Hack Like Pro using Google Dorks

Mini Blog cybersecurity
,
1

Google Dorks, or Google hacking, is a technique to find information that is not readily available through normal search queries. It involves using advanced search operators to filter results more effectively. Here’s a list of commonly used Google Dorks along with their explanations:

  1. site:

    • Usage: site:example.com
    • Explanation: Limits search results to a specific website.
    • Example: site:example.com will return all indexed pages from example.com.

  2. inurl:

    • Usage: inurl:admin
    • Explanation: Finds URLs that contain the specified word or phrase.
    • Example: inurl:login will show pages with “login” in the URL.

  3. intitle:

    • Usage: intitle:index of
    • Explanation: Searches for pages with a specific word or phrase in the title.
    • Example: intitle:admin will return pages with “admin” in the title.

  4. filetype:

    • Usage: filetype:pdf
    • Explanation: Searches for files of a specific type.
    • Example: filetype:pdf will return PDF files.

  5. intext:

    • Usage: intext:password
    • Explanation: Searches for pages that contain a specific word or phrase in the text.
    • Example: intext:confidential will show pages containing the word “confidential”.

  6. link:

    • Usage: link:example.com
    • Explanation: Finds pages that link to a specific URL.
    • Example: link:example.com will show pages that link to example.com.

  7. cache:

    • Usage: cache:example.com
    • Explanation: Displays the cached version of a webpage.
    • Example: cache:example.com shows the cached version of example.com.

  8. related:

    • Usage: related:example.com
    • Explanation: Finds websites similar to the specified URL.
    • Example: related:example.com will show websites related to example.com.

  9. allinurl:

    • Usage: allinurl:login password
    • Explanation: Searches for pages with all specified words in the URL.
    • Example: allinurl:login admin will return URLs containing both “login” and “admin”.

  10. allintitle:

    • Usage: allintitle:admin login
    • Explanation: Finds pages with all specified words in the title.
    • Example: allintitle:admin login will show pages with both “admin” and “login” in the title.

  11. allintext:

    • Usage: allintext:username password
    • Explanation: Searches for pages with all specified words in the text.
    • Example: allintext:username password will return pages containing both “username” and “password”.

  12. “search term”

    • Usage: "sensitive information"
    • Explanation: Finds exact phrases.
    • Example: "company secrets" will return pages containing the exact phrase “company secrets”.

  13. OR

    • Usage: login OR admin
    • Explanation: Finds pages containing either one word or another.
    • Example: login OR admin will show pages containing either “login” or “admin”.

  14. AND

    • Usage: login AND admin
    • Explanation: Finds pages containing both words.
    • Example: login AND admin will return pages containing both “login” and “admin”.

  15. -

    • Usage: -example
    • Explanation: Excludes pages containing the specified word.
    • Example: -login will exclude pages with the word “login”.

  16. +

    • Usage: +example
    • Explanation: Forces the inclusion of a specific word in search results.
    • Example: +login will force the inclusion of “login” in search results.

Here are a few practical examples of Google Dorks for reconnaissance:

  • Finding exposed directories:

    • intitle:"index of /"

  • Searching for login pages:

    • inurl:login
    • intitle:login

  • Finding public documents:

    • filetype:pdf site:example.com
    • filetype:xls site:example.com

  • Discovering vulnerabilities:

    • inurl:/phpinfo.php
    • intitle:"phpmyadmin" "Welcome to phpMyAdmin"

  • Sensitive data exposure:

    • intext:"confidential" filetype:pdf
    • intext:"password" filetype:xls

These Google Dorks can help you gather information about a website, its structure, and potentially exposed sensitive data. However, it’s important to use these tools ethically and responsibly, adhering to legal and ethical guidelines.

1 Like