Google Dorking aka “Google Hacking”

8 months ago 44
BOOK THIS SPACE FOR AD
ARTICLE AD

Dasmanish

Google Dorks are commonly employed by security researchers, ethical hackers, and individuals keen on information retrieval for various purposes, including potentially malicious or unauthorized ones, which can be both illegal and unethical. Here are a few instances of Google dorks and their potential applications:

Filetype Searches: Utilizing the “filetype” operator enables the search for specific file types on websites. For example, “filetype:pdf site:example.com” would scour for PDF files on the specified website. This includes a range of file formats such as PDFs, Microsoft Office documents, source code files, and more.- Adobe Portable Document Format (.pdf)
- Adobe PostScript (.ps)
- Google Earth (.kml, .kmz)
- GPS eXchange Format (.gpx)
- Hancom Hanword (.hwp)
- HTML (.htm, .html, other file extensions)
- Microsoft Excel (.xls, .xlsx)
- Microsoft PowerPoint (.ppt, .pptx)
- Microsoft Word (.doc, .docx)
- OpenOffice presentation (.odp)
- OpenOffice spreadsheet (.ods)
- OpenOffice text (.odt)
- Rich Text Format (.rtf)
- Scalable Vector Graphics (.svg)
- TeX/LaTeX (.tex)
- Text (.txt, .text, other file extensions)

including source code in common programming languages:

- Basic source code (.bas)
- C/C++ source code (.c, .cc, .cpp, .cxx, .h, .hpp)
- C# source code (.cs)
- Java source code (.java)
- Perl source code (.pl)
- Python source code (.py)
- Wireless Markup Language (.wml, .wap)
- XML (.xml)

2. Inurl Searches: The “inurl” operator facilitates the discovery of websites containing specific keywords within their URLs. For instance, “inurl:admin” may reveal web pages featuring “admin” in the URL, potentially indicating administrative panels. This is particularly useful for finding login pages and administrative interfaces.

inurl:login
inurl:signin
inurl:admin

3. Intitle Searches: The “intitle” operator aids in searching for web pages with particular keywords in their titles. For instance, “intitle:login” could assist in locating login pages. Additionally, operators like “allintext,” “intext,” “inurl,” “allinurl,” “intitle,” and “allintitle” serve specific search purposes.

allintext:"keyword"
intext:"keyword"
inurl:"keyword"
allinurl:"keyword"
intitle:"keyword"
allintitle:"keyword"

4. Cache Searches: Google caches web pages for faster loading, and the “cache” operator grants access to cached versions of websites, even if the original site is down. For example, “cache:www.google.com" retrieves the cached version of Google’s homepage.

5. Link Searches: The “link” operator aids in finding pages that link to a specific URL, which is useful for exploring backlinks. For instance, “link:example.com” reveals pages linking to the specified website.

Operators

Operators like OR, AND, and their combinations, along with inclusion and exclusion parameters, further refine search queries for more targeted results.

(site:example.com OR site:example.net) AND intext:"login" -inurl:admin

Explanation:

-> (site:example.com OR site:example.net): This part of the query instructs
Google to search for results on either example.com or example.net.

-> AND: This operator specifies that both conditions must be met in the search
results.

-> intext:"login": This directive looks for web pages containing the word
"login" in their text.

-> -inurl:admin: The minus sign (-) excludes pages with "admin" in their URLs,
thus eliminating administrative pages from the search results.

Read Entire Article