Google Hacking Cheat Sheet
Google hacking involves using advanced operators in the Google search engine to locate specific sections of text on websites that are evidence of vulnerabilities, for example, specific versions of vulnerable Web applications. Google hacking search queries can be used to identify security vulnerabilities in web applications, gather information for arbitrary or individual targets, discover error messages disclosing sensitive information, discover files containing credentials and other sensitive data.
A search query with title:admbook intitle:Fversion filetype:php would locate PHP web pages with the strings “admbook” and “Fversion” in their titles, indicating that the PHP based guestbook Admbook is used, an application with a known code injection vulnerability. It is normal for default installations of applications to include their running version in every page they serve, for example, “Powered by XOOPS 2.2.3 Final”, which can be used to search for websites running vulnerable versions.
Google Hacking Cheat Sheet
- “inurl: domain/” “additional dorks
- inurl = the URL of a site you want to query
- domain = the domain for the site
- dorks = the sub-fields and parameters that a hacker wants to scan
- link = Find other pages indexed by Google that reference this link
- quote” = Find an exact phrase (though results may include related words)
- +word = Show results with this word exactly. Do not include similar words.
You can download the Google Hacking Cheat Sheet PDF using the link given below.