Master advanced Google search operators for effective OSINT investigations and information gathering.
"Making Google do things it didn't know it could do, legally and ethically"
Google Dorking, also known as Google Hacking, involves using advanced search operators to find specific information that might not be easily discoverable through normal search queries. These techniques are essential for OSINT practitioners who need to efficiently locate relevant information from the vast amount of data available on the internet.
"Your new superpowers for finding needles in the internet haystack"
site:Search within a specific website
Example: site:linkedin.com "John Smith"
filetype:Find specific file types
Example: filetype:pdf "annual report"
intitle:Search in page titles
Example: intitle:"employee directory"
inurl:Search in URLs
Example: inurl:admin login
cache:View cached version of pages
Example: cache:example.com
related:Find similar websites
Example: related:cnn.com
"Where search operators meet real-world intelligence gathering"
Locate organizational charts and employee directories
site:company.com filetype:pdf "organizational chart"Searches for PDF organizational charts on the company's website
Find sensitive documents that may have been inadvertently exposed
filetype:xls "confidential" OR "internal use only"Searches for Excel files containing confidential information
Gather information from social media platforms
site:twitter.com "target company" "layoffs"Searches for tweets about layoffs at a specific company
"When basic dorking isn't enough and you need to go deeper"
Multiple operators can be combined for more precise searches:
site:linkedin.com intitle:"Chief Executive Officer" "New York"Finds LinkedIn profiles of CEOs in New York
Use asterisks (*) as wildcards for unknown terms:
"John Smith" * "software engineer"Finds pages mentioning John Smith with any word between his name and "software engineer"
Use Google's tools to filter by date ranges for time-sensitive intelligence.
"Professional tips from analysts who've been there, dorked that"
Create a personal collection of effective dork queries for different types of investigations. This "dork library" will save time and improve consistency in your OSINT research.