©2019 Security Unleashed | New Delhi

  • Animesh Gupta

Google Dorks



A Google Dork query, sometimes just referred to as a dork, is a search string that uses advanced search operators to find information that is not readily available on a website.


Google dorking, also known as Google hacking, can return information that is difficult to locate through simple search queries. That description includes information that is not intended for public viewing but that has not been adequately protected.


As a passive attack method, Google dorking can return usernames and passwords, email lists, sensitive documents, personally identifiable financial information (PIFI) and website vulnerabilities. That information can be used for any number of illegal activities, including cyber terrorism, industrial espionage, identity theft and cyber stalking.


A search parameter is a limitation applied to a search. Here are a few examples of advanced search parameters:


intitle


Specifying intitle, will tell google to show only those pages that have the term in their html title. For example intitle:"login page" will show those pages which have the term "login page" in the title text.

inurl


Searches for the specified term in the url. For example inurl:"login.php".


allinurl


Same as inurl, but searches for all terms in the url.


filetype


Searches for specific file types. filetype:pdf will looks for pdf files in websites. Similarly filetype:txt looks for files with extension .txt


ext


Similar to filetype. ext:pdf finds pdf extension files.


intext


Searches the content of the page. Somewhat like a plain google search. For example intext:"index of /".


allintext


Similar to intext, but searches for all terms to be present in the text.


site


Limits the search to a specific site only. site:cybertechops.com

2 views