1. Scope a domain
site: limits results to one domain and filetype: narrows to a file type — here, PDFs published on example.com.
site:example.com filetype:pdfTyporithm · medium
Step 1 of 8 · intro card
Search & Discovery
Search operators narrow results: site: scopes a domain, filetype: a file type, intitle: and inurl: match the title and URL, quotes force an exact phrase, and a minus excludes terms. Combining them — "Google dorking" — surfaces exposed files and pages so a security team can find and remove them.
Search operators turn a general web search into a precise query. site:example.com restricts results to one domain; filetype:pdf limits them to a file type; intitle: and inurl: match text in the page title or URL.
Quotes force an exact-phrase match and a leading minus excludes a term or domain. Stacking these operators — known as "Google dorking" — surfaces exposed documents, open directory listings, and login pages that a broad search would bury.
The Google Hacking Database catalogs proven queries for this. Security teams run dorks against their own domains as an authorized exposure assessment: find what is publicly reachable, then take it down or lock it behind authentication.
site: scopes a domain; filetype: scopes a file type.
intitle:/inurl: match the title and URL; quotes force exact phrases.
Run dorks on your own domain to find and remove exposure.
site:example.com filetype:pdf
intitle:"index of" inurl:admin
"@example.com" -site:example.com
cache:example.comConnect each part of the code to the concept before you type.
site: limits results to one domain and filetype: narrows to a file type — here, PDFs published on example.com.
site:example.com filetype:pdfintitle: matches the page title and inurl: matches the URL; together they surface open directory listings under an admin path.
intitle:"index of" inurl:adminQuotes force an exact-phrase match and the minus sign excludes a domain — finding mentions of the email off the company's own site.
"@example.com" -site:example.comcache: requests the search engine's saved copy of a page, useful when the live page has changed or vanished.
cache:example.comRead the concept map and follow the code breakdown.
Type the implementation, repair mistakes and work through every recall exercise.
Use the final check without hints; revisit weak concepts in short practice sessions.