Typorithm · medium

Google Dorking

google-dorkingosintdorkingoperatorssearch
Saved on this device
Full lesson · 8 learning steps Open any exercise for focused practice
1

Step 1 of 8 · intro card

Learn Google Dorking

0%

Search & Discovery

Search operators narrow results: site: scopes a domain, filetype: a file type, intitle: and inurl: match the title and URL, quotes force an exact phrase, and a minus excludes terms. Combining them — "Google dorking" — surfaces exposed files and pages so a security team can find and remove them.

Search operators turn a general web search into a precise query. site:example.com restricts results to one domain; filetype:pdf limits them to a file type; intitle: and inurl: match text in the page title or URL.

Quotes force an exact-phrase match and a leading minus excludes a term or domain. Stacking these operators — known as "Google dorking" — surfaces exposed documents, open directory listings, and login pages that a broad search would bury.

The Google Hacking Database catalogs proven queries for this. Security teams run dorks against their own domains as an authorized exposure assessment: find what is publicly reachable, then take it down or lock it behind authentication.

01

site: scopes a domain; filetype: scopes a file type.

02

intitle:/inurl: match the title and URL; quotes force exact phrases.

03

Run dorks on your own domain to find and remove exposure.

site:example.com filetype:pdf
intitle:"index of" inurl:admin
"@example.com" -site:example.com
cache:example.com

Read the implementation

Connect each part of the code to the concept before you type.

1. Scope a domain

site: limits results to one domain and filetype: narrows to a file type — here, PDFs published on example.com.

site:example.com filetype:pdf

2. Find listings

intitle: matches the page title and inurl: matches the URL; together they surface open directory listings under an admin path.

intitle:"index of" inurl:admin

3. Exact phrase + exclude

Quotes force an exact-phrase match and the minus sign excludes a domain — finding mentions of the email off the company's own site.

"@example.com" -site:example.com

4. Cached copy

cache: requests the search engine's saved copy of a page, useful when the live page has changed or vanished.

cache:example.com

A complete learning loop

01

Understand

Read the concept map and follow the code breakdown.

02

Reconstruct

Type the implementation, repair mistakes and work through every recall exercise.

03

Verify

Use the final check without hints; revisit weak concepts in short practice sessions.

Google Dorking: Lesson & Practice · Typorithm | ApplyDjinn