Known as Google Dorks, is an act of using Google search engine to find anything that is hidden or only accessible by admin. Useful for information gathering, finding vulnerabilities and stealing confidential items in a website.
There are so many operators that can be used in Google Hacking. We are going to try a few of the operators like “index of”, “inurl” and “site”.
“index of” finds the selected last directory of the domain pages, useful for finding certain hidden informations. Below shows the example of finding the log of the website by typing in “index of /logs”.
“inurl” finds any keywords of the website URL. Image below shows finding password list by typing in “inurl: passlist.txt”
“site” is used to find all of the pages of the targeted domain, it is very useful for finding hidden pages and reconnaissance of the web.
To find more commands that can be used to perform Google Dorks can be found in a website http://www.exploit-db.com. It is a database containing all Google Dorks commands that can be used.
Ryan Anggada 