Google Dorks Cheat Sheet
Google Dorks Cheat Sheet · from Anas-Magane/Pentesting (RECON).
📊 Search Operators#
| Operator | Description | Syntax | Example |
|---|---|---|---|
() | Group multiple terms or operators | (<term> or <operator>) | inurl:(html | php) |
* | Wildcard - Matches any word | <text> * <text> | How to * a computer |
"" | Exact phrase match | "<keywords>" | "google" |
m..n / m...n | Search for number range | <number>..<number> | 1..100 |
- | Exclude documents matching operator | -<operator> | -site:youtube.com |
+ | Include documents matching operator | +<operator> | +site:youtube.com |
| | Logical OR operator | <operator> | <operator> | "google" | "yahoo" |
~ | Search for synonyms | ~<word> | ~book |
@ | Search on social media platform | @<socialmedia> | @instagram |
after | Documents after given date | after:<yy(-mm-dd)> | after:2020-06-03 |
allintitle | Multiple keywords in title | allintitle:<keywords> | allintitle:dog cat |
allinurl | Multiple keywords in URL | allinurl:<keywords> | allinurl:search com |
allintext | Multiple keywords in text | allintext:<keywords> | allintext:math science |
AROUND | Words within distance | <word1> AROUND(<n>) <word2> | google AROUND(10) good |
author | Articles by specific author | author:<name> | author:Max |
before | Documents before given date | before:<yy(-mm-dd)> | before:2020-06-03 |
cache | Cached version of website | cache:<domain> | cache:google.com |
contains | Documents linking to filetype | contains:<filetype> | contains:pdf |
date | Documents from past months | date:<number> | date:3 |
define | Definition of word | define:<word> | define:funny |
ext | Specific filetype | ext:<documenttype> | ext:pdf |
filetype | Specific filetype | filetype:<documenttype> | filetype:pdf |
inanchor | Keyword in website anchors | inanchor:<keyword> | inanchor:security |
index of | Direct download directories | index of:<term> | index of:mp4 videos |
info | Information about website | info:<domain> | info:google.com |
intext | Keyword in document text | intext:<keyword> | intext:news |
intitle | Keyword in document title | intitle:<keyword> | intitle:money |
inurl | Keyword in document URL | inurl:<keyword> | inurl:sheet |
link / links | Documents linking to keyword | link:<keyword> | link:google |
location | Documents by location | location:<location> | location:USA |
numrange | Number range search | numrange:<number>-<number> | numrange:1-100 |
OR | Logical OR operator | <operator> OR <operator> | "google" OR "yahoo" |
phonebook | Phone numbers by name | phonebook:<name> | phonebook:"william smith" |
relate / related | Related websites | relate:<domain> | relate:google.com |
safesearch | Exclude adult content | safesearch:<keyword> | safesearch:sex |
source | Specific news source | source:<news> | source:theguardian |
site | Search specific site/domain | site:<domain> | site:google.com |
stock | Stock market information | stock:<stock> | stock:dax |
weather | Weather information | weather:<location> | weather:Miami |
🔧 URL Modifiers#
| Modifier | Description | Parameter | Example |
|---|---|---|---|
| App Search | App search filter | &tbs=app_price:free (free)&tbs=app_price:paid (paid)&tbs=app_os:1 (Android)&tbs=app_os:13 (iOS) | https://www.google.com/search?q=star+wars&tbs=app_os:13 |
| Blog Search | Blog search filter | &tbs=blgt:b | https://www.google.com/search?q=star+wars&tbs=blgt:b |
| Local Finder | Local results | &tbm=lcl | https://www.google.com/search?q=star+wars&tbm=lcl |
| Country Search | Country domains | &cr=country[CountryCode] | https://www.google.com/search?q=star+wars&cr=countryAU |
| Disable Filtering | Unfiltered results | &filter=0 | https://www.google.com/search?q=star+wars&filter=0 |
| Disable Personalization | Non-personalized results | &pws=0 | https://www.google.com/search?q=star+wars&pws=0 |
| Forum Search | Forum search filter | &udm=18 | https://www.google.com/search?q=star+wars&udm=18 |
| Image Search | Image search filter | &tbm=isch | https://www.google.com/search?q=star+wars&tbm=isch |
| News Search | News search filter | &tbm=nws&tbs=nrt:b (blogs) | https://www.google.com/search?q=star+wars&tbm=nws |
| No Country Redirect | Go to .com domain | /ncr | https://www.google.com/ncr |
| Patent Search | Patent search filter | &tbm=pts | https://www.google.com/search?q=star+wars&tbm=pts |
| Results From Past | Time-based results | &tbs=qdr:s (second)&tbs=qdr:n (minute)&tbs=qdr:h (hour)&tbs=qdr:d (day)&tbs=qdr:w (week)&tbs=qdr:m (month)&tbs=qdr:y (year) | `https |
🔍 TOP Google Dorks for Ethical Hacking & Pentesting#
Note: Content preserved exactly as provided. This file only adds structure & styling (headings, tables, code-blocks) to make it look clean.
🎯 Most Popular & Effective Dorks#
📍 Sensitive Files Discovery#
google
filetype:env "DB_PASSWORD"
site:*.ma intitle:"change password"
filetype:sql "INSERT INTO" "users"
filetype:log "error" "password"
filetype:ini "database" "password"
ext:xml | ext:conf | ext:cnf | ext:reg | ext:inf | ext:rdp | ext:cfg | ext:txt | ext:ora | ext:ini📍 Database Exposures#
google
google
intitle:"index of" "database.sql"
"phpMyAdmin" "running on" inurl:main.php
inurl:config.php db_password
"AutoCreate=TRUE password=*"📍 Login Panels & Admin Interfaces#
google
google
intitle:"admin login"
inurl:/admin/login.php
intitle:"login" "admin" "password"
inurl:wp-admin
inurl:/administrator/ Joomla📍 Directory Listings#
google
google
intitle:"index of" "/etc/"
intitle:"index of" "backup"
intitle:"index of" ".git"
"index of" "parent directory" "mail"📍 API Keys & Credentials#
google
google
"api_key" "xoxb-" site:github.com
"AKIA" "AWS_ACCESS_KEY_ID"
"sk_live" "STRIPE"
extension:json "api_key"📍 Configuration Files#
google
google
filetype:config inurl:web.config
"dbname" "dbuser" "dbpassword"
inurl:".htpasswd"
intitle:"index of" ".env"📍 Subdomain Discovery#
google
google
site:*.target.com
site:*.com -www
site:*.gov.*📍 Open Devices & Cameras#
google
google
inurl:"viewerframe?mode=motion"
intitle:"webcam 7" "active"
inurl:"axis-cgi/mjpg"📍 Vulnerable Applications#
google
google
inurl:/phpinfo.php
intitle:"phpinfo()" "PHP Version"
inurl:/test/ -intext:test📍 Backup Files#
google
google
filetype:bak inurl:"backup"
"backup" ext:sql | ext:zip | ext:tar.gz
intitle:"index of" "backup.zip"📍 Error Messages (Info Leak)#
google
google
"warning: " "failed to open stream" "include_path"
"sql syntax" "mysql" "error on line"
"stack trace:" "at line"📍 WordPress Specific#
google
google
inurl:/wp-content/uploads/
"WordPress" "database error"
intitle:"WordPress" "install" "admin"📍 Network Devices#
google
google
intitle:"RouterOS" "WinBox"
inurl:"cgi-bin/login.cgi"
intitle:"switch" "configuration"📍 Email Lists#
google
google
filetype:xls inurl:"email.xls"
"@company.com" filetype:csv
"mail" "password" filetype:txt📍 Git Exposures#
google
google
intitle:"index of" ".git"
".git" intitle:"index of"
inurl:".git/config"📍 Remote File Inclusion#
google
google
inurl:"page=" "file=" "folder="
inurl:"include=" "path="
"include.php?file="🛡️ Pentesting Methodology Dorks#
🔍 Reconnaissance Phase#
google
google
site:target.com filetype:pdf
site:target.com "contact us"
site:linkedin.com "target company"🔍 Vulnerability Assessment#
google
google
site:target.com inurl:login
site:target.com "error"
site:target.com filetype:php🔍 Exploitation Phase#
google
google
site:target.com inurl:id=
site:target.com "cmd=" "exec="
site:target.com "search?q="⚠️ Critical Security Finds#
🔴 High Risk#
google
google
"password" filetype:log
"private key" filetype:key
"-----BEGIN RSA PRIVATE KEY-----"🟡 Medium Risk#
google
google
intitle:"dashboard" "admin"
"phpMyAdmin" "username"
inurl:"/backup/database"🟢 Low Risk#
google
google
"test" "password" "demo"
"sample" "config"
"example" "database"🎯 Quick Commands Reference#
| Category | Top Dork |
|---|---|
| Sensitive Files | filetype:env DB_PASSWORD |
| Admin Panels | intitle:"admin login" |
| Database Dumps | intitle:"index of" "database.sql" |
| Config Files | inurl:config.php db_password |
| Git Exposures | intitle:"index of" ".git" |
| Error Leaks | "sql syntax" "mysql" "error" |
| Backup Files | filetype:bak inurl:"backup" |
🔒 Legal & Ethical Usage#
DO:
- Use only on authorized targets
- Report vulnerabilities responsibly
- Follow bug bounty program rules
- Use for educational purposes
DON'T:
- Access without permission
- Exploit found vulnerabilities
- Download sensitive data
- Disclose without authorization
📚 Pro Tips#
text
Combine Operators: site:target.com filetype:pdf intitle:"confidential"
Use Wildcards: site:*.target.* -www
Exclude Results: -filetype:html -filetype:php
Date Filters: after:2023 site:target.com⚠️ Remember: With great power comes great responsibility. Always hack ethically!