \"configuration.php\">\r\n    Order allow,deny\r\n    Deny from all\r\n<\/Files>\r\n\r\n# 4. Backup dizinini koru\r\n<Directory \"\/var\/www\/backup\">\r\n    Order allow,deny\r\n    Deny from all\r\n<\/Directory>\r\n\r\n# 5. Admin panelini IP ile s\u0131n\u0131rla (iste\u011fe ba\u011fl\u0131)\r\n<Directory \"\/var\/www\/admin\">\r\n    <Limit GET POST>\r\n        Order allow,deny\r\n        Deny from all\r\n        Allow from 192.168.1.0\/24\r\n        Allow from 10.0.0.1\r\n    <\/Limit>\r\n<\/Directory>\r\n\r\n# 6. Hata mesajlar\u0131n\u0131 gizle\r\nphp_flag display_errors Off\r\nphp_flag log_errors On\r\n<\/code><\/pre>\r\n
YÖNTEM 3: web.config (IIS Sunucular \u0130çin)<\/h3>\r\n
<!-- web.config - Microsoft IIS -->\r\n\r\n<?xml version=\"1.0\" encoding=\"utf-8\"?>\r\n<configuration>\r\n  <system.webServer>\r\n    \r\n    <!-- Dizin listelemeyi devre d\u0131\u015f\u0131 b\u0131rak -->\r\n    <directoryBrowse enabled=\"false\" \/>\r\n    \r\n    <!-- Belirli dosyalar\u0131 koru -->\r\n    <security>\r\n      <requestFiltering>\r\n        <fileExtensions>\r\n          <add fileExtension=\".env\" allowed=\"false\" \/>\r\n          <add fileExtension=\".sql\" allowed=\"false\" \/>\r\n          <add fileExtension=\".bak\" allowed=\"false\" \/>\r\n          <add fileExtension=\".conf\" allowed=\"false\" \/>\r\n          <add fileExtension=\".log\" allowed=\"false\" \/>\r\n        <\/fileExtensions>\r\n        \r\n        <hiddenSegments>\r\n          <add segment=\"web.config\" \/>\r\n          <add segment=\".env\" \/>\r\n          <add segment=\"backup\" \/>\r\n          <add segment=\"admin\" \/>\r\n        <\/hiddenSegments>\r\n      <\/requestFiltering>\r\n    <\/security>\r\n    \r\n    <!-- Hata sayfalar\u0131n\u0131 özelle\u015ftir (Verbose bilgisiz) -->\r\n    <httpErrors errorMode=\"Custom\" defaultPath=\"\/errors\/error.html\">\r\n      <error statusCode=\"404\" path=\"\/errors\/404.html\" \/>\r\n      <error statusCode=\"500\" path=\"\/errors\/500.html\" \/>\r\n    <\/httpErrors>\r\n    \r\n  <\/system.webServer>\r\n<\/configuration>\r\n<\/code><\/pre>\r\n
YÖNTEM 4: Google Search Console (\u0130ndekslemeyi Kontrol Et)<\/h3>\r\n
\ud83d\udccc ADIMLAR:\r\n\r\n1. Google Search Console'e gir\r\n   https:\/\/search.google.com\/search-console\r\n\r\n2. Sitenizi do\u011frula (DNS\/HTML\/Sitemap)\r\n\r\n3. \"Kapsam\" → \"Hariç Tutmalar\" kontrol et\r\n   \u251c\u2500 Gizli dosyalar indekslenmemi\u015f mi?\r\n   \u251c\u2500 Admin paneli indekslenmemi\u015f mi?\r\n   \u2514\u2500 Private dizinler var m\u0131?\r\n\r\n4. \"URL Denetimi\" ile spesifik sayfalar\u0131 kontrol et\r\n   \u251c\u2500 inurl:admin\r\n   \u251c\u2500 filetype:env\r\n   \u2514\u2500 filetype:sql\r\n\r\n5. \"Ç\u0131karma \u0130ste\u011fi\" (Removal Requests)\r\n   \u251c\u2500 Hassas sayfalar\u0131 iste\r\n   \u251c\u2500 Zaman a\u015f\u0131m\u0131: 3 ay (Google'dan kalk\u0131yor)\r\n   \u2514\u2500 Kal\u0131c\u0131 olmas\u0131 için robots.txt güncelleyin\r\n\r\n6. Sitemap'\u0131 yönet\r\n   \u251c\u2500 Hassas dosya YÜKLEMEYIN\r\n   \u251c\u2500 Sadece halka aç\u0131k sayfalar\u0131 ekleyin\r\n   \u2514\u2500 Düzenli güncelleyin\r\n<\/code><\/pre>\r\n
YÖNTEM 5: HTTP Ba\u015fl\u0131klar\u0131 (Meta Etiketler)<\/h3>\r\n
<!-- HTML Head'e ekle -->\r\n\r\n<!-- Google'a indeksleme -->\r\n<meta name=\"robots\" content=\"noindex, nofollow\" \/>\r\n\r\n<!-- Belirli sayfalar için (admin gibi) -->\r\n<meta name=\"googlebot\" content=\"noindex\" \/>\r\n\r\n<!-- Bing için -->\r\n<meta name=\"bingbot\" content=\"noindex\" \/>\r\n\r\n<!-- Private sayfalar için -->\r\n<meta name=\"robots\" content=\"noindex, nofollow, noarchive\" \/>\r\n\r\n<!-- Cache yasakla -->\r\n<meta http-equiv=\"cache-control\" content=\"no-cache, no-store, must-revalidate\" \/>\r\n<meta http-equiv=\"pragma\" content=\"no-cache\" \/>\r\n<meta http-equiv=\"expires\" content=\"0\" \/>\r\n<\/code><\/pre>\r\n
\r\n
Bing & DuckDuckGo Dorking: Google'\u0131n Ötesine Geçin<\/h2>\r\n
Neden Google D\u0131\u015f\u0131nda da Dorking Yapmal\u0131s\u0131n\u0131z?<\/h3>\r\n
GERÇEK: Sadece %5 web sayfas\u0131 Google taraf\u0131ndan indekslenir!\r\n        Di\u011fer arama motorlar\u0131 farkl\u0131 sayfalar bulabilir\r\n        \r\nSONUÇ:  Bing'de gizli dosya bulunabilir ama Google'da yok\r\n        DuckDuckGo farkl\u0131 crawling kurallar\u0131na sahip\r\n<\/code><\/pre>\r\n
BING DORKING<\/h3>\r\n
Bing Operatörleri<\/h4>\r\n
site:         Belirli sitede arama (Google gibi)\r\nintitle:      Ba\u015fl\u0131kta arama (Google gibi)\r\ninurl:        URL'de arama (Google gibi)\r\nfiletype:     Dosya türü (Google gibi)\r\n\r\nFAKAT Bing'in kendine özgü operatörleri:\r\n\r\nip:           IP adresine göre ara\r\ndomain:       Domain bilgisi ara\r\nlinkfromdomain: Spesifik domainlerden linkler\r\ncontains:     Metin içeri\u011fini ara\r\n<\/code><\/pre>\r\n
Bing Dorking Örnekleri<\/h4>\r\n
# 1. Dizin Listeleme (Bing'de)\r\nintitle:\"index of\" site:hedefsite.com\r\n\r\n# 2. SQL Dosyalar\u0131\r\nfiletype:sql site:hedefsite.com password\r\n\r\n# 3. .env Dosyalar\u0131\r\nfiletype:env site:hedefsite.com\r\n\r\n# 4. Admin Panelleri\r\ninurl:admin site:hedefsite.com intitle:login\r\n\r\n# 5. Log Dosyalar\u0131\r\nfiletype:log site:hedefsite.com\r\n\r\n# 6. IP Adresi Taraf\u0131ndan Ara (Bing'e özel!)\r\nip:192.168.1.1\r\nip:10.0.0.0\/24\r\n\r\n# 7. Domain \u0130statistikleri\r\ndomain:hedefsite.com\r\n\r\n# 8. BackLink Analizi\r\nlinkfromdomain:example.com site:hedefsite.com\r\n<\/code><\/pre>\r\n
Bing URL \u015eablonu<\/h4>\r\n
https:\/\/www.bing.com\/search?q=site:hedefsite.com+filetype:sql\r\n<\/code><\/pre>\r\n
DUCKDUCKGO DORKING<\/h3>\r\n
DuckDuckGo Operatörleri<\/h4>\r\n
DuckDuckGo daha s\u0131n\u0131rl\u0131 operatör deste\u011fi sunar ama faydal\u0131 hale getirilebilir:<\/p>\r\n
site:         Belirli sitede arama\r\nfiletype:     Dosya türü\r\nintitle:      Ba\u015fl\u0131kta metin\r\ninurl:        URL'de metin\r\n\r\nÖZEL: DuckDuckGo Google'dan daha az operatörü destekler\r\n      Fakat farkl\u0131 içeri\u011fi indeksledi\u011fi için faydal\u0131 olabilir\r\n<\/code><\/pre>\r\n
DuckDuckGo Dorking Örnekleri<\/h4>\r\n
# 1. Temel Site Aramas\u0131\r\nsite:hedefsite.com admin\r\n\r\n# 2. Dosya Türü\r\nfiletype:pdf site:hedefsite.com\r\n\r\n# 3. Ba\u015fl\u0131k ve URL Kombinasyonu\r\nintitle:admin inurl:panel site:hedefsite.com\r\n\r\n# 4. Password Dosyalar\u0131\r\nfiletype:txt password site:hedefsite.com\r\n\r\n# 5. Konfigürasyon Dosyalar\u0131\r\nfiletype:conf site:hedefsite.com\r\n\r\n# 6. Database Dosyalar\u0131\r\nfiletype:sql site:hedefsite.com\r\n<\/code><\/pre>\r\n
DuckDuckGo URL \u015eablonu<\/h4>\r\n
https:\/\/duckduckgo.com\/?q=site:hedefsite.com+filetype:sql\r\n<\/code><\/pre>\r\n
KAR\u015eILA\u015eTIRMA: Google vs. Bing vs. DuckDuckGo<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Operatör<\/th>\r\nGoogle<\/th>\r\nBing<\/th>\r\nDuckDuckGo<\/th>\r\n<\/tr>\r\n<\/thead>\r\n
site:<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
intitle:<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
inurl:<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
filetype:<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
ip:<\/td>\r\n\u274c<\/td>\r\n\u2705<\/td>\r\n\u274c<\/td>\r\n<\/tr>\r\n
cache:<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u274c<\/td>\r\n<\/tr>\r\n
related:<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u274c<\/td>\r\n<\/tr>\r\n
link:<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u274c<\/td>\r\n<\/tr>\r\n
intext:<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
OR \/ |<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
- (hariç)<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n
Bing + DuckDuckGo Otomatik Sorgu<\/h3>\r\n
# Script: Multi_Search_Engine_Dorking.ps1\r\n\r\n$Site = \"hedefsite.com\"\r\n$Queries = @(\r\n    \"filetype:sql\",\r\n    \"filetype:env\",\r\n    \"intitle:admin\",\r\n    \"inurl:backup\"\r\n)\r\n\r\nWrite-Host \"\ud83d\udd0d Multi-Engine Dorking Ba\u015flad\u0131`n\" -ForegroundColor Cyan\r\n\r\nforeach ($Query in $Queries) {\r\n    $GoogleURL = \"https:\/\/www.google.com\/search?q=site:$Site+$Query\"\r\n    $BingURL = \"https:\/\/www.bing.com\/search?q=site:$Site+$Query\"\r\n    $DuckURL = \"https:\/\/duckduckgo.com\/?q=site:$Site+$Query\"\r\n    \r\n    Write-Host \"\ud83d\udccd Sorgu: $Query\"\r\n    Write-Host \"  Google: $GoogleURL\"\r\n    Write-Host \"  Bing:   $BingURL\"\r\n    Write-Host \"  Duck:   $DuckURL`n\"\r\n}\r\n<\/code><\/pre>\r\n
\r\n
\ud83d\udd27 Burp Suite ile Otomatik Tarama: Web Dorking Entegrasyonu<\/h2>\r\n
Burp Suite Nedir?<\/h3>\r\n
Burp Suite<\/strong>, web uygulamalar\u0131n\u0131n güvenlik testini yapan profesyonel araçt\u0131r.<\/p>\r\n
KULLANIM: \r\n\u251c\u2500 Proxy olarak: Tüm HTTP trafi\u011fini yakala ve analiz et\r\n\u251c\u2500 Scanner olarak: Otomatik güvenlik aç\u0131klar\u0131 tara\r\n\u251c\u2500 Repeater olarak: Talepler manuel olarak tekrarla\r\n\u2514\u2500 Intruder olarak: Brute force sald\u0131r\u0131lar\u0131 yap\r\n<\/code><\/pre>\r\n
Kurulum<\/h3>\r\n
# Windows\/Mac\/Linux\r\n# \u0130ndir: https:\/\/portswigger.net\/burp\r\n\r\n# Community Edition (Ücretsiz)\r\n# Professional Edition (Ücretli - $399\/y\u0131l)\r\n\r\n# Linux kurulumu:\r\ncd ~\/tools\r\nwget https:\/\/portswigger.net\/burp\/downloads\/community-latest.jar\r\njava -jar burpsuite_community_latest.jar\r\n<\/code><\/pre>\r\n
Burp Suite + Dorking \u0130\u015f Ak\u0131\u015f\u0131<\/h3>\r\n
ADIM 1: Hedef Belirleme\r\n  \u2514\u2500 Burp'te \"Target\" → Site Haritas\u0131\r\n  \u2514\u2500 Sitenin tüm sayfalar\u0131 taran\u0131r\r\n\r\nADIM 2: Directives Ekleme\r\n  \u2514\u2500 \"Settings\" → \"Session Handling Rules\"\r\n  \u2514\u2500 Crawler directives ekle\r\n\r\nADIM 3: Tarama Ba\u015flatla\r\n  \u2514\u2500 \"Scanner\" → \"Active Scan\"\r\n  \u2514\u2500 Aç\u0131klar\u0131 otomatik tespit et\r\n\r\nADIM 4: Dorking Sonuçlar\u0131\r\n  \u2514\u2500 Aç\u0131k dosyalar\u0131 tespit et\r\n  \u2514\u2500 Admin panelleri, backup'lar vb.\r\n\r\nADIM 5: Rapor Olu\u015ftur\r\n  \u2514\u2500 \"Report\" → HTML\/PDF\r\n  \u2514\u2500 Bulgular\u0131 belge et\r\n<\/code><\/pre>\r\n
Burp Suite Profesyonel Özellikler<\/h3>\r\n
1. Tarama Profilleri<\/h4>\r\n
<!-- Burp Tarama Profili Örne\u011fi -->\r\nProfile Name: \"Dorking Simulation\"\r\n\r\nCrawl Settings:\r\n\u251c\u2500 Follow redirects: ON\r\n\u251c\u2500 Crawl Java applets: OFF\r\n\u251c\u2500 Crawl client-side JavaScript: ON\r\n\u2514\u2500 Include comments in crawl scope: ON\r\n\r\nScanner Settings:\r\n\u251c\u2500 Active scan: ON\r\n\u251c\u2500 Passive scan: ON\r\n\u251c\u2500 Extensions: ON\r\n\u2514\u2500 Scan maximum: 100% coverage\r\n\r\nCheck Categories:\r\n\u251c\u2500 Information Gathering: ON\r\n\u251c\u2500 Configuration: ON\r\n\u251c\u2500 File Disclosure: ON\r\n\u2514\u2500 Miscellaneous: ON\r\n<\/code><\/pre>\r\n
2. Custom Directives (Makro)<\/h4>\r\n
\/\/ Burp Makro Örne\u011fi\r\n\/\/ Giri\u015f yap → Admin paneline eri\u015f\r\n\r\ndef response1 = sendRequest(loginRequest);\r\ndef sessionCookie = extractHeader(response1, \"Set-Cookie\");\r\ndef response2 = sendRequest(adminRequest, sessionCookie);\r\ndef vulnerabilities = analyzeResponse(response2);\r\n<\/code><\/pre>\r\n
Burp Suite Community vs. Professional<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Özellik<\/th>\r\nCommunity<\/th>\r\nProfessional<\/th>\r\n<\/tr>\r\n<\/thead>\r\n
Passive Scan<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
Active Scan<\/td>\r\n\u274c<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
Intruder<\/td>\r\n\u2705 (s\u0131n\u0131rl\u0131)<\/td>\r\n\u2705 (unlimited)<\/td>\r\n<\/tr>\r\n
Scanner<\/td>\r\n\u274c<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
Repeater<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
Decoder<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
Comparator<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
Sequencer<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
Macro (API)<\/td>\r\n\u274c<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n
Extender<\/td>\r\n\u2705<\/td>\r\n\u2705<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n
Burp Suite Extensions (Eklentiler)<\/h3>\r\n
Önemli Extensions:\r\n\u251c\u2500 AuthMatrix - Multi-user authorization test\r\n\u251c\u2500 Custom Parameter Handler - Spesifik parametreleri test et\r\n\u251c\u2500 SQLMap integration - SQL injection otomatik\r\n\u251c\u2500 Turbo Intruder - H\u0131zl\u0131 brute force\r\n\u2514\u2500 Collaborator Everywhere - Out-of-band testing\r\n<\/code><\/pre>\r\n
Burp Suite \u0130\u015f Ak\u0131\u015f\u0131: Pratik Örnek<\/h3>\r\n
SENARYO: hedefsite.com'un güvenli\u011fini test et\r\n\r\nADIM 1: Proxy Ayarla\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\u251c\u2500 Proxy: 127.0.0.1:8080\r\n\u251c\u2500 Scope: hedefsite.com\r\n\u2514\u2500 Taray\u0131c\u0131 proxy ayar\u0131n\u0131 Burp'e yönlendir\r\n\r\nADIM 2: Siteler Proxy ile Taray\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\u251c\u2500 Taray\u0131c\u0131da hedefsite.com ziyaret et\r\n\u251c\u2500 Tüm sayfalar proxy arac\u0131l\u0131\u011f\u0131yla geç\r\n\u2514\u2500 HTTP istekleri Burp'te kaydedilir\r\n\r\nADIM 3: Site Haritas\u0131 Olu\u015ftur\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\u251c\u2500 \"Target\" → \"Site Map\"\r\n\u251c\u2500 \u0130ndent edilmi\u015f yap\u0131 görünür\r\n\u2514\u2500 Eri\u015filebilir dizinler tespit edilir\r\n\r\nADIM 4: Tarama Ba\u015flat\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\u251c\u2500 Sorgu seç (sa\u011f t\u0131kla)\r\n\u251c\u2500 \"Scan\" → \"Active Scan\"\r\n\u251c\u2500 Tarama ba\u015flar (5-30 dakika)\r\n\u2514\u2500 Aç\u0131klar tespit edilir\r\n\r\nADIM 5: Rapor\r\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\u251c\u2500 \"Results\" → Aç\u0131klar\u0131 gözden geçir\r\n\u251c\u2500 S\u0131n\u0131f: Kritik\/Yüksek\/Orta\/Dü\u015fük\r\n\u251c\u2500 \u0130nsan tasar\u0131m\u0131: SQL Injection, XSS vb.\r\n\u2514\u2500 \"Report\" → HTML olarak kaydet\r\n<\/code><\/pre>\r\n
Burp Repeater ile Manuel Test<\/h3>\r\n
AMAÇ: Belirli bir iste\u011fi tekrar tekrar göndererek test et\r\n\r\nADIM 1: \u0130ste\u011fi Yakala\r\n\u251c\u2500 Proxy'de HTTP iste\u011fini bul\r\n\u251c\u2500 Sa\u011f t\u0131kla → \"Send to Repeater\"\r\n\r\nADIM 2: \u0130ste\u011fi Düzenle\r\n\u251c\u2500 Headers: Authorization, Cookies de\u011fi\u015ftir\r\n\u251c\u2500 Body: POST parametreleri oynat\r\n\u251c\u2500 Spesifik senaryolar\u0131 test et\r\n\r\nADIM 3: Gönder ve Analiz Et\r\n\u251c\u2500 Gönder (Ctrl+Enter)\r\n\u251c\u2500 Response: Status kodu, body, headers\r\n\u251c\u2500 Aç\u0131k m\u0131? (Unexpected behavior?)\r\n\r\nÖRNEK:\r\nGET \/admin\/panel.php HTTP\/1.1\r\nHost: hedefsite.com\r\nCookie: sessionid=12345\r\n\r\nYANIT:\r\n200 OK\r\nContent-Type: text\/html\r\n← Admin paneli aç\u0131l\u0131rsa = Authentication Bypass!\r\n<\/code><\/pre>\r\n
\r\n
OSINT Araçlar\u0131: Web Dorking Otomatizasyonu<\/h2>\r\n
OSINT Nedir?<\/h3>\r\n
OSINT<\/strong> (Open Source Intelligence), internet'te herkese aç\u0131k kaynaklar\u0131 kullanarak istihbarat toplamakt\u0131r.<\/p>\r\n
OSINT KAYNAKLARI:\r\n\u251c\u2500 Arama motorlar\u0131 (Google, Bing)\r\n\u251c\u2500 Sosyal medya (Twitter, LinkedIn)\r\n\u251c\u2500 WHOIS veritaban\u0131\r\n\u251c\u2500 DNS kay\u0131tlar\u0131\r\n\u251c\u2500 \u0130nternet Ar\u015fivi (Wayback Machine)\r\n\u251c\u2500 Haber kaynaklar\u0131\r\n\u251c\u2500 Forum'lar ve bloglara\r\n\u2514\u2500 Kamuya aç\u0131k belgeler\r\n<\/code><\/pre>\r\n
OSINT Araçlar\u0131 Özeti<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Araç<\/th>\r\nKullan\u0131m<\/th>\r\nPlatform<\/th>\r\n<\/tr>\r\n<\/thead>\r\n
Shodan<\/strong><\/td>\r\n\u0130nternet'te ba\u011fl\u0131 cihazlar bul<\/td>\r\nWeb<\/td>\r\n<\/tr>\r\n
Censys<\/strong><\/td>\r\nSSL sertifikalar\u0131, sunucular<\/td>\r\nWeb<\/td>\r\n<\/tr>\r\n
theHarvester<\/strong><\/td>\r\nEmail adresleri topla<\/td>\r\nCLI<\/td>\r\n<\/tr>\r\n
Recon-ng<\/strong><\/td>\r\nModüler ke\u015fif<\/td>\r\nCLI<\/td>\r\n<\/tr>\r\n
OSINT Framework<\/strong><\/td>\r\nTüm araçlar\u0131 bir dashboard'da<\/td>\r\nWeb<\/td>\r\n<\/tr>\r\n
SpiderFoot<\/strong><\/td>\r\nOtomatik OSINT<\/td>\r\nGUI\/Web<\/td>\r\n<\/tr>\r\n
Maltego<\/strong><\/td>\r\nGörsel ili\u015fki analizi<\/td>\r\nGUI<\/td>\r\n<\/tr>\r\n
Whois<\/strong><\/td>\r\nDomain bilgisi<\/td>\r\nCLI<\/td>\r\n<\/tr>\r\n
DNSrecon<\/strong><\/td>\r\nDNS enumerasyonu<\/td>\r\nCLI<\/td>\r\n<\/tr>\r\n
Nmap<\/strong><\/td>\r\nA\u011f taramas\u0131<\/td>\r\nCLI<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n
1. Shodan: \"\u0130nternet'in Arama Motoru\"<\/h3>\r\n
Shodan<\/strong>, internet'te ba\u011fl\u0131 olan sunucular\u0131, IoT cihazlar\u0131n\u0131, kameralar\u0131n\u0131, yaz\u0131c\u0131lar\u0131n\u0131 tarar.<\/p>\r\n
Kurulum<\/h4>\r\n
# Pip yüklü olmal\u0131\r\npip install shodan\r\n\r\n# API Key al: https:\/\/www.shodan.io\/\r\n# Kay\u0131t: https:\/\/account.shodan.io\/register\r\n<\/code><\/pre>\r\n
Shodan Python Örne\u011fi<\/h4>\r\n
#!\/usr\/bin\/env python3\r\n# shodan_dorking.py\r\n\r\nimport shodan\r\nimport json\r\n\r\n# API Key (https:\/\/account.shodan.io\/)\r\nSHODAN_API_KEY = \"YOUR_API_KEY\"\r\n\r\ndef search_shodan(query):\r\n    \"\"\"Shodan'da arama yap\"\"\"\r\n    api = shodan.Shodan(SHODAN_API_KEY)\r\n    \r\n    try:\r\n        print(f\"\ud83d\udd0d Shodan'da arama: {query}\\n\")\r\n        results = api.search(query)\r\n        \r\n        print(f\"\u2705 {results['total']} sonuç bulundu\\n\")\r\n        \r\n        for result in results['matches']:\r\n            print(f\"IP: {result['ip_str']}\")\r\n            print(f\"Port: {result['port']}\")\r\n            print(f\"Ba\u015fl\u0131k: {result.get('title', 'N\/A')}\")\r\n            print(f\"ISP: {result.get('isp', 'N\/A')}\")\r\n            print(f\"Location: {result.get('location', {}).get('country_name', 'N\/A')}\")\r\n            print(f\"\u2500\" * 50)\r\n    \r\n    except shodan.APIError as e:\r\n        print(f\"\u274c Hata: {e}\")\r\n\r\n# Örnek Sorgular\r\nif __name__ == \"__main__\":\r\n    queries = [\r\n        'product:\"Apache\" port:80',\r\n        'title:\"admin\" port:8080',\r\n        'phpmyadmin city:\"Istanbul\"',\r\n        'webcam city:\"Ankara\"',\r\n        'SCADA city:\"Turkey\"'\r\n    ]\r\n    \r\n    for query in queries:\r\n        search_shodan(query)\r\n        print(\"\\n\" + \"=\" * 50 + \"\\n\")\r\n<\/code><\/pre>\r\n
Shodan Web Arayüzü Sorgular\u0131<\/h4>\r\n
# 1. Apache Sunucular\u0131\r\nproduct:\"Apache\"\r\n\r\n# 2. Default Portlar\r\nport:8080 product:Apache\r\n\r\n# 3. phpMyAdmin Aç\u0131k\r\nphpmyadmin\r\n\r\n# 4. Telnet Aç\u0131k (Tehlikeli!)\r\nport:23 telnet\r\n\r\n# 5. RDP Aç\u0131k\r\nport:3389 RDP\r\n\r\n# 6. Webcamlar\r\nhtml:\"webcamxp\"\r\n\r\n# 7. Yaz\u0131c\u0131lar\r\n\"Xerox\" port:80\r\n\r\n# 8. SCADA Sistemleri\r\nSCADA\r\n\r\n# 9. Sertifikalar ile Arama\r\nssl:certificate\r\n\r\n# 10. IP Aral\u0131\u011f\u0131nda Arama\r\nnet:192.168.1.0\/24\r\n<\/code><\/pre>\r\n
2. Censys: SSL Sertifikalar\u0131 & Sunucular<\/h3>\r\n
Censys<\/strong>, SSL sertifika bilgilerinden hedef hakk\u0131nda bilgi toplar.<\/p>\r\n
Kurulum<\/h4>\r\n
pip install censys\r\n\r\n# API Key: https:\/\/censys.io\/\r\n<\/code><\/pre>\r\n
Censys Örne\u011fi<\/h4>\r\n
#!\/usr\/bin\/env python3\r\n# censys_dorking.py\r\n\r\nfrom censys.certificates import CensysCertificates\r\nfrom censys.hosts import CensysHosts\r\n\r\n# API Anahtarlar\u0131\r\nUID = \"YOUR_UID\"\r\nSECRET = \"YOUR_SECRET\"\r\n\r\ndef search_certificates(domain):\r\n    \"\"\"Domain için sertifikalar\u0131 ara\"\"\"\r\n    cert = CensysCertificates(UID, SECRET)\r\n    \r\n    try:\r\n        print(f\"\ud83d\udd0d {domain} için sertifikalar\u0131 tarama...\\n\")\r\n        results = cert.query(f\"parsed.names: {domain}\")\r\n        \r\n        for result in results:\r\n            print(f\"Sertifika: {result['fingerprint_sha256']}\")\r\n            print(f\"Subject: {result['subject']}\")\r\n            print(f\"\u0130ssuer: {result['issuer']}\")\r\n            print(f\"Geçerlilik: {result['validity_period_start']} - {result['validity_period_end']}\")\r\n            print(f\"\u2500\" * 50)\r\n    \r\n    except Exception as e:\r\n        print(f\"\u274c Hata: {e}\")\r\n\r\ndef search_hosts(query):\r\n    \"\"\"Sunucular\u0131 ara\"\"\"\r\n    hosts = CensysHosts(UID, SECRET)\r\n    \r\n    try:\r\n        print(f\"\ud83d\udd0d {query} için sunucular\u0131 tarama...\\n\")\r\n        results = hosts.query(query)\r\n        \r\n        for result in results:\r\n            print(f\"IP: {result['ip']}\")\r\n            print(f\"AS: {result['autonomous_system']}\")\r\n            print(f\"Location: {result['location']}\")\r\n            print(f\"\u2500\" * 50)\r\n    \r\n    except Exception as e:\r\n        print(f\"\u274c Hata: {e}\")\r\n\r\nif __name__ == \"__main__\":\r\n    search_certificates(\"hedefsite.com\")\r\n    search_hosts(\"hedefsite.com\")\r\n<\/code><\/pre>\r\n
3. theHarvester: Email & Subdomain Toplama<\/h3>\r\n
theHarvester<\/strong>, email adresleri ve subdomain'leri çe\u015fitli kaynaktan toplar.<\/p>\r\n
Kurulum<\/h4>\r\n
git clone https:\/\/github.com\/laramies\/theHarvester\r\ncd theHarvester\r\npip install -r requirements.txt\r\n<\/code><\/pre>\r\n
theHarvester Kullan\u0131m\u0131<\/h4>\r\n
# Email adresleri topla\r\npython3 theHarvester.py -d hedefsite.com -l 500 -b google\r\n\r\n# Tüm kaynaklardan topla\r\npython3 theHarvester.py -d hedefsite.com -b all\r\n\r\n# Sonuçlar\u0131 dosyaya kaydet\r\npython3 theHarvester.py -d hedefsite.com -b all -f result.html\r\n\r\n# Subdomain'leri bul\r\npython3 theHarvester.py -d hedefsite.com -l 200 -b bing\r\n\r\n# Veri taban\u0131ndan ara\r\npython3 theHarvester.py -d hedefsite.com -s -b censys\r\n<\/code><\/pre>\r\n
Ç\u0131kt\u0131 Örne\u011fi:<\/strong><\/p>\r\n
Email Adresleri Bulundu:\r\n\u251c\u2500 admin@hedefsite.com\r\n\u251c\u2500 info@hedefsite.com\r\n\u251c\u2500 support@hedefsite.com\r\n\u2514\u2500 security@hedefsite.com\r\n\r\nSubdomain'ler:\r\n\u251c\u2500 admin.hedefsite.com\r\n\u251c\u2500 api.hedefsite.com\r\n\u251c\u2500 mail.hedefsite.com\r\n\u2514\u2500 cdn.hedefsite.com\r\n<\/code><\/pre>\r\n
4. SpiderFoot: Otomatik OSINT<\/h3>\r\n
SpiderFoot<\/strong>, tüm OSINT araçlar\u0131n\u0131 otomatize eden web arayüzü.<\/p>\r\n
Kurulum<\/h4>\r\n
git clone https:\/\/github.com\/smicallef\/spiderfoot\r\ncd spiderfoot\r\npip install -r requirements.txt\r\npython3 sf.py\r\n# Taray\u0131c\u0131da: http:\/\/127.0.0.1:5001\r\n<\/code><\/pre>\r\n
SpiderFoot Çal\u0131\u015fmas\u0131<\/h4>\r\n
1. Target belirleme (Domain\/IP\/Email)\r\n2. Modülleri seç (DNS, Email, Whois vb.)\r\n3. Taramay\u0131 ba\u015flat\r\n4. Sonuçlar\u0131 analiz et (\u0130li\u015fkiler, emails, subdomains)\r\n5. Rapor d\u0131\u015fa aktar\u0131m\u0131\r\n<\/code><\/pre>\r\n
5. Recon-ng: Modüler Ke\u015fif<\/h3>\r\n
Recon-ng<\/strong>, penetration testing için modüler OSINT framework'ü.<\/p>\r\n
Kurulum<\/h4>\r\n
git clone https:\/\/github.com\/lanmaster53\/recon-ng\r\ncd recon-ng\r\npip install -r requirements.txt\r\n.\/recon-ng\r\n<\/code><\/pre>\r\n
Recon-ng Komutlar\u0131<\/h4>\r\n
> workspace create hedefsite\r\n> modules search github\r\n> modules load recon\/domains-companies\/github_api\r\n> options set COMPANY \"Hedef \u015eirketi\"\r\n> run\r\n\r\n# Sonuçlar veritaban\u0131na kaydedilir\r\n> show companies\r\n> show domains\r\n> show credentials\r\n<\/code><\/pre>\r\n
\r\n
\ud83d\udc0d Python Dorking Script'i: Otomatik Tarama<\/h2>\r\n
Python Gerekçeleri<\/h3>\r\n
pip install requests beautifulsoup4 lxml google-search-results shodan censys\r\n<\/code><\/pre>\r\n
Ana Script: Komple Dorking Toolkit<\/h3>\r\n
#!\/usr\/bin\/env python3\r\n# dorking_automation.py\r\n\r\nimport requests\r\nfrom bs4 import BeautifulSoup\r\nimport json\r\nimport time\r\nimport sys\r\nfrom urllib.parse import urlencode\r\n\r\nclass DorkingToolkit:\r\n    def __init__(self, target_domain):\r\n        self.target = target_domain\r\n        self.results = {\r\n            'google': [],\r\n            'bing': [],\r\n            'duckduckgo': [],\r\n            'vulnerabilities': []\r\n        }\r\n        self.headers = {\r\n            'User-Agent': 'Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36'\r\n        }\r\n    \r\n    def google_dork(self, query):\r\n        \"\"\"Google Dorking\"\"\"\r\n        full_query = f\"site:{self.target} {query}\"\r\n        url = f\"https:\/\/www.google.com\/search?q={urlencode({'q': full_query})}\"\r\n        \r\n        try:\r\n            print(f\"\ud83d\udd0d Google: {full_query}\")\r\n            # Not: Google yaln\u0131z bot'lar\u0131 engelledi\u011finden, ba\u015far\u0131s\u0131z olabilir\r\n            # Gerçek uygulamada Selenium veya API kullan\u0131lmal\u0131\r\n            response = requests.get(url, headers=self.headers, timeout=5)\r\n            return url\r\n        except Exception as e:\r\n            print(f\"\u274c Google Hatas\u0131: {e}\")\r\n            return None\r\n    \r\n    def bing_dork(self, query):\r\n        \"\"\"Bing Dorking\"\"\"\r\n        full_query = f\"site:{self.target} {query}\"\r\n        url = f\"https:\/\/www.bing.com\/search?q={urlencode({'q': full_query})}\"\r\n        \r\n        try:\r\n            print(f\"\ud83d\udd0d Bing: {full_query}\")\r\n            response = requests.get(url, headers=self.headers, timeout=5)\r\n            \r\n            if response.status_code == 200:\r\n                soup = BeautifulSoup(response.content, 'html.parser')\r\n                results = []\r\n                for item in soup.find_all('div', class_='b_algo'):\r\n                    link = item.find('a')\r\n                    if link:\r\n                        results.append(link.get('href'))\r\n                self.results['bing'].append({\r\n                    'query': query,\r\n                    'results': results,\r\n                    'count': len(results)\r\n                })\r\n            \r\n            return url\r\n        except Exception as e:\r\n            print(f\"\u274c Bing Hatas\u0131: {e}\")\r\n            return None\r\n    \r\n    def duckduckgo_dork(self, query):\r\n        \"\"\"DuckDuckGo Dorking\"\"\"\r\n        full_query = f\"site:{self.target} {query}\"\r\n        url = f\"https:\/\/duckduckgo.com\/?q={urlencode({'q': full_query})}\"\r\n        \r\n        try:\r\n            print(f\"\ud83d\udd0d DuckDuckGo: {full_query}\")\r\n            response = requests.get(url, headers=self.headers, timeout=5)\r\n            \r\n            if response.status_code == 200:\r\n                soup = BeautifulSoup(response.content, 'html.parser')\r\n                results = []\r\n                for item in soup.find_all('a', class_='result__a'):\r\n                    results.append(item.get('href'))\r\n                self.results['duckduckgo'].append({\r\n                    'query': query,\r\n                    'results': results,\r\n                    'count': len(results)\r\n                })\r\n            \r\n            return url\r\n        except Exception as e:\r\n            print(f\"\u274c DuckDuckGo Hatas\u0131: {e}\")\r\n            return None\r\n    \r\n    def analyze_results(self):\r\n        \"\"\"Sonuçlar\u0131 analiz et\"\"\"\r\n        print(\"\\n\" + \"=\" * 60)\r\n        print(\"\ud83d\udcca DORKING ANALIZ RAPORU\")\r\n        print(\"=\" * 60 + \"\\n\")\r\n        \r\n        print(f\"\ud83c\udfaf Target: {self.target}\\n\")\r\n        \r\n        # Bing sonuçlar\u0131\r\n        print(\"\ud83d\udd35 Bing Sonuçlar\u0131:\")\r\n        total_bing = sum(r['count'] for r in self.results['bing'])\r\n        print(f\"   Toplam: {total_bing} sonuç\")\r\n        for result in self.results['bing']:\r\n            print(f\"   \u251c\u2500 {result['query']}: {result['count']}\")\r\n        \r\n        # DuckDuckGo sonuçlar\u0131\r\n        print(\"\\n\ud83d\udd34 DuckDuckGo Sonuçlar\u0131:\")\r\n        total_duck = sum(r['count'] for r in self.results['duckduckgo'])\r\n        print(f\"   Toplam: {total_duck} sonuç\")\r\n        for result in self.results['duckduckgo']:\r\n            print(f\"   \u251c\u2500 {result['query']}: {result['count']}\")\r\n        \r\n        # Risk Analizi\r\n        print(\"\\n\u26a0\ufe0f  RISK ANAL\u0130Z\u0130:\")\r\n        if total_bing > 0 or total_duck > 0:\r\n            print(\"   \ud83d\udd34 KRITIK: Hassas dosyalar Google'da bulunmu\u015f!\")\r\n            self.results['vulnerabilities'].append(\"Dizin listeleme aç\u0131\u011f\u0131\")\r\n        if any('admin' in r['query'] for r in self.results['bing']):\r\n            print(\"   \ud83d\udfe1 UYARI: Admin paneli indeksli\")\r\n            self.results['vulnerabilities'].append(\"Admin paneli indeksli\")\r\n        \r\n        print(\"\\n\")\r\n    \r\n    def generate_report(self, filename='dorking_report.json'):\r\n        \"\"\"Rapor olu\u015ftur\"\"\"\r\n        report = {\r\n            'target': self.target,\r\n            'scan_date': time.strftime('%Y-%m-%d %H:%M:%S'),\r\n            'results': self.results,\r\n            'total_findings': sum(r.get('count', 0) for r in self.results['bing']) + \r\n                            sum(r.get('count', 0) for r in self.results['duckduckgo']),\r\n            'vulnerabilities': self.results['vulnerabilities']\r\n        }\r\n        \r\n        with open(filename, 'w', encoding='utf-8') as f:\r\n            json.dump(report, f, indent=2, ensure_ascii=False)\r\n        \r\n        print(f\"\u2705 Rapor kaydedildi: {filename}\")\r\n        return report\r\n    \r\n    def run_full_scan(self):\r\n        \"\"\"Komple tarama çal\u0131\u015ft\u0131r\"\"\"\r\n        queries = [\r\n            'filetype:sql password',\r\n            'filetype:env DB_PASSWORD',\r\n            'filetype:log error',\r\n            'intitle:\"index of\"',\r\n            'inurl:admin intitle:login',\r\n            'inurl:backup',\r\n            'filetype:conf',\r\n            'filetype:bak',\r\n            '\"confidential\" OR \"private\"',\r\n            'intext:\"mysql_connect()\"'\r\n        ]\r\n        \r\n        print(f\"\\n\ud83d\ude80 {self.target} için Komple Dorking Taramas\u0131 Ba\u015fl\u0131yor\\n\")\r\n        print(\"=\" * 60 + \"\\n\")\r\n        \r\n        for i, query in enumerate(queries, 1):\r\n            print(f\"[{i}\/{len(queries)}] {query}\")\r\n            self.bing_dork(query)\r\n            self.duckduckgo_dork(query)\r\n            time.sleep(2)  # Rate limiting\r\n        \r\n        self.analyze_results()\r\n        self.generate_report()\r\n\r\n# MAIN\r\nif __name__ == \"__main__\":\r\n    if len(sys.argv) < 2:\r\n        print(\"Kullan\u0131m: python3 dorking_automation.py <target_domain>\")\r\n        print(\"Örnek: python3 dorking_automation.py example.com\")\r\n        sys.exit(1)\r\n    \r\n    target = sys.argv[1]\r\n    toolkit = DorkingToolkit(target)\r\n    toolkit.run_full_scan()\r\n<\/code><\/pre>\r\n
Script Çal\u0131\u015ft\u0131rma<\/h3>\r\n
# Temel kullan\u0131m\r\npython3 dorking_automation.py hedefsite.com\r\n\r\n# Ç\u0131kt\u0131:\r\n# \ud83d\ude80 hedefsite.com için Komple Dorking Taramas\u0131 Ba\u015fl\u0131yor\r\n# [1\/10] filetype:sql password\r\n# \ud83d\udd0d Bing: site:hedefsite.com filetype:sql password\r\n# ...\r\n# \u2705 Rapor kaydedildi: dorking_report.json\r\n<\/code><\/pre>\r\n
\u0130leri Python: Selenium ile Google Dorking<\/h3>\r\n
#!\/usr\/bin\/env python3\r\n# advanced_google_dorking.py\r\n\r\nfrom selenium import webdriver\r\nfrom selenium.webdriver.common.by import By\r\nfrom selenium.webdriver.support.ui import WebDriverWait\r\nfrom selenium.webdriver.support import expected_conditions as EC\r\nimport time\r\n\r\nclass GoogleDorkingSelenium:\r\n    def __init__(self):\r\n        options = webdriver.ChromeOptions()\r\n        options.add_argument('--start-maximized')\r\n        self.driver = webdriver.Chrome(options=options)\r\n    \r\n    def google_search(self, query):\r\n        \"\"\"Selenium ile Google aramas\u0131\"\"\"\r\n        url = f\"https:\/\/www.google.com\/search?q={query.replace(' ', '+')}\"\r\n        self.driver.get(url)\r\n        \r\n        try:\r\n            # Sonuçlar\u0131 yüklenene kadar bekle\r\n            WebDriverWait(self.driver, 10).until(\r\n                EC.presence_of_all_elements_located((By.CSS_SELECTOR, \"div.g\"))\r\n            )\r\n            \r\n            results = []\r\n            items = self.driver.find_elements(By.CSS_SELECTOR, \"div.g\")\r\n            \r\n            for item in items[:10]:  # \u0130lk 10 sonuç\r\n                link = item.find_element(By.CSS_SELECTOR, \"a\")\r\n                title = link.text\r\n                href = link.get_attribute('href')\r\n                results.append({'title': title, 'url': href})\r\n            \r\n            return results\r\n        \r\n        except Exception as e:\r\n            print(f\"\u274c Hata: {e}\")\r\n            return []\r\n    \r\n    def close(self):\r\n        self.driver.quit()\r\n\r\n# Kullan\u0131m\r\nif __name__ == \"__main__\":\r\n    selenium_dorker = GoogleDorkingSelenium()\r\n    results = selenium_dorker.google_search(\"site:example.com filetype:sql\")\r\n    \r\n    for result in results:\r\n        print(f\"\ud83d\udcc4 {result['title']}\")\r\n        print(f\"\ud83d\udd17 {result['url']}\\n\")\r\n    \r\n    selenium_dorker.close()\r\n<\/code><\/pre>\r\n
\r\n
Denetim Raporu: Zafiyetleri Belgeleme<\/h2>\r\n
Rapor \u015eablonu<\/h3>\r\n
# WEB GÜVENL\u0130\u011e\u0130 DORKING DENETIM RAPORU\r\n\r\n## YÖNETICI ÖZET\u0130\r\n\r\n**Rapor Tarihi:** 2025-10-24\r\n**Site:** hedefsite.com\r\n**Denetçi:** [\u0130sim]\r\n**Riskli Bulgu Say\u0131s\u0131:** 12\r\n\r\n### Özet:\r\n\r\nBu rapor, Google\/Bing\/DuckDuckGo Dorking teknikleri kullan\u0131larak\r\nhedefsite.com'un arama motorlar\u0131 taraf\u0131ndan eri\u015filebilen\r\nhassas bilgiler tespit edilmi\u015ftir.\r\n\r\n---\r\n\r\n## KRITIK BULGULAR (Acil Düzeltme Gerekli)\r\n\r\n### 1. SQL Backup Dosyas\u0131 Eri\u015filebilir\r\n- **Sorgu:** site:hedefsite.com filetype:sql\r\n- **Sonuç:** database_backup_20250320.sql bulundu\r\n- **Risk:** Tüm kullan\u0131c\u0131 verisi, \u015fifreler, kredi kart\u0131 no s\u0131zd\u0131\r\n- **CVSS Skor:** 9.8 (Kritik)\r\n- **Çözüm:**\r\n  1. SQL dosyalar\u0131n\u0131 web root'ün d\u0131\u015f\u0131na ta\u015f\u0131\r\n  2. robots.txt'ye \"Disallow: *.sql\" ekle\r\n  3. .htaccess ile SQL dosyalar\u0131na eri\u015fim engelle\r\n  4. Bölge\r\n\r\n ile backup'lar\u0131 \u015fifrele\r\n\r\n### 2. .env Dosyas\u0131 \u0130ndeksli\r\n- **Sorgu:** site:hedefsite.com filetype:env\r\n- **Sonuç:** .env dosyas\u0131 Google'da bulundu\r\n- **Risk:** Database credentials, API keys if\u015fa edilmi\u015f\r\n- **CVSS Skor:** 9.8 (Kritik)\r\n- **Çözüm:**\r\n  1. .env dosyas\u0131n\u0131 web root'ün d\u0131\u015f\u0131na ta\u015f\u0131\r\n  2. .gitignore'a ekle (.env should NOT be in git)\r\n  3. Environment variables'lar\u0131 sistem variables'\u0131ndan al\r\n\r\n### 3. Admin Paneli Google'da \u0130ndeksli\r\n- **Sorgu:** inurl:admin site:hedefsite.com intitle:login\r\n- **Sonuç:** \/admin\/panel.php bulundu\r\n- **Risk:** Brute force sald\u0131r\u0131lar\u0131n\u0131n hedefi\r\n- **CVSS Skor:** 7.5 (Yüksek)\r\n- **Çözüm:**\r\n  1. Admin panelini noindex meta etiketi ile koru\r\n  2. IP tabanl\u0131 eri\u015fim k\u0131s\u0131tla\r\n  3. robots.txt'ye \"Disallow: \/admin\/\" ekle\r\n\r\n---\r\n\r\n## UYARI (14 gün içinde düzeltilmeli)\r\n\r\n### 4. Log Dosyalar\u0131 Eri\u015filebilir\r\n- **Sorgu:** site:hedefsite.com filetype:log\r\n- **Sonuç:** error.log, access.log bulundu\r\n- **Risk:** Kullan\u0131c\u0131 aktiviteleri, hata mesajlar\u0131 görülüyor\r\n- **Çözüm:** .htaccess ile eri\u015fim engelle\r\n\r\n### 5. Backup Dizini Listeleniyor\r\n- **Sorgu:** intitle:\"index of\" backup site:hedefsite.com\r\n- **Sonuç:** \/backup\/ dizini aç\u0131k\r\n- **Çözüm:** Options -Indexes ekle\r\n\r\n---\r\n\r\n## ÖNER\u0130LER\r\n\r\n### K\u0131sa Vadeli (HEMEN)\r\n1. robots.txt güncelle\r\n2. .htaccess koruma ekle\r\n3. .env dosyas\u0131n\u0131 ta\u015f\u0131\r\n4. Meta noindex etiketleri ekle\r\n\r\n### Orta Vadeli (1-2 hafta)\r\n1. Web sitenin tüm dosyalar\u0131n\u0131 denetlet\r\n2. Google Search Console'de harita yenile\r\n3. Eski backup'lar\u0131 sil\r\n4. Log rotasyonu kur\r\n\r\n### Uzun Vadeli (1 ay)\r\n1. Penetration testing yapt\u0131r\r\n2. WAF (Web Application Firewall) kur\r\n3. CI\/CD'de güvenlik kontrolleri ekle\r\n4. Y\u0131ll\u0131k güvenlik denetimi planlat\r\n\r\n---\r\n\r\n## DOSYA CHECKLIST\r\n\r\n<\/code><\/pre>\r\n
\u2611 robots.txt güncellendi \u2611 .htaccess kurallar\u0131 eklendi \u2611 .env ta\u015f\u0131nd\u0131 \u2611 Meta etiketleri eklendi \u2611 Google Search Console güncellendi \u2611 Backup'lar silindi\/ta\u015f\u0131nd\u0131 \u2611 Log dosyalar\u0131 korundu \u2610 Penetration Testing yap\u0131ld\u0131 \u2610 WAF kuruldu<\/p>\r\n
\r\n---\r\n\r\n## KAYNAKLAR\r\n\r\n- OWASP Web Security Testing Guide\r\n- NIST Cybersecurity Framework\r\n- CWE Top 25\r\n- CVSS v3.1 Calculator\r\n\r\n---\r\n\r\n**Rapor Onay:** _______________  \r\n**Tarih:** _______________\r\n<\/code><\/pre>\r\n
\r\n
\u2696\ufe0f YASAL & ET\u0130K ÇERÇEVE<\/h2>\r\n
Yasal Risk ve Sorumluluk<\/h3>\r\n
\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\r\n\u2502  YASAL UYARI: Bu teknikleri yanl\u0131\u015f kullanmak SUÇTUR         \u2502\r\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\r\n\u2502                                                              \u2502\r\n\u2502 \ud83c\uddf9\ud83c\uddf7 TÜRK\u0130YE:                                               \u2502\r\n\u2502    TCK 215 - \u0130zinsiz Bilgisayar Sistemi Eri\u015fimi            \u2502\r\n\u2502    TCK 217 - Veri H\u0131rs\u0131zl\u0131\u011f\u0131                               \u2502\r\n\u2502    TCK 524 - Ki\u015fisel Veri Gizlili\u011fi \u0130hlali                \u2502\r\n\u2502    Ceza: 2-4 y\u0131l hapis, 5000-20000 TL ceza                 \u2502\r\n\u2502                                                              \u2502\r\n\u2502 \ud83c\uddfa\ud83c\uddf8 ABD:                                                    \u2502\r\n\u2502    CFAA (Computer Fraud and Abuse Act)                     \u2502\r\n\u2502    Ceza: 10 y\u0131la kadar hapis, $250,000 para cezas\u0131         \u2502\r\n\u2502                                                              \u2502\r\n\u2502 \ud83c\uddea\ud83c\uddfa AB:                                                     \u2502\r\n\u2502    GDPR - Veri Koruma                                      \u2502\r\n\u2502    Ceza: %20 global revenue veya €20 milyon                \u2502\r\n\u2502    NIS2 Directive - Network Security                       \u2502\r\n\u2502                                                              \u2502\r\n\u2502 \ud83d\udcbc D\u0130\u011eER:                                                    \u2502\r\n\u2502    DMCA (Digital Millennium Copyright Act)                 \u2502\r\n\u2502    CFAA (Computer Fraud and Abuse Act)                     \u2502\r\n\u2502    Computer Misuse Act 1990 (UK)                           \u2502\r\n\u2502                                                              \u2502\r\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\r\n<\/code><\/pre>\r\n
Yasal Olarak Dorking Yapmak<\/h3>\r\n
\u2705 YAPILABILIR:\r\n\r\n1. Kendi Web Siteniz\r\n   \u2514\u2500 Kendi alan\u0131n\u0131zda sorgulamalar\u0131 yapabilirsiniz\r\n\r\n2. Yaz\u0131l\u0131 \u0130zin Ald\u0131\u011f\u0131n\u0131z Sistemler\r\n   \u2514\u2500 Mü\u015fteri\/Yönetici'den e-mail imzal\u0131 onay\r\n   \u2514\u2500 SOW (Statement of Work) sözle\u015fmesi\r\n   \u2514\u2500 NDA (Non-Disclosure Agreement)\r\n\r\n3. Yasal Penetration Testing\r\n   \u2514\u2500 Lisansl\u0131 pentester'lar\r\n   \u2514\u2500 \u0130\u015fletme içi güvenlik ekibi\r\n   \u2514\u2500 Resmi denetim firmalar\u0131\r\n\r\n4. E\u011fitim ve Fark\u0131ndal\u0131k\r\n   \u2514\u2500 Üniversiteler\r\n   \u2514\u2500 Siber güvenlik kurslar\u0131\r\n   \u2514\u2500 CTF (Capture The Flag) etkinlikleri\r\n\r\n\u274c YAPILAMAZ:\r\n\r\n1. \u0130zinsiz 3. Taraf Sistemler\r\n   \u2514\u2500 \"\u015eirketin web sitesi aç\u0131k, test edeyim\" = Yasad\u0131\u015f\u0131\r\n\r\n2. Kötü Amaçl\u0131 \u0130ntensiyon\r\n   \u2514\u2500 Veri çalmak\r\n   \u2514\u2500 \u015eantaj\r\n   \u2514\u2500 \u0130çeri\u011fi de\u011fi\u015ftirmek\r\n\r\n3. Otomatik Tarama Botlar\u0131\r\n   \u2514\u2500 Massive brute force\r\n   \u2514\u2500 DDoS tarz\u0131 taramalar\r\n   \u2514\u2500 Site'\u0131 down ettirmek\r\n\r\n4. Ticari Sömürü\r\n   \u2514\u2500 \"Buldu\u011fum aç\u0131klar\u0131 satay\u0131m\"\r\n   \u2514\u2500 Tespit etti\u011fim veriler için para talep etmek\r\n<\/code><\/pre>\r\n
Etik Dorking Kurallar\u0131<\/h3>\r\n
GOLDEN RULES:\r\n\r\n1. \ud83d\udcdd \u0130zin Al\r\n   \u251c\u2500 Yaz\u0131l\u0131 form\r\n   \u251c\u2500 Email onay\u0131 (en az\u0131ndan)\r\n   \u251c\u2500 Avukat taraf\u0131ndan incelenmi\u015f sözle\u015fme\r\n   \u2514\u2500 Kapsam\u0131 net belirtin (IP aral\u0131\u011f\u0131, domain, vb.)\r\n\r\n2. \ud83c\udfaf Kapsam\u0131 Belirle\r\n   \u251c\u2500 Hangi sistemler test edilecek?\r\n   \u251c\u2500 Hangi teknikler kullan\u0131lacak?\r\n   \u251c\u2500 Ba\u015flang\u0131ç\/Biti\u015f tarihi\r\n   \u2514\u2500 Eskalasyon prosedürü\r\n\r\n3. \ud83d\udccb Denetim \u0130zleri Tut\r\n   \u251c\u2500 Ne zaman test yapt\u0131?\r\n   \u251c\u2500 Ne buldu?\r\n   \u251c\u2500 Kimin taraf\u0131ndan onayland\u0131?\r\n   \u2514\u2500 Sonuç nedir?\r\n\r\n4. \ud83d\udd10 Buldu\u011fun Bilgileri Koru\r\n   \u251c\u2500 \u015eifrelenmi\u015f saklama\r\n   \u251c\u2500 Eri\u015fim kontrolü\r\n   \u251c\u2500 Raporlar\u0131n güvenli transferi\r\n   \u2514\u2500 Veri imhas\u0131 (test sonras\u0131)\r\n\r\n5. \ud83d\udce2 Aç\u0131klar\u0131 Bildir (Sorumlu Aç\u0131klama)\r\n   \u251c\u2500 Önce sitenin güvenlik ekibine söyle\r\n   \u251c\u2500 Çözüm zaman\u0131 ver (30-90 gün)\r\n   \u251c\u2500 Sonra kamuya aç\u0131kla (iste\u011fe ba\u011fl\u0131)\r\n   \u2514\u2500 Bir CVE numaras\u0131 talep et (kritikse)\r\n\r\n6. \ud83d\udeab Ba\u015fkalar\u0131n\u0131n Verilerine Dokunma\r\n   \u251c\u2500 Buldu\u011fun \u015fifreleri kullanma\r\n   \u251c\u2500 Ba\u015fkalar\u0131n\u0131n hesaplar\u0131na giri\u015f yapma\r\n   \u251c\u2500 Veriyi kopyala\/indirme\r\n   \u2514\u2500 Sistemde kal\u0131c\u0131 de\u011fi\u015fiklik yapma\r\n<\/code><\/pre>\r\n
\r\n
\ud83d\udd17 \u0130leri Kaynaklar & Referanslar<\/h2>\r\n
Resmi Belgeler<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Kaynak<\/th>\r\nURL<\/th>\r\n\u0130çerik<\/th>\r\n<\/tr>\r\n<\/thead>\r\n
OWASP Testing Guide<\/strong><\/td>\r\nhttps:\/\/owasp.org\/www-project-web-security-testing-guide\/<\/td>\r\nWeb güvenlik testi<\/td>\r\n<\/tr>\r\n
NIST Cybersecurity<\/strong><\/td>\r\nhttps:\/\/nvlpubs.nist.gov\/nistpubs\/<\/td>\r\nSiber güvenlik standartlar\u0131<\/td>\r\n<\/tr>\r\n
CWE Top 25<\/strong><\/td>\r\nhttps:\/\/cwe.mitre.org\/top25\/<\/td>\r\nEn yayg\u0131n yaz\u0131l\u0131m zafiyetleri<\/td>\r\n<\/tr>\r\n
CVSS Calculator<\/strong><\/td>\r\nhttps:\/\/www.first.org\/cvss\/calculator\/3.1<\/td>\r\nRisk puanlama<\/td>\r\n<\/tr>\r\n
GDPR<\/strong><\/td>\r\nhttps:\/\/gdpr-info.eu\/<\/td>\r\nVeri koruma yasas\u0131<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n
OSINT ve Dorking Araçlar\u0131<\/h3>\r\n
    \r\n
  • Shodan:<\/strong> https:\/\/www.shodan.io\/<\/li>\r\n
  • Censys:<\/strong> https:\/\/censys.io\/<\/li>\r\n
  • theHarvester:<\/strong> https:\/\/github.com\/laramies\/theHarvester<\/li>\r\n
  • Recon-ng:<\/strong> https:\/\/github.com\/lanmaster53\/recon-ng<\/li>\r\n
  • SpiderFoot:<\/strong> https:\/\/www.spiderfoot.net\/<\/li>\r\n
  • OSINT Framework:<\/strong> https:\/\/osintframework.com\/<\/li>\r\n
  • Maltego:<\/strong> https:\/\/www.maltego.com\/<\/li>\r\n
  • Burp Suite:<\/strong> https:\/\/portswigger.net\/burp<\/li>\r\n<\/ul>\r\n
    Kitaplar<\/h3>\r\n
      \r\n
    • \"The Web Application Hacker's Handbook\" - Stuttard & Pinto<\/li>\r\n
    • \"Web Security Testing Cookbook\" - Stuttard & Pinto<\/li>\r\n
    • \"Practical OSINT\" - Marc Clifton<\/li>\r\n
    • \"Pentesting with Burp Suite\" - Gus Khawaja<\/li>\r\n<\/ul>\r\n
      Blog ve Kaynaklar<\/h3>\r\n
        \r\n
      • HackerOne:<\/strong> https:\/\/www.hackerone.com\/ (Bug Bounty)<\/li>\r\n
      • Bugcrowd:<\/strong> https:\/\/www.bugcrowd.com\/ (Bug Bounty)<\/li>\r\n
      • PortSwigger Academy:<\/strong> https:\/\/portswigger.net\/web-security (E\u011fitim)<\/li>\r\n
      • SANS.org:<\/strong> https:\/\/www.sans.org\/ (Güvenlik e\u011fitimi)<\/li>\r\n
      • Defensive Security:<\/strong> https:\/\/www.defensivesecurity.com\/ (Etik hacking)<\/li>\r\n<\/ul>\r\n
        \r\n
        \ud83c\udfaf SONUÇ<\/h2>\r\n
        WEB DORKING ÖNEML\u0130 ÇÜNKÜ:\r\n\r\n1\ufe0f\u20e3 Sald\u0131rganlar Bu Teknikleri Kullan\u0131yor\r\n   \u2514\u2500 Proaktif olmal\u0131s\u0131n\u0131z\r\n\r\n2\ufe0f\u20e3 Ço\u011fu \u015eirkette Yap\u0131lanm\u0131\u015f Bir Strateji Yok\r\n   \u2514\u2500 \"Görülmüyorsa, problem de\u011fil\" mant\u0131\u011f\u0131 = HATA\r\n\r\n3\ufe0f\u20e3 Denetçiler Sorunu Geçecek\r\n   \u2514\u2500 \"Veri S\u0131z\u0131nt\u0131s\u0131 Riski\" raporunda görülüyor\r\n\r\n4\ufe0f\u20e3 Mü\u015fteriler Güveni Kaybediyor\r\n   \u2514\u2500 Aç\u0131\u011fa ç\u0131kan veriler = Marka imaj\u0131 zedeleniyor\r\n\r\n5\ufe0f\u20e3 YASAL SORUMLULUK ARTIYOR\r\n   \u2514\u2500 GDPR, CCPA, TCK\r\n   \u2514\u2500 Veri koruma = Yasal gereklilik\r\n\r\nÇÖZÜM:\r\n\r\n\u2705 robots.txt → Google'a ne gösterece\u011fini söyle\r\n\u2705 .htaccess → Teknik olarak korunma sa\u011fla\r\n\u2705 Meta Tags → Ba\u015fl\u0131ktan talimat ver\r\n\u2705 Periyodik Denetim → Ayl\u0131k kontrol yap\r\n\u2705 OSINT Araçlar\u0131 → Otomatik tarama kur\r\n\u2705 Etik Hacking → Profesyonellere yapt\u0131r\r\n\r\n\ud83d\ude0a BA\u015eARILI DURUMDA:\r\n\r\nGoogle\/Bing'de bulunmu\u015f hassas bilgi: SIFIR \u2705\r\nSistem yap\u0131s\u0131 gizli \u2705\r\nAdmin paneli korunmu\u015f \u2705\r\nLog dosyalar\u0131 eri\u015filemiyor \u2705\r\nDenetçi raporu temiz \u2705\r\n<\/code><\/pre>\r\n
        \r\n
         Yasal Sorumluluk:<\/strong> Bu rehber yaln\u0131zca e\u011fitim amaçl\u0131d\u0131r. Yasalara ayk\u0131r\u0131 kullan\u0131mdan kaynaklanacak her türlü zarar yazar\u0131n sorumlulu\u011funda de\u011fildir.<\/p>","excerpt":"Web sitenizin g\u00fcvenli\u011fini test etmek ve olas\u0131 a\u00e7\u0131klar\u0131 kapatmak i\u00e7in kullanabilece\u011finiz Google Dorking teknikleri yaz\u0131lm\u0131\u015ft\u0131r","created_at":"2024-12-15 14:38:52","updated_at":"2026-09-23 18:16:23","category_id":7,"view_count":3371,"reading_time":33,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2024-12-15 14:38:52","featured_image":"resimyok.jpg","slug":"web-sitenizdeki-guvenlik-aciklarini-google-dorking-ile-test-etme-rehberi","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"}