🥷
Offensive Security
  • Shells and stuffs
    • Bind Shell
    • Reverse Shell
    • TTY Shell
    • File Transfer
    • Handmade Network Scan
  • Services enumeration
    • DNS Enumeration
    • SMB Enumeration
    • NFS Enumeration
  • Linux Privilege Escalation
    • Useful Tools
    • Hijack X11 session
    • Linux capabilities
    • LXC membership
  • Windows Privilege Escalation
    • Useful Tools
  • Password Attacks
    • Build Wordlist
    • Network Service Attacks
    • Password Cracking
  • Active Directory
    • AD CS
  • OSINT
    • Google Dorks
Powered by GitBook
On this page
  • Site
  • Intitle
  • Inurl
  • Intext
  • Filetype
  • #..#
  • -
  1. OSINT

Google Dorks

Google "dorking" is a way of using Google's advanced search operators to find targeted information. Here are some basic uses.

Site

Limit the search results to those from a specific website. site:example.com

Not so useful by itself but will return every page that Google has indexed for the example.com domain.

Intitle

Find pages with a certain word in the title. intitle:example

This will return every page that contains the word "example" in the title.

Inurl

Find pages with a certain word in the URL. inurl:example

This will return every page where "example" appears in the URL.

Intext

Find pages containing a certain word (or words) somewhere in the content. intext:example

This will return every page where "example" appears in the body text.

Filetype

Search for filetypes that Google understands. site:example.com filetype:pdf

This will return all PDFs on example.com. Other filetypes such as docx, pptx and xlsx also work. This could be combined with intitle:report to find all PDFs that have "report" in the name. Google does not understand all filetypes, so inurl could be used instead.

#..#

Search for a range of numbers. site:example.com filetype:pdf 2020..2022

This will return all PDFs on example.com which contain the numbers 2020, 2021 and 2022. Useful for finding information constrained to a given timeframe.

-

Exclude a phrase. site:example.com -www -support

This will return pages indexed on example.com excluding the www and support domains. Useful for finding other subdomains.

These dorks can be used to find interesting files, web applications and information.

PreviousAD CS

Last updated 1 year ago