Search Engine Dorks

This chapter focuses on using advanced search engine queries (i.e., dorks) to find information that may be otherwise hidden. This process of dorking can be used to find vulnerabilities within websites, or even to find leftover files and subdomains. The chapter also focuses on the absolute essential search modifiers. The site:operator will return search results only on the specified website. Using the intitle:operator will tell Google to show only those pages that have the specified search term in their page/HTML title. Inurlbr is probably the best automated dork searching tool on the web. This tool will automate the process of searching for specific dorks across multiple search engines. The real power of Inurlbr is in its ability to test and validate LFI and SQLi vulnerabilities.