No announcement yet.

The Footprinting Process - Google Hacking & Dorks

  • Time
  • Show
Clear All
new posts

  • The Footprinting Process - Google Hacking & Dorks

    Google hacking is a way of using search operators to narrows the list of results during a google search. This is not anything new and has been round for a long time and is indeed a powerful tool. The process involves using advanced operators to fine-tune your results to get what you want instead of being left at the whim of the search engine. With google hacking it is possible to manipulate the result in such a way that it enables you to obtain items such as passwords, certain file types, sensitive folders, logon portals, configuration data, SQL dumps, and a lot of specific things.
    The search operators is entered directly into the search box on the google search web page. The operators seems to work best if they are allowed to go before any other normal search strings.

    Operators include...

    This will display the cached version of the requested web page instead of the current version. cache:<web site>

    This lists any web pages that contain links to the page or site specified in the query. link:<web site>

    This will present information about the listed page. info:<web site>

    This will restrict the search to the location specified in the query. site:<web site>

    This will return pages with specified keywords in their title. allintitle:<keywords>

    This will return only results with a specific string in the web site URL. allinurl:<keywords>

    This will return only results that contain specified files. filetype:<file extension>

    This will search for Google+ pages or blood types. +Chrome or AB+

    This search operator will help you find social tags. @<tag>

    This search will aid you in finding prices. <item> $<price>

    This search will return popular hashtags for trending topics. #<hashtag>

    When you use a dash before a word or site, it excludes sites with that info from your results. This is useful for words with multiple meanings. -<excluded word> <search term>

    When you put a word or phrase in quotes, the results will only include pages with the same words in the same order as the ones inside the quotes. "<phrase of several words>"

    When adding an asterisk to a query in which the order is important, it works as as a placeholder for any unknown or wildcard terms. "<search term> * <another search term>"

    By separating numbers by two periods without spaces results will contain numbers in a range. $<low number>..$<high number>

    These are not the only operators available for advanced searching. Operators like InTitle, NotInTitle, InURL, NotInURL, and a lot more exists. Also some of these can be negated by prefixing them with "-". Operators like OR is also available.
    Certified Security Geek