Google Dorks Cheat Sheet: Advanced Search Techniques for Ethical Hacking and Information Discovery
Ever wondered how you could find information that isn’t displayed on Google’s search engine results? Many search engines work on an algorithm that sorts the pieces of information that can harm the use
Ever wondered how you could find information that isn’t displayed on Google’s search engine results?
Many search engines work on an algorithm that sorts the pieces of information that can harm the user’s safety. But there is always a backdoor to bypass the algorithm — in Google’s case, osint concept in cybersecurity. It describes techniques, risks, or controls that defenders and ethical hackers must understand to protect systems and conduct authorized security testing. Learning Google Dorking helps you recognize attacks in the wild and apply industry-standard mitigations aligned with frameworks like OWASP and NIST.">Google Dorking.
Google Dorks is a search string that leverages advanced search operators to find information that isn’t readily available on a particular website.
Google Dorks, also known as Google hacking, is the practice of using advanced search techniques and specialized search operators to find sensitive information that is not easily discoverable through standard search queries. Google Dorks can be used for both legitimate purposes, such as identifying vulnerabilities in a website's security, as well as for malicious purposes, such as finding sensitive information that can be used in social engineering attacks.
If you face a similar issue of not being able to find the desired information and want to go with Google Dorking, this cheat sheet is for you. We have curated this Google Dorks cheat sheet to help you understand how different Google Dorking commands work.
Google Dorks Cheat Sheet
In this Google Dorking cheat sheet, we’ll walk you through different commands to implement Google Dorking. But first, let’s cover a brief introduction to Google Dorking.
What is a Google Dork?
Ethical barriers protect crucial information on the internet. But, sometimes, accessing such information is necessary, and you need to cross that barrier. This is where Google Dorking comes into the picture and helps you access that hidden information.
Google Dorking, also known as Google hacking, is the method capable of returning the information difficult to locate through simple search queries by providing a search string that uses advanced search operators.
Primarily, ethical hackers use this method to query the search engine and find crucial information. This Google hacking cheat sheet will help you carry out Google Dorking commands and access hidden information.
How to Use Google Dorks?
To use a Google Dork, you simply type in a Dork into the search box on Google and press “Enter”. Here are some of the best Google Dork queries that you can use to search for information on Google.
Before You Begin Google Dorking
Before you begin using Google Dorks, it's important to keep in mind that these techniques can potentially expose sensitive information that is not intended to be publicly accessible. Therefore, it's important to use Google Dorks for ethical purposes only and to always obtain proper authorization before attempting to access any restricted information. Additionally, it's recommended to use a virtual machine or other sandboxing techniques to avoid accidentally damaging or compromising a system.
Here are a few more tips to keep in mind when using Google Dorks:
- Use common sense: Before attempting to access any information that you find, consider whether it's ethical and legal to do so. If you're unsure, err on the side of caution and seek permission from the owner of the system or website.
- Understand the risks: Google Dorks can potentially expose sensitive information that can be used to launch cyber attacks or cause harm to individuals or organizations. Be aware of the risks associated with using these techniques and take appropriate precautions to protect yourself and others.
- Keep your tools up to date: Google Dorking tools and techniques are constantly evolving, so it's important to keep your tools and knowledge up to date to stay ahead of potential attackers.
By following these guidelines, you can use Google Dorks safely and ethically to find information that is not easily accessible through standard search queries.
Google Dork Queries Examples:
- site:.edu “phone number”– This Dork searches for websites on .edu domains that contain the words “phone number”. student “phone number” – This Dork searches for websites on .edu domains that contain the words “student” and “phone number”.
- inurl:edu “login” – This Dork searches for websites on .edu domains that contain the words “login”. This Dork searches for school websites that contain student login information.
- “powered by vbulletin” site:.edu – This Dork searches for websites on .edu domains that contain the words “powered by vbulletin”. This Dork searches for school websites that are running on the vbulletin forum software.
- “powered by vbulletin” site:.gov – This Dork searches for websites on .gov domains that contain the words “powered by vbulletin”. This Dork searches for governmental websites that are running on the vbulletin forum software.
- “powered by vbulletin” site:.mil – This Dork searches for websites on .mil domains that contain the words “powered by vbulletin”. This Dork searches for military websites that are running on the vbulletin forum software.
- “powered by vbulletin” inurl:.edu – This Dork searches for websites on .edu domains that contain the words “powered by vbulletin”. This Dork searches for school websites that are running on the vbulletin forum software.
- “powered by vbulletin” inurl:.mil – This Dork searches for websites on .mil domains that contain the words “powered by vbulletin”. This Dork searches for military websites that are running on the vbulletin forum software.
- inurl:.com “powered by vbulletin” – This Dork searches for websites on .com domains that contain the words “powered by vbulletin”. This Dork searches for websites that are running on the vbulletin forum software.
- inurl:.edu “register forum” – This Dork searches for websites on .edu domains that contain the words “register forum”. This Dork searches for school websites that allow you to register for a forum.
- inurl:.gov “register forum” – This Dork searches for websites on .gov domains that contain the words “register forum”. This Dork searches for governmental websites that allow you to register for a forum.
Scraper API provides a proxy service designed for web scraping. With over 20 million residential IPs across 12 countries, as well as software that can handle JavaScript rendering and solving CAPTCHAs, you can quickly complete large scraping jobs without ever having to worry about being blocked by any servers.
Google Dork is a search query that we give to Google to look for more granular information and retrieve relevant information quickly. For example, try to search for your name and verify results with a search query [inurl:your-name]. Analyse the difference. You just have told google to go for a deeper search and it did that beautifully.
Search Operator
Search operators are special characters or commands that can be used in a search engine's search box to refine search results. Here are some commonly used search operators:
- " " - Quotation marks: Use quotation marks to search for an exact phrase. For example, "digital marketing" will return search results that contain the exact phrase "digital marketing" in that order.
- OR - Logical operator: Use OR to search for results that contain any of the keywords. For example, "digital marketing OR social media" will return search results that contain either "digital marketing" or "social media" or both.
- "- "Minus sign: Use the minus sign to exclude a keyword from the search results. For example, "digital marketing -social media" will return search results that contain "digital marketing" but exclude "social media."
- site: - Site operator: Use the site operator to search within a specific website or domain. For example, "site:youtube.com how to cook pasta" will return search results from YouTube that are related to cooking pasta.
- filetype: - Filetype operator: Use the filetype operator to search for a specific file type. For example, "digital marketing filetype:pdf" will return search results that contain PDF files related to digital marketing.
- intitle: - Intitle operator: Use the intitle operator to search for a specific keyword in the title of a web page. For example, "intitle:digital marketing" will return search results that contain "digital marketing" in the title of the web page.
- inurl: - Inurl operator: Use the inurl operator to search for a specific keyword in the URL of a web page. For example, "inurl:digital marketing" will return search results that contain "digital marketing" in the URL of the web page.
- allintitle: - Allintitle operator: Use the allintitle operator to search for multiple keywords in the title of a web page. For example, "allintitle:digital marketing tips" will return search results that contain both "digital" and "marketing" and "tips" in the title of the web page.
- allinurl: - Allinurl operator: Use the allinurl operator to search for multiple keywords in the URL of a web page. For example, "allinurl:digital marketing tips" will return search results that contain both "digital" and "marketing" and "tips" in the URL of the web page.
- related: - Related operator: Use the related operator to find websites related to a specific website. For example, "related:youtube.com" will return search results of websites related to YouTube.
- cache: - Cache operator: Use the cache operator to view the cached version of a web page. For example, "cache:google.com" will show you the cached version of the Google homepage.
- define: - Define operator: Use the define operator to find the definition of a word. For example, "define:marketing" will return the definition of the word "marketing."
Search filters
| Filter | Description | Example |
|---|---|---|
| allintext | Searches for occurrences of all the keywords given. | allintext:"keyword" |
| intext | Searches for the occurrences of keywords all at once or one at a time. | intext:"keyword" |
| inurl | Searches for a URL matching one of the keywords. | inurl:"keyword" |
| allinurl | Searches for a URL matching all the keywords in the query. | allinurl:"keyword" |
| intitle | Searches for occurrences of keywords in title all or one. | intitle:"keyword" |
| allintitle | Searches for occurrences of keywords all at a time. | allintitle:"keyword" |
| site | Specifically searches that particular site and lists all the results for that site. | site:"www.google.com" |
| filetype | Searches for a particular filetype mentioned in the query. | filetype:"pdf" |
| link | Searches for external links to pages. | link:"keyword" |
| numrange | Used to locate specific numbers in your searches. | numrange:321-325 |
| before/after | Used to search within a particular date range. | filetype:pdf & (before:2000-01-01 after:2001-01-01) |
| allinanchor (and also inanchor) | This shows sites which have the keyterms in links pointing to them, in order of the most links. | inanchor:rat |
| allinpostauthor (and also inpostauthor) | Exclusive to blog search, this one picks out blog posts that are written by specific individuals. | allinpostauthor:"keyword" |
| related | List web pages that are “similar” to a specified web page. | related:www.google.com |
| cache | Shows the version of the web page that Google has in its cache. | cache:www.google.com |
Information Disclosure
These Dorks are used to find sensitive information that has been accidentally or intentionally disclosed on websites, such as email addresses, passwords, credit card numbers, and confidential documents.
| Dork | Description |
|---|---|
| intitle:"index of" intext:".git" | Searches for directories named ".git" that are exposed on web servers. |
| intitle:"index of" intext:"config.yml" | Searches for YAML configuration files that are exposed on web servers. |
| intitle:"index of" intext:"database.php" | Searches for PHP configuration files that contain database connection details. |
| intitle:"index of" intext:"passwords.txt" | Searches for plain text files containing passwords that are exposed on web servers. |
| intitle:"index of" intext:".env" | Searches for files named ".env" that often contain sensitive configuration information such as API keys or database passwords. |
| intitle:"index of" intext:"backup" | Searches for backup files that are exposed on web servers. |
| intitle:"index of" intext:"secret_key" | Searches for secret keys that are used for encryption or authentication and are exposed on web servers. |
| intitle:"index of" intext:"id_rsa" | Searches for SSH private keys that are exposed on web servers. |
| filetype:env intext:APP_KEY | Searches for files with ".env" extension that contain Laravel's "APP_KEY" configuration setting. |
| intitle:"index of" intext:"wp-config.php" | Searches for WordPress configuration files that contain database connection details. |
| intext:"index of" intext:"api_key" | Searches for API keys that are exposed on web pages. |
| intext:"index of" intext:"apikey" | Searches for API keys that are exposed on web pages. |
Vulnerable Websites
These Dorks are used to identify websites that are vulnerable to hacking or have security vulnerabilities. Ethical hackers can use them to find weaknesses in a website's security and report them to the owner.
| Dork | Description |
|---|---|
| inurl:php?id= | Searches for websites that have URLs containing "php?id=" in them. This can be a sign of a SQL injection vulnerability. |
| site:example.com ext:sql | ext:dbf |
| inurl:wp-config.php.bak | Searches for WordPress configuration files that have been backed up with the ".bak" extension. These files can contain sensitive information such as database connection details. |
| intitle:"index of" ext:log | Searches for log files that are exposed on web servers. These files can contain information that can be used for reconnaissance or as part of an attack. |
| inurl:robots.txt "User-agent: *" "Disallow:" | Searches for robots.txt files that contain directives for web crawlers. These files can contain information about directories or files that the website owner does not want indexed, but can also reveal sensitive information. |
| intitle:"index of" intext:".htpasswd" | Searches for files named ".htpasswd" that contain usernames and passwords for web server authentication. These files can be used to gain unauthorized access. |
| inurl:wp-content/uploads/ filetype:xls | Searches for Microsoft Excel spreadsheets in the WordPress uploads directory. These spreadsheets can contain sensitive information such as usernames, passwords, and financial data. |
| intitle:"index of" intext:"web.config" | Searches for web.config files that are used in ASP.NET applications. These files can contain sensitive information such as database connection strings and authentication details. |
| inurl:"/phpinfo.php" | Searches for the PHP configuration page on a web server. This page can reveal sensitive information about the server and can be used to identify vulnerabilities. |
| intitle:"index of" intext:"app/etc/local.xml" filetype:xml | Searches for Magento configuration files that contain database connection details. These files can be used to gain unauthorized access to the database. |
| inurl:"wp-login.php" | Searches for the WordPress login page. This page can be used to try and gain unauthorized access to the website. |
Exposed Devices
These Dorks are used to find Internet of Things (IoT) devices and other network-connected devices that are publicly accessible and may be vulnerable to hacking. These devices can include security cameras, routers, and printers.
| Dork | Description |
|---|---|
| intitle:"DVR Login" | Searches for login pages of unsecured DVRs (digital video recorders) that are exposed to the internet. |
| intitle:"Web View" "Network Camera" | Searches for network cameras that are exposed to the internet. |
| intitle:"Live View / - AXIS" | Searches for unsecured AXIS network cameras that are exposed to the internet. |
| intitle:"Hikvision" inurl:"login.asp" | Searches for login pages of unsecured Hikvision network cameras that are exposed to the internet. |
| intitle:"Welcome to QNAP Turbo NAS" | Searches for QNAP network attached storage (NAS) devices that are exposed to the internet. |
| intitle:"MiniWeb HTTP server" inurl:"/:8080" | Searches for instances of the MiniWeb HTTP server that are exposed to the internet. |
| intitle:"Portainer" inurl:"9000" | Searches for instances of the Portainer container management platform that are exposed to the internet. |
| intitle:"Plex" "Sign in" "Plex Media Server" | Searches for instances of the Plex media server that are exposed to the internet. |
| intitle:"UniFi Login" "UniFi" | Searches for login pages of unsecured Ubiquiti UniFi wireless access points that are exposed to the internet. |
| intitle:"Welcome to nginx!" "Welcome to HostMonster.com" | Searches for web servers running the nginx web server software that are exposed to the internet. |
| intitle:"Iomega StorCenter" inurl:"/home/" | Searches for Iomega StorCenter network attached storage (NAS) devices that are exposed to the internet. |
| intitle:"Welcome to Synology DiskStation" | Searches for Synology DiskStation network attached storage (NAS) devices that are exposed to the internet. |
Sensitive Directories and Files
These Dorks are used to search for files and directories that are not intended to be publicly accessible but have been indexed by search engines. These files can include sensitive data such as passwords, configuration files, and private documents.
| Dork | Description |
|---|---|
| intitle:"index of" /etc/passwd | Searches for the passwd file which contains usernames and encrypted passwords for Linux operating systems. |
| intitle:"index of" /proc/self/environ | Searches for the environment variables of a running process on a Linux operating system. |
| intitle:"index of" /backup | Searches for backup files or directories that may contain sensitive information. |
| intitle:"index of" /logs/access.log | Searches for web server access logs that may contain sensitive information. |
| intitle:"index of" /private | Searches for private directories that may contain sensitive information. |
| intitle:"index of" /wp-content/uploads/ | Searches for WordPress website upload directories that may contain sensitive information. |
| intitle:"index of" /config.php | Searches for PHP configuration files that may contain sensitive information. |
| intitle:"index of" /database/ | Searches for database backup files or directories that may contain sensitive information. |
| intitle:"index of" /admin/config.php | Searches for configuration files used by web applications that may contain sensitive information. |
| intitle:"index of" /proc/self/cmdline | Searches for the command line arguments used to launch a running process on a Linux operating system. |
| intitle:"index of" /etc/shadow | Searches for the shadow file which contains encrypted passwords for Linux operating systems. |
| intitle:"index of" /wp-config.php | Searches for WordPress configuration files that may contain sensitive information such as database credentials. |
footprinting">Network or Infrastructure Footprinting:
These Dorks are used to gather information about a website's network infrastructure, such as the IP addresses of servers, software versions, and network topologies. This information can be used to map out the target's network and identify potential vulnerabilities.
| Dork | Description |
|---|---|
| intitle:"index of" "parent directory" | Searches for directory listings that may reveal the structure of a website or network. |
| intitle:"index of" "etc" | Searches for the /etc directory which contains configuration files for Linux operating systems. |
| intitle:"index of" "config" | Searches for configuration files for web applications or other software. |
| intitle:"index of" "logs" | Searches for log files that may contain information about a website or network. |
| intitle:"index of" "backup" | Searches for backup files or directories that may contain sensitive information. |
| intitle:"index of" "password" | Searches for files or directories that may contain passwords or other sensitive information. |
| intitle:"index of" "database" | Searches for database backup files or directories that may contain sensitive information. |
| intitle:"index of" "wp-content" | Searches for WordPress website directories that may contain sensitive information. |
| intitle:"index of" "wp-includes" | Searches for WordPress website directories that may contain sensitive information. |
| intitle:"index of" "mail" | Searches for email directories that may contain sensitive information. |
| intitle:"index of" "phpmyadmin" | Searches for instances of the phpMyAdmin web application used to manage MySQL databases. |
| intitle:"index of" "admin" | Searches for directories used by web applications for administrative purposes. |
Webcams and Live Streams
These Dorks are used to find webcams and live streams that are publicly accessible and may be vulnerable to hacking. These can include security cameras, baby monitors, and public webcams.
| Dork | Description |
|---|---|
| intitle:"live view" intitle:"axis" | Searches for live streams from Axis network cameras. |
| intitle:"Live View / - AXIS" | Searches for live streams from various network cameras. |
| intitle:"Live View / - AXIS 206M" | Searches for live streams from specific network cameras, in this case the AXIS 206M model. |
| inurl:"viewerframe?mode=motion" | Searches for network cameras that use the viewerframe.cgi script to display live video feeds. |
| intitle:"TRENDnetVIEW" | Searches for live streams from TRENDnet network cameras. |
| intitle:"Web View" intext:"Network Camera" | Searches for network cameras with the phrase "Network Camera" in the web view title. |
| intitle:"Netcam" | Searches for various network cameras. |
| intitle:"live view" intitle:"sony" | Searches for live streams from Sony network cameras. |
| intitle:"Live NetSnap Cam-Server feed" | Searches for live streams from various network cameras that use the NetSnap Cam-Server software. |
| intitle:"WJ-NT104 Main Page" | Searches for live streams from Panasonic network cameras. |
| intitle:"MOBOTIX M1" | Searches for live streams from MOBOTIX network cameras. |
Exploits and Vulnerabilities
These Dorks are used to search for known exploits and vulnerabilities in software and websites. Ethical hackers can use them to identify weaknesses in a system's security and report them to the owner.
| Dork | Description |
|---|---|
| inurl:"/phpinfo.php" | Searches for instances of phpinfo.php, a file that displays information about the PHP configuration and may reveal sensitive information. |
| inurl:"/wp-admin/admin-ajax.php" | Searches for instances of the WordPress admin-ajax.php file which can be exploited to perform Cross-Site Scripting (XSS) attacks. |
| intext:"Welcome to the CyberGuard Unit" | Searches for servers running CyberGuard, a firewall and VPN solution that may contain vulnerabilities. |
| intitle:"phpMyAdmin" "Welcome to phpMyAdmin" | Searches for instances of the phpMyAdmin web application used to manage MySQL databases. This application may have known vulnerabilities. |
| intitle:"Nessus Scan Report" | Searches for Nessus vulnerability scan reports which may reveal security vulnerabilities on a target system. |
| intitle:"hMailServer Web Administration" | Searches for hMailServer, an open-source email server, web administration panel. This panel may have known vulnerabilities. |
| inurl:"/server-status" | Searches for instances of Apache's mod_status module which can reveal information about the server's performance and may have security risks. |
| intitle:"HP Integrated Lights-Out" site:edu | Searches for instances of the HP Integrated Lights-Out (iLO) management interface on educational institution websites. |
| intitle:"Kurouto Shikou Remote Command Executor" | Searches for instances of the Kurouto Shikou Remote Command Executor software which may have vulnerabilities. |
| intitle:"Cross Site Request Forgery" "User Login" | Searches for websites that may be vulnerable to Cross-Site Request Forgery (CSRF) attacks. |
| intext:"SQL syntax near" | Searches for instances of websites that may have SQL injection vulnerabilities. |
Social Engineering
These Dorks are used to find information that can be used to launch social engineering attacks, such as email addresses, phone numbers, and social media profiles. Attackers can use them to gather information about a target and craft convincing phishing emails or social engineering attacks.
| Dork | Description |
|---|---|
| intitle:"Outlook Web Access" inurl:login | Searches for instances of Microsoft Outlook Web Access (OWA) login pages. These pages may be targeted for phishing attacks. |
| intitle:"Login - Zimbra :: the leader in open source messaging and collaboration" | Searches for instances of the Zimbra email system login page which may be targeted for phishing attacks. |
| intitle:"Login - WordPress" "powered by WordPress" | Searches for instances of WordPress login pages which may be targeted for brute-force attacks or phishing attempts. |
| intitle:"Access Manager" "Login" | Searches for instances of Novell Access Manager login pages which may be targeted for phishing attempts. |
| intitle:"SquirrelMail" intext:"username" intext:"password" | Searches for instances of SquirrelMail login pages which may be targeted for phishing attempts. |
| intitle:"Open WebMail" "Open WebMail version" intitle:"User Login" | Searches for instances of Open WebMail login pages which may be targeted for phishing attempts. |
| inurl:"roundcube" intext:"Login" | Searches for instances of RoundCube webmail login pages which may be targeted for phishing attacks. |
| intitle:"Login - Joomla" | Searches for instances of Joomla login pages which may be targeted for brute-force attacks or phishing attempts. |
| intitle:"Login - TimeIPS" | Searches for instances of TimeIPS login pages which may be targeted for phishing attempts. |
| intitle:"Login to @Mail" | Searches for instances of @Mail login pages which may be targeted for phishing attempts. |
Examples of Complex Google Dorks
You can combine Google dorking commands and operations for specific results
Here are some examples of complex Google Dorks that use multiple search operators to find specific types of information:
- Search for PDF files containing confidential information:
intitle:"confidential" filetype:pdf site:example.com
This Dork searches for PDF files on a specific website (example.com) that contain the word "confidential" in their title.
- Search for open FTP servers:
intitle:"index of" inurl:ftp
This Dork searches for open FTP servers by looking for websites that have "index of" in their title and "ftp" in their URL.
- Search for websites using a specific version of software:
intitle:"powered by" "specific software version"
This Dork searches for websites that are using a specific version of software by looking for the phrase "powered by" followed by the name of the software and its version number.
- Search for exposed Git repositories:
intitle:index.of /.git/config
This Dork searches for exposed Git repositories by looking for the configuration file (.git/config) in the root directory of a website.
- Search for websites with SQL injection vulnerabilities:
inurl:".php?ID=" intext:"sql syntax"
This Dork searches for websites that are vulnerable to SQL injection attacks by looking for PHP pages that have "ID=" in their URL and contain the phrase "sql syntax" in their content.
How to Prevent Google Dorks
You can use any of the following approaches to avoid falling under the control of a Google Dork. The following are the measures to prevent Google dork:
- You must encrypt sensitive and personal information such as usernames, passwords, payment details, and so forth.
- Also, check your website by running inquiries to check if you have any exposed sensitive data. If you find any exposed information, just remove them from search results with the help of the Google Search Console.
Protect sensitive content using robots.txt document available in your root-level site catalog. It will prevent Google to index your website.
User-agent: *
Disallow: /
You can also block specific directories to be excepted from web crawling. If you have an /admin area and you need to protect it, just place this code inside:
User-agent: *
Disallow: /admin/
Restrict access to specific files:
User-agent: *
Disallow: /privatearea/file.html
Restrict access to dynamic URLs that contain ‘?’ symbol:
User-agent: *
Disallow: /*?
Conclusion
Today, Google Dorks is one of the most convenient ways to find hard-to-reach data. You must find the correct search term and understand how the search engine works to find out valuable information from a pool of data. Despite several tools in the market, Google search operators have their own place.
We’ve covered commonly used commands and operators in this Google Dorks cheat sheet to help you perform Google Dorking. This Google fu cheat sheet is suitable for everyone, from beginners to experienced professionals.
Next time you need specialized or specific research, refer to this handy Google Dorks cheat sheet. Interested in learning more about ethical hacking?
Frequently Asked Questions
1. Is it Legal to Use Google Dorks?
Google hacking or commonly known as Google dorking. It is a hacker technique that leverages the technologies, such as Google Search and other Google applications, and finds the loopholes in the configuration and computer code being used by the websites.
However, it is an illegal activity, leading to activities such as cyber terrorism and cyber theft.
2. What are Some Google Hacks?
Here are a few Google hacks for you to try:
- Use the “@” symbol to search for information within social media sites. For this, you need to provide the social media name. For example, enter @google:username to search for the term username within Google.
- To get hashtags-related information, you need to use a # sign before your search term. For example, enter #HelloDelhi.
- To search for unknown words, use the asterisk character (*) that will replace one or more words. For example, Daya will move to *.
- You can use the keyword map along with the location name to retrieve the map-based results. For example, enter map:Delhi.
3. What are Google Dork Operators?
Below are Google dork operators:
- cache: provide the cached version of any website, e.g. cache:google.com
- allintext: to get specific text contained within he specific web page, e.g. allintext: hacking tricks.
- allinurl: provide URL containing all the specified characters, e.g: allinurl:pingpong
- filetype: to get information related to file extensions, for example, looking for specifically pdf files, use- email security filetype: pdf
- intitle: will provide information related to keywords within the title, for example, intitle:dorking tools.
- inanchor: provide information for an exact anchor text used on any links, e.g. inanchor:"hacking tools"
- site: display all indexed URLs for the mentioned domain and subdomain, e.g. site:dorking.com
- +: concatenate words, suitable for detecting pages with more than one specific key, e.g. dorking + tools
4. How Does Google Dorking Work?
Google Dorking is a search technique that enables hackers to gain access to information that corporations and individuals did not intend to make publicly available. Using this technique, hackers are able to identify vulnerable systems and can recover usernames, passwords, email addresses, and even credit card details.
5. How Do You Do the Google Gravity Trick?
Follow these steps to do the Google Gravity trick:
- Open a browser on your computer.
- Open Google.com.
- Type Google Gravity (Don’t click on Search).
- Click I'm Feeling Lucky.
- Wait for the Google Gravity page to load.
- Move your mouse cursor.
- You will see everything fall down.
COMMENTS (0)
Sign in to post intel on this briefing.