Google Dorks

Google Dorks, also known as Google hacking, refers to using advanced Google search operators to find specific information or vulnerabilities that are not easily accessible through a standard search. These operators can help you discover hidden pages, sensitive information, or even security flaws in websites.

Common Google Dork Operators

• site: – Restricts the search to a specific domain.
• filetype: – Searches for specific file types.
• intitle: – Searches for a specific word in the title of a webpage.
• inurl: – Searches for a specific word in the URL.
• cache: – Displays Google’s cached version of a webpage.
• intext: – Searches for a specific word in the text of a webpage.
• ext: – Searches for specific file extensions.

How to Use Google Dorks in Bug Bounty

1. Information Gathering: Use Google Dorks to gather information about a target website.
   • site:example.com – Finds all pages indexed on the domain example.com.
   • intitle:"login" site:example.com – Finds login pages on example.com.
2. Finding Sensitive Information: Look for files or data that might have been inadvertently made public.
   • filetype:pdf site:example.com – Finds PDF files on example.com.
   • inurl:admin filetype:log – Searches for log files containing the term “admin”.
3. Discovering Vulnerabilities: Identify pages that may be vulnerable to attacks.
   • inurl:php?id= – Finds pages with potential SQL injection vulnerabilities.

Examples

• Finding Login Pages:

intitle:"login" site:example.com

This search will list all pages on example.com that have “login” in their title, potentially identifying login portals.

• Discovering Publicly Accessible Documents:

filetype:pdf site:example.com

This dork will show all PDF files indexed on example.com, which might include sensitive documents.

• Identifying Error Messages:

intext:"sql syntax error" site:example.com

This can help find pages on example.com where SQL errors are displayed, indicating potential SQL injection points.

Ethical Considerations

• Permission: Always ensure you have permission to test the website. Unauthorized access or testing is illegal and unethical.
• Reporting: If you find vulnerabilities, report them responsibly to the website owners or through official bug bounty programs.

Conclusion

Google Dorks can be a powerful tool in a bug bounty hunter’s arsenal, helping to uncover hidden vulnerabilities and sensitive information. However, it should be used responsibly and ethically to avoid legal issues and to ensure that the security research contributes positively to the web ecosystem.