GOOGLE DORKS-- GOOGLE Using directives

GOOGLE DORKS-- GOOGLE Using directives

Using the search engine Google can be a great way for Reconnaissance. Luckily for us, Google provides "directives" that are easy to use and help us to get the most out of every search. These directives are keywords that enable us to more accurately extract information from the Google Index

To properly use a Google directive, you need three things:

1. The name of the directive you want to use
2. A colon
3. The term you want to use in the directive

To utilise the "site" directive, we need to enter the following into Google search box:

site:domain term(s) to search

example: site:apple.com steve jobs

If I typed apple steve jobs in the Google search bar I would receive over 200 million results

Now if I use the Google directive site:apple.com steve jobs The result with be drastically different results than our initial attempt.

Utilizing the "site" directive is a great way to search a specific target and look for additional information.

Another good Google directive to use is "intitle:" or "allintitle:". Adding either of these to your search cause only websites that have your search words in the title of the web-page to be returned.

Here are a list of Google directives and there results

allintitle:index of   :list any directories that have been indexed and are available via the web server

inurl:admin    :useful in revealing administrative or configuration pages on your target's website

cache:Sitename    :limits search results and shows only information pulled directly from the Google cach.

filetype:pdf     :useful directive to find links to specific files like .pdf, docx, txt, and many more

You can combine multiple directives into the same search. For example, if we want to find all PowerPoint presentations on the AUT website, you would enter the following command into the search box:

site:aut.ac.nz filetype:ppt

You can get very creative with the Google directives and using a combination of directives and keywords or common site directory's, files or names can produce interesting results. Example: site:sitename inurl:"login=" or  filetype:docx Domain Registratrar $user $pass. Visit http://www.exploit-db.com/google-dorks/ for ideas.