privmsg.

php

init.inc.php

libpath=".php"

module_root_path=".php"

classes_dir

inc_dir

rf=

returnpath=

auth.php

cart_isp_root

BASE_path=

class_path

common.php?root_dir=

redirect.cgi

cvsweb.cgi

login.jsp

dbconnect.inc

admin

htgrep

wais.pl

amadmin.pl

subscribe.pl

news.cgi

auctionweaver.pl

acid_main.php
�
access.log
�
log.htm
�
log.html
�
log.txt
�
logfile
Scribd
Search
Search the worlds largest library
Search
Upload
Home
Saved
Bestsellers
Books
Audiobooks
Magazines
Documents
Sheet Music
Download
Jump to Page
1
You are on page 1of 9

Search inside document

Search document

1.5K views
0Up votes, mark as useful
0Down votes, mark as not useful
Search Tricks for Google
Uploaded by Ashish on Aug 20, 2009
This doc is all about search tricks for google. It describes how to search exact
information u want on google in very efficient manner. It also documents the way in
which google can be used�Full description
Copyright: Attribution Non-Commercial (BY-NC)
Download as PDF, TXT or read online from Scribd
Flag For Inappropriate Content
Save Search Tricks For Google For Later
Save

Embed

Share

Print
Download
Jump to Page
1
You are on page 1of 9

Search inside document

Search document

? ����������????????????�
Author
: entr0py
Date
: 07.06.2007
Feedback
: entr0py [AT] hush [DOT] ai
IRC
: irc.2600.net #securitybay
Introduction
Google is one of the most popular web search engine in the Cyberspace. It is an
extremelypowerful as well as persuasive search engine because it can be easily
compromised byinputting delineated search queries. This flaw or I can say boon has
helped attackers toacquire top-secret information that cannot be obtained by a
normal search queries.Anyway, in this tutorial I am going to elaborate various
segments of Google. They are asfollows:-
Basic Google Search Operators-Advanced Search Operators-Malicious Search Queries-
Vulnerability Assessment via Google-Best PracticesBasic Google Search Operators
As I mentioned earlier, Google has the ability to display confidential
information.However, for that, you need to know the basic search queries.
Therefore, I am going todemystify basic search queries.
?
Quote

usage
: Well, if you use quotes to screen your search query, then the resultwould be
confined to the selected query. Like, for example, you want to search forNT
exploits. You must use quotes to cover your query in order to shorten downthe
results. Example:"NT Exploits"
?
intext
: The intext operator forces Google to search for the query in the website�stext
content. This operator overlooks URL and titles; instead, it focusescompletely on
the text content. Example:intext:"Netcat Readme"."allintext" is a variant of the
"intext" operator. The allintext operator returns links,in which the complete query
is present. Example:allintext:"Format String Bugs".

?
inurl
: The inurl operator compels Google to search for the query in the website�sURL.
This operator ignores Text and Titles, instead, it rivets entirely on the
URL.Example:inurl:"index.php?page=security_resources.html"."allinurl" is a variant
of the "inurl" operator. The allinurl operator returns URL�s,in which the complete
query is present. Example:allinurl:"index.php?p=elf_format.html"
?
intitle
: The intitle operator obligates Google to search for the query in thewebsite�s
title. This operator neglects URL and Titles; instead, it concentratesentirely on
the title. Example:intitle:"Kernel Development""allintitle� is a variant of the
"intitle" operator. The allintitle operator devolveslinks, in which the complete
query is present. Example:allintitle:"Understanding the Linux Kernel"
?
site
: The site operator forces Google to return keywords from a specific
website.Example:"Remote Desktop" site:www.rest0re.org
?
cache
: The cache operator forces Google to display cached websites. This meansthat this
operator will compel Google to provide links from its cache database.This operator
is extremely useful during reconnaissance operations. Let me giveyou a quick
example:cache:www.microsoft.com
?
info
: The info operator will tell Google to provide you information about aparticular
website. Let me show you an example:info:www.linux.org
?
related
: The related operator will compel Google to provide you websites relatedto a
specific website. Let me give you a quick sample:related:www.freebsd.org
?
link
: The link operator will compel Google to display websites that link to
thespecified URL. This operator is helpful during affiliation building
system.Example:

link:www.the-c0re.org
?
filetype:
The filetype operator will forced Google to show websites with thespecified
extension or I can say filetype. This operator will help you in findingsource codes
or whitepapers.filetype:pdf site:www.infosecwriters.com
Advanced Search Operators
Until now, I have explained almost all the basic Google operators utilized by
attackers togain confidential information. In this section, I am going to explain
various otheroperators used to obtain secret information.
?
phonebook:
The phonebook operator is one of the most effective dork used byreconnaissance
operators to gather personal information about a specific person.Let me show you a
quick example:
phonebook:Robert ILNote:
This operator will only show you
US
street addresses and phone numbers.There are several variants of the above
operator. Let me enlist them along with thespecified examples:-
bphonebook:
The bphonebook operator will show information about a certainBusiness center. Let
me show a quick example:bphonebook:UV Research and Development IL-
rphonebook:
The rphonebook operator will show residential information of thespecified
person.rphonebook:Lanny IL
?
define:
The define operator will command Google to display websites thatcontain definition
of the specified word.define:entropy
?
safesearch:
The safesearch operator will instruct Google to ignore spam, adultsites, malicious
links, and advertisement portals.safesearch:XXX

?
movie:
The movie operator will compel Google to display reviews and showtimes of the
specified keyword.movie:Gone with the Wind
?
weather:
The weather operator will instruct Google to list down the currentweather status of
a particular location. Example:weather Illinois
?
store:
The store operator forces Google to provide information from its Frooglesegment.
Example:
R60 store:IBMObtaining Passwords via Google
Until now, I have elucidated all the popular Google operators or syntaxes. In this
section,I will be elaborating some malicious operators, which brings out a lot of
confidentialinformation.
?
allinurl:"auth_user_file.txt":
This query compels Google to display theAuthenticated user file of a DC forum
administrator. You need an efficientpassword cracker like JTR (John the Ripper)
because the authentication details areusually enciphered.
?
allinurl:passwd.txt:
This query will show you the actual passwd file of thewebsite. This file contains
the passwords of all the users of the site. Generally, theuser details are
enciphered, hence, acquaint yourself with all the popular as well asefficient
password crackers.
?
allinurl:service.pwd:
This query will list down all the FrontPage servicepasswords. However, they are
usually encrypted in DES encryption algorithm.Therefore, you need to be armored
with a DES cracker.
?
allinurl:passlist.txt:
This query lists down all the passwords utilized within awebsite.
?
"http://*:*@www.anydomain.com":
This is one of the most famous dorks usedby attackers because by using this dork,
one can obtain member details thatincludes usernames and passwords. This is mostly
used to crack e-mailpasswords.
?
.pwd.index:
There is a whole list of dorks associated with this syntax. Let meenlist them:

Reward Your Curiosity

Everything you want to read.
Anytime. Anywhere. Any device.
Read Free For 30 Days
No Commitment. Cancel anytime.

Share this document

Share or Embed Document
Sharing Options
Share On Facebook, Opens A New WindowShare On Twitter, Opens A New WindowShare On
LinkedIn, Opens A New WindowShare With Email, Opens Mail ClientCopy Text
Related Interests
PasswordDatabase IndexInternet Information ServicesWebsitesInformation Technology
Documents Similar To Search Tricks for Google
Carousel Next
RFI Dorks
RFI Dorks
UPLOADED BY

Evelyn-DavidBontean
All_Dorks
All_Dorks
UPLOADED BY

KrakaTirtaAbdillah
Google Search Tips for Hacking
Google Search Tips for Hacking
UPLOADED BY

Va Ru N
Packetstorm Google Dorks List
Packetstorm Google Dorks List
UPLOADED BY

Steven Mason
dorks.doc
dorks.doc
UPLOADED BY

Anonymous zlPSDf8
Dork
Dork
UPLOADED BY

murali2317
SinhVienIT.net Credit Card Dorks
SinhVienIT.net Credit Card Dorks
UPLOADED BY

HoangProtect
Google Hacking Database.pdf
Google Hacking Database.pdf
UPLOADED BY

Professor Watchlist
Google.search.secrets
Google.search.secrets
UPLOADED BY

nebelous
Best Private Dorks List 2017 - HowTechHack
Best Private Dorks List 2017 - HowTechHack
UPLOADED BY

Mario Silva
13000 SQLi Dorks
13000 SQLi Dorks
UPLOADED BY

Mustapha Wkkm
Google Dork 2011
Google Dork 2011
UPLOADED BY

offistar
100k Dorks
100k Dorks
UPLOADED BY

kstmsoft
Carding Dorks
Carding Dorks
UPLOADED BY

Aditya Nugraha
CC-dorks
CC-dorks
UPLOADED BY

Ertibi Morad
Dork Fast Cut
Dork Fast Cut
UPLOADED BY

Wahyu Putra K
LINKS FOR HACKERS , IT BOOKS,LANGUAGES,COMPUTERS
LINKS FOR HACKERS , IT BOOKS,LANGUAGES,COMPUTERS
UPLOADED BY

paul_17oct@yahoo.co.in
Dorks
Dorks
UPLOADED BY

Jezreel
Dorks Frescos
Dorks Frescos
UPLOADED BY

kstmsoft
500 Dork SQL
500 Dork SQL
UPLOADED BY

Berkat Willmart Telaumbanua

Dorks
Dorks
UPLOADED BY

Ricardo Padilla
20k-Dorks.txt
20k-Dorks.txt
UPLOADED BY

kyosuke
Dorks
Dorks
UPLOADED BY

Mathieu973
Dorks
Dorks
UPLOADED BY

Francisco Ogalde Inzunza

Google Hacking Database.docx
Google Hacking Database.docx
UPLOADED BY

Professor Watchlist
SQL Injection - Practically Detailed
SQL Injection - Practically Detailed
UPLOADED BY
shiva18390
200k Private Dorks
200k Private Dorks
UPLOADED BY

Ridwan Mohamad
Carding
Carding
UPLOADED BY

Muchammad Rizaldy Fachrullah

SQL Injection Dorks
SQL Injection Dorks
UPLOADED BY

Akshay Baweja
SQL Injection Dorks
SQL Injection Dorks
UPLOADED BY

Cosmin Popa
Footer MenuBack To Top
ABOUT
About Scribd
Press
Our blog
Join our team!
Contact Us
Invite Friends
Gifts
SUPPORT
Help / FAQ
Accessibility
Purchase help
AdChoices
Publishers
LEGAL
Terms
Privacy
Copyright
Social Media
Scribd - Download on the App Store
Scribd - Get it on Google Play
Copyright � 2019 Scribd Inc.Browse BooksSite Directory
Site Language:
English
Change Language