/Google-Hacking-Database

The GHDB is an index of search queries (we call them dorks) used to find publicly available information, intended for pentesters and security researchers.

Primary LanguagePythonCreative Commons Zero v1.0 UniversalCC0-1.0

Google-Hacking-Database (GHDB)

Table Of Contents


Advanced Searching

Google Dorking describes the process of using advanced search filters that allow to retrieve more efficient results. It is a technique often used by cybersecurity professionals in order to find valuable information about a target. While Google Dorking itself is legal (in most countries), it might quickly lead to actions that aren't, such as visiting a site with illegal content in it. Hence using TOR or a VPN is recommended. It is also beneficial to use a search aggregator like SearX.


Search Operators

Operator Description Syntax Example
() Group multiple terms or operators. Allows advanced expressions (<term> or <operator>) inurl:(html | php)
* Wildcard. Matches any word <text> * <text> How to * a computer
"" The given keyword has to match exactly. case-insensitive "<keywords>" "google"
m..n / m...n Search for a range of numbers. n should be greater than m <number>..<number> 1..100
- Documents that match the operator are excluded. NOT-Operator -<operator> -site:youtube.com
+ Include documents that match the operator +<operator> +site:youtube.com
| Logical OR-Operator. Only one operator needs to match in order for the overall expression to match <operator> | <operator> "google" | "yahoo"
~ Search for synonyms of the given word. Not supported by Google ~<word> ~book
@ Perform a search only on the given social media platform. Rather use site @<socialmedia> @instagram
after Search for documents published / indexed after the given date after:<yy(-mm-dd)> after:2020-06-03
allintitle Same as intitle but allows multiple keywords seperated by a space allintitle:<keywords> allintitle:dog cat
allinurl Same as inurl but allows multiple keywords seperated by a space allinurl:<keywords> allinurl:search com
allintext Same as intext but allows multiple keywords seperated by a space allintext:<keywords> allintext:math science university
AROUND Search for documents in which the first word is up to n words away from the second word and vice versa <word1> AROUND(<n>) <word2> google AROUND(10) good
author Search for articles written by the given author if applicable author:<name> author:Max
before Search for documents published / indexed before the given date before:<yy(-mm-dd)> before:2020-06-03
cache Search on the cached version of the given website. Uses Google's cache to do so cache:<domain> cache:google.com
contains Search for documents that link to the given fileype. Not supported by Google contains:<filetype> contains:pdf
date Search for documents published within the past n months. Not supported by Google date:<number> date:3
define Search for the definition of the given word define:<word> define:funny
ext Search for a specific filetype ext:<documenttype> ext:pdf
filetype Refer to ext filetype:<documenttype> filetype:pdf
inanchor Search for the given keyword in a website's anchors inanchor:<keyword> inanchor:security
index of Search for documents containing direct downloads index of:<term> index of:mp4 videos
info Search for information about a website info:<domain> info:google.com
intext Keyword needs to be in the text of the document intext:<keyword> intext:news
intitle Keyword needs to be in the title of the document intitle:<keyword> intitle:money
inurl Keyword needs to be in the URL of the document inurl:<keyword> inurl:sheet
link / links Search for documents whose links contain the given keyword. Useful for finding documents that link to a specific website link:<keyword> link:google
location Show documents based on the given location location:<location> location:USA
numrange Refer to m..n numrange:<number>-<number> numrange:1-100
OR Refer to | <operator> OR <operator> "google" OR "yahoo"
phonebook Search for related phone numbers associated with the given name phonebook:<name> phonebook:"william smith"
relate / related Search for documents that are related to the given website relate:<domain> relate:google.com
safesearch Exclude adult content such as pornographic videos safesearch:<keyword> safesearch:sex
source Search on a specific news site. Rather use site source:<news> source:theguardian
site Search on the given site. Given argument might also be just a TLD such as com, net, etc site:<domain> site:google.com
stock Search for information about a market stock stock:<stock> stock:dax
weather Search for information about the weather of the given location weather:<location> weather:Miami

[Back to top]


Simple Examples

"google" 1..100

Search for websites that contain the word "google" and a number between 1 and 100

Videos -site:youtube.*

Search for the term "Videos" but exclude results from YouTube

How to * a computer after:2022-01-01

Search for websites published after the 1st January 2022 dealing about how to use/repair/shutdown/... a computer

allintext:homework teacher school site:gov before:2020 ext:(html | php)

Search for websites published before 2020 which have the TLD .gov, are either html or php documents and contain the words "homework", "teacher" and "school"

@instagram chr3st5an

Search for the term "chr3st5an" on instagram

[Back to top]


Finding Valuable Information

intitle:"webcamXP 5" | inurl:"lvappl.htm"

Find open/public webcams

intext:password ext:log

Find log documents wich have the string "password" in it

inurl:/proc/self/cwd

Find vulnerable webservers

inurl:email.xls ext:xls

Find excel documents that contain email addresses

index of:mp3 intext:.mp3

Find mp3 (music) documents

[Back to top]


Further

You can find more Google Dorks at the exploit-db - maltego

other nvd.nist.gov/cxsecurity or vulnerability-lab

[Back to top]


Meta

License

The information provided here are dedicated to the public domain. Use them as you wish.

[Back to top]