google-dorking

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

Google Dorking

Search operators turn a search engine into a precision instrument for finding specific files, exposed data, and buried mentions. Works on Google; Bing and DuckDuckGo support similar operators (and dodge some rate limits).

搜索运算符可将搜索引擎转变为精准工具，用于查找特定文件、暴露的数据以及被埋没的相关提及内容。该方法适用于Google；Bing和DuckDuckGo支持类似的运算符（且能规避部分速率限制）。

Core operators

核心运算符

Operator	Finds
`"exact phrase"`	Exact string (names, emails, error text)
`site:example.com`	Only that domain/subdomain
`filetype:pdf` (or `ext:` )	A specific file type
`intext:"term"`	Term in page body
`intitle:` / `inurl:`	Term in title / URL
`-term`	Exclude
`OR` / `( )`	Alternatives / grouping
`*`	Wildcard word
`before:2020 after:2015`	Date range

运算符	用途
`"exact phrase"`	精确匹配字符串（姓名、邮箱、错误文本）
`site:example.com`	仅搜索指定域名/子域名
`filetype:pdf` （或 `ext:` ）	特定文件类型
`intext:"term"`	页面正文中包含指定术语
`intitle:` / `inurl:`	标题/URL中包含指定术语
`-term`	排除指定术语
`OR` / `( )`	备选选项/分组
`*`	通配符
`before:2020 after:2015`	日期范围

Recipes

实用示例

text

undefined

text

undefined

Exposed documents on a site

site:example.com filetype:pdf OR filetype:xlsx OR filetype:docx

A person across the web, excluding a namesake's employer

"Jane Doe" "Springfield" -site:linkedin.com -"OtherCorp"

An email or username anywhere it was posted

"jane.doe@example.com" OR "janedoe1990"

Open directories and config leaks

intitle:"index of" "parent directory" site:example.com site:example.com intext:"password" filetype:env

undefined

intitle:"index of" "parent directory" site:example.com site:example.com intext:"password" filetype:env

undefined

Practice

实践技巧

Chain operators from broad to narrow; remove one at a time when you get zero results.
Repeat high-value dorks on Bing, DuckDuckGo, Yandex — indexes differ.
For known dork libraries, see the Google Hacking Database (GHDB).
Respect that finding exposed data doesn't authorize accessing it — see ../../ETHICS.md.

按从宽泛到精准的顺序组合运算符；当搜索结果为空时，逐一移除运算符。
在Bing、DuckDuckGo、Yandex上重复使用高价值的dorks——不同搜索引擎的索引内容有所差异。
如需已知的dork库，可参考Google Hacking Database（GHDB）。
请注意：找到暴露的数据并不代表你有权访问这些数据——详见../../ETHICS.md。