Skip to content

Google Dorking Cheatsheet

  • Core Operators 
site:example.com //restrict to a domain or TLD.

filetype:pdf / filetype:env / filetype:sql //search by file extension.

inurl:login / inurl:admin //words in the URL path.

intitle:"index of" / intitle:"login" //words in the page title.

intext:"password" / allintext:api_key secret //words in page body.

allintitle: / allinurl: / allintext: //all terms must appear in that field.

cache:url //view Google’s cached copy.

related:example.com //sites similar to the given domain.

"exact phrase"  //exact phrase match.

before:YYYY-MM-DD / after:YYYY-MM-DD //filter by indexed date.
  • Subdomain & Cert Checks 
site:[domain] -www

site:[domain] intext:"@domain"
  • Exposed Credentials
site:example.com intext:"password" OR intext:"passwd"

filetype:env "DB_PASSWORD"

filetype:properties "secret" OR "api_key"

intext:"aws_secret_access_key" filetype:txt