Dorks

 Google Dorking – What is a Google Dork?

By Lisa Christian.


A google dork, is someone that uses the google search query to test a website, either for security or to hack and insert malicious code.


It doesn't require any code, it uses search commands that are inserted into the Google query field.


The antidote for malicious google dorking, is using the robots.txt file in the website and setting it to private for folders that shouldn't be traversed.


If malicious code is found to be on the website, some security software can help to remove web viruses and malware.


Following is a list of google dorking search commands:



Filter

Description

Example

allintext

Searches for keywords provided.

allintext:"keyword"

intext

Searches for keywords all at once or individually.

intext:"keyword"

inurl

Searches within an url matching keywords.

inurl:"keyword"

allinurl

Searches for a URL that matches the keywords provided.

allinurl:"keyword"

intitle

Searches for the keywords that might be in the title, either all, or individually.

intitle:"keyword"

allintitle

Searches for occurrences of keywords together, all at the same time.

allintitle:"keyword"

site

Specifically searches named website and then lists all of the results for that website url.

site:"www.google.com"

filetype

Searches for a particular filetype within the query.

filetype:"pdf"

link

Searches for any external links to any of the pages.

link:"keyword"

numrange

Used to locate specific range of numbers within the search.

numrange:321-325

before/after

Used to search within a date range.

filetype:pdf & (before:2000-01-01 after:2001-01-01)

allinanchor (and also inanchor)

Returns websites which have the keyterms in links, pointing to them, from the searched links.

inanchor:rat

allinpostauthor (and also inpostauthor)

Used only in blog search, this type of query, selects blog posts that are written by certain individuals or authors.

allinpostauthor:"keyword"

related

Returns similar websites.

related:www.google.com

cache

Shows older versions of the web page that Google has in its cache.

cache:www.google.com



Operators, can be used in combination too – for example AND, or OR.


So you see, google dorking can be very useful to the inquisitive website researcher.







Comments