Background Image

Blog Post

Nov 24

Google Dorking 101


Hacking using Google's search engine has been around since at least 2002. By 2005 the terms were included in a book called Google Hacking for Penetration Testers, Volume 1 by Johnny Long. 

Operators which can be strung together to find hidden data via google search.

Operator Purpose Mixes with Other Operators? Can be used Alone? Web Images Groups News
intitle Search page Title yes yes yes yes yes yes
allintitle[5] Search page title yes yes yes yes yes yes
inurl Search URL yes yes yes yes yes really like intitle
allinurl Search URL yes yes yes yes yes like intitle
filetype specific files yes yes

÷||yes||yes||no||not really

intext Search text of page only yes yes yes yes yes yes
allintext Search text of page only not really yes yes yes yes yes
site Search specific site yes yes yes yes no not really
link Search for links to pages no yes yes no no not really−≤°§
inanchor Search link anchor text yes yes yes yes not really yes−±≤≠≈″°—–
numrange Locate number yes yes yes no no not really
daterange Search in date range yes no yes not really not really not really
author Group author search yes yes no no yes not really
group Group name search not really yes no no yes not really
insubject Group subject search yes yes like intitle like intitle yes like intitle
msgid Group msgid search no yes not really not really yes not really

 

Examples:

The operator string in the example is intext:login | logon intext:password | passcode filetype:xls | filetype:xlsx

Back   
 
Add Comment:
Please login or register to add your comment or get notified when a comment is added.
1 person will be notified when a comment is added.