Google Hacking

Google hacking doesn’t mean to hack Google. Google hacking term used when a hacker tries to find vulnerable targets or sensitive data by using the Google search engine.In Google hacking hackers use search engine commands to locate sensitive data and vulnerable devices on the Internet. Google supports a multitude of operators and modifiers that add a ton of power to google searching

I am going to explain some operators used in Google hacking

intitle:


Syntax: intitle:operator
This will return all the pages that have word entered after the intitle (as we used operator here) in the title of the page. If you want to check for multiple keywords in title use allintitle in place of intitle.
allintitle:operator1 operator2….

inurl:


Syntax: inurl:operator
This will return all the pages that have word entered after the inurl in the url of a page. If you want to check for multiple keywords in url use allinurl in place of inurl.
allinurl:operator1 operator2….

site:

Syntax: site:Domain
This will return all the pages that have certain keywords in that particular site or domain.

link:

Syntax: link:URL
This will list down webpages that have links to the specified webpage.

intext:


Syntax: intext:operator
This will return all the pages that have word entered after the intext in the particular website. If you want to check for multiple keywords in website use allintext in place of intext.
allintext:operator1 operator2….

related:

Syntax: related:URL
The “related:” will list web pages that are “similar” to a specified web page. For Example:
“related:www.hyderabadhack.blogspot.com” will list web pages that are similar to the hyderabadhack homepage

cache:

Syntax: cache:URL
The cache operator will search through google’s cache and return the results based on those documents. You can alternatively tell cache to
highlight a word or phrase by adding it after the operator and URL.

info:

Syntax: info:URL
This tag will give you the information that Google has on the given URL.

filetype:

Syntax: filetype:keyword
This will restricts Google search for files on internet with particular extensions (i.e. doc, pdf or ppt etc).
Well, the Google’s query syntaxes discussed above can really
help people to precise their search and get what they are
exactly looking for.

Other Queries

inurl:admin filetype:txt

inurl:admin filetype:db

inurl:admin filetype:cfg

inurl:mysql filetype:txt

inurl:passwd filetype:txt

inurl:iisadmin

inurl:auth_user_file.txt

inurl:orders.txt

inurl:”wwwroot/*.”

inurl:adpassword.txt

inurl:webeditor.php

inurl:file_upload.php

Looking for vulnerable sites using Google Hacks

allintitle: “index of /root”

allintitle: “index of /admin”

Share Button

One thought on “Google Hacking

  • July 10, 2012 at 1:31 am
    Permalink

    I never know there are command syntax to rip through secured web pages indexed in google. I’ve been a bit familiar with some of these syntax but not of my idea that these are considered hacking. Well, they are helpful in-ways, indeed!

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

11 − 6 =