https://d3vilsec.com/cheatsheets/pentesting/information-gathering-web-edition/search-engine/ Recent content in Search Engine on d3vilsec Hugo en https://d3vilsec.com/cheatsheets/pentesting/information-gathering-web-edition/search-engine/search-operators/ Mon, 01 Jan 0001 00:00:00 +0000 https://d3vilsec.com/cheatsheets/pentesting/information-gathering-web-edition/search-engine/search-operators/ <h1 id="search-operators-google-dorking-cheatsheet">Search Operators (Google Dorking) Cheatsheet</h1> <p><strong>Type:</strong> Passive reconnaissance using advanced search-engine operators to surface exposed files, directories, credentials, subdomains, and metadata without touching the target</p> <hr> <h2 id="core-operators">Core Operators</h2> <table> <thead> <tr> <th>Operator</th> <th>Description</th> <th>Example</th> </tr> </thead> <tbody> <tr> <td><code>site:</code></td> <td>Restrict results to a domain</td> <td><code>site:example.com</code></td> </tr> <tr> <td><code>inurl:</code></td> <td>Term appears in the URL</td> <td><code>inurl:admin</code></td> </tr> <tr> <td><code>intitle:</code></td> <td>Term appears in the page title</td> <td><code>intitle:&quot;index of&quot;</code></td> </tr> <tr> <td><code>intext:</code></td> <td>Term appears in the body text</td> <td><code>intext:password</code></td> </tr> <tr> <td><code>filetype:</code> / <code>ext:</code></td> <td>Restrict to a file extension</td> <td><code>filetype:pdf</code></td> </tr> <tr> <td><code>cache:</code></td> <td>Show Google&rsquo;s cached copy</td> <td><code>cache:example.com</code></td> </tr> <tr> <td><code>related:</code></td> <td>Find similar sites</td> <td><code>related:example.com</code></td> </tr> <tr> <td><code>link:</code></td> <td>Pages linking to a URL (deprecated/limited)</td> <td><code>link:example.com</code></td> </tr> <tr> <td><code>define:</code></td> <td>Dictionary definition</td> <td><code>define:reconnaissance</code></td> </tr> <tr> <td><code>AROUND(n)</code></td> <td>Terms within n words of each other</td> <td><code>admin AROUND(3) password</code></td> </tr> </tbody> </table> <hr> <h2 id="operator-modifiers">Operator Modifiers</h2> <table> <thead> <tr> <th>Modifier</th> <th>Description</th> <th>Example</th> </tr> </thead> <tbody> <tr> <td><code>&quot;...&quot;</code></td> <td>Exact phrase match</td> <td><code>&quot;confidential&quot;</code></td> </tr> <tr> <td><code>-</code></td> <td>Exclude a term</td> <td><code>site:example.com -www</code></td> </tr> <tr> <td><code>OR</code> / <code>|</code></td> <td>Logical OR</td> <td><code>site:example.com (filetype:pdf OR filetype:docx)</code></td> </tr> <tr> <td><code>AND</code></td> <td>Logical AND (implicit)</td> <td><code>intitle:login AND inurl:admin</code></td> </tr> <tr> <td><code>*</code></td> <td>Wildcard / placeholder</td> <td><code>&quot;username * password&quot;</code></td> </tr> <tr> <td><code>( )</code></td> <td>Group terms</td> <td><code>site:example.com (admin OR login)</code></td> </tr> <tr> <td><code>..</code></td> <td>Number range</td> <td><code>&quot;budget 2020..2024&quot;</code></td> </tr> </tbody> </table> <hr> <h2 id="all-variants">&ldquo;all&rdquo; Variants</h2> <table> <thead> <tr> <th>Operator</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><code>allintitle:</code></td> <td>All following words must be in the title</td> </tr> <tr> <td><code>allinurl:</code></td> <td>All following words must be in the URL</td> </tr> <tr> <td><code>allintext:</code></td> <td>All following words must be in the body</td> </tr> <tr> <td><code>allinanchor:</code></td> <td>All following words must be in anchor text</td> </tr> </tbody> </table> <blockquote> <p>Note: <code>all*</code> operators don&rsquo;t mix well with other operators — use the single-term versions (<code>intitle:</code>, <code>inurl:</code>) when combining.</p>