Google search is case sensitive when we use logical operators. So you cannot type oR, or anD, instead use uppercase or symbols.
OR can be replaced by pipe symbol | .
NOT can be replaced by minus(ess) symbol - .
AND can be replaced by single space (pressing space), but results may differ if we type AND specifically between words.
City City - show flights from one city to another, even if you enter IATA airport code like ‘PRG LON’
Link - finds sites that link to your specific domain, like “link:ma-no.org”
.. - Search within a range of numbers, like ‘2002 .. 2020’ or ‘$25..$75’
In - converts units, example ‘inches in a foot’
Site - show your searched term within specific site, like ‘site:elcorteingles.es watches’ or specific domain ‘site:uk amazon’
Allintitle - shows results with the searched phrase in the title, ‘allintitle:nasa moon landing’
Intitle - shows result with a single term in the title, example ‘intitle: "sauce"’
Inblogtitle - shows results of blogs with the searched phrase in the title, ‘inblogtitle: programming’
Inposttitle - shows results with a single term in the title, like ‘inposttitle: programming’
Allintext - shows results to pages with the terms in the content, example ‘Allintext: recipes for a weekend’
Allinanchor - shows sites with your search term in links, example
Allinurl
Inurl - shows results with your first search term in the URL and the second term is content, ‘Inurl: movies view’
Allinpostauthor - shows content that is written by yours searched author, example ‘allinpostauthor: Bukowski’
Related - shows results that are related to your searched URL, ‘related:NYtimes.com’
Info - shows information about searched domain, like ‘Info:diariodemallorca.com’
Define - ‘define:dorking’ will return definition of the given word.
Source - searches for mentions of a specific person or thing in a certain news source. ‘metro source:diario de mallorca’
Location - shows articles based on specified location, like ‘location:Mallorca beaches’
Filetype - Find documents of the specified type, example ‘filetype:pdf cats’
Ext - Very similar to Filetype but we can seek uncommon extensions for more accurate results, example ‘ext:flac mysong’
Movie - shows times for a specific movie in a specific location
Weather - show results for weather in a specific location, example “weather:palma de mallorca”
Stocks - shows stock price of a specific company. I.e ‘stocks:Starbucks’
Cache - shows most recent cache of specific webpage, example ‘cache:ma-no.org’
Map - shows map of specified location, like ‘map:"sierra de tramuntana"’
Equation - calculates numbers, for example ‘10x4’
Tip calculator - calculator to help you decide how much to tip, example ‘’
Minute timer - shows a timer with your specified time, like ‘2 minute timer’
Stopwatch - shows a stopwatch, example ‘stopwatch’
Sunrise | Sunset - shows the time of sunrise and sunset for specific location, example ‘sunrise palma’
Flight number - shows the status of a specific flight, example ‘FR 6363’
Sports team - shows the score of a current game ‘real madrid barcelona’
Insubject - Find group messages with specific content, like ‘insubject:"website crawlers" ’
Group - Finds group messages from specific source, example ‘group:"google dorks" ’
Numrange - Finds range of numbers in a query upto 5 digits
Daterange - Searches in range of dates, with use of julian dates, example ‘daterange:2452463.5 2452464’
Msgid - Message Identification Line used in email and Usenet newsgroups.
In this article you can read more about google “secret” queries .
https://www.ma-no.org/en/security/google...-of-google.
Some examples of these
This query would search text files in sites which have domain .org and in the text file it searches for strings “password OR passwords OR contraseñas OR login OR contraseña”.
filetype:txt site:web.com password|passwords|contraseñas|login|contraseña
This query shows registers of conversations that remained on servers.
“Index of” / “chat/logs”
This searches for backup directories.
intitle:"index of" inurl:/backup
This searches mp3 files on various types of servers
intitle:index.of mp3
This shows spilled data from MySQL databases where you are searching for pass|password|passwd|pwd.
filetype:sql “MySQL dump” (pass|password|passwd|pwd)
We can use some of these techniques to localize cameras of the manufacturer AXIS.
Inurl:axis-cgi
Inurl:"lvappl.htm"
We can obtain some feed of the IP cameras, some of them we can even control.
inurl:”ViewerFrame?Mode=”
If you’re into webcams, here is good source of query strings. Its a bit creepy if you ever wondered if somebody could be watching some(yours) feed?
http://suryachandiran.blogspot.com/2015/05/google-hacking-to-hack-into-live.html
inurl:top.htm inurl:currenttime
inurl:”lvappl.htm”
This can show enjoyable reading among government sited files of type PDF.
site:gov filetype:pdf allintitle:restricted
This query searches documents with sensitive character, but in the intranet of the sites.
inurl:intranet filetype:doc confidential
This is supposed to find the .LOG files accidentally exposed on the internet.
allintext:password filetype:log after:2020
This searches for string “username” in a log type files
allintext:username filetype:log
This will expose .env files - used by various popular web development frameworks to declare general variables and configurations for local as well as dev environment.
DB_USERNAME filetype:env
DB_PASSWORD filetype:enc=v
The file robots.txt is for preventing crawlers and spiders or any other search engine to enter into your website and you can block indexing specific pages or directories with it. Anyhow, by typing a query like this, you can look into different robots.txt files to see what you are not able to access.
“robots.txt” “disallow:” filetype:txt
These queries help you browse open FTP servers
intitle:"index of" inurl:ftp
intitle:"index of" inurl:http after:2020
Search for specific website under defined domain
inurl:.es/index.php?id=
SSH private keys
intitle:index.of id_rsa -id_rsa.pub
Putty logs
filetype:log username putty
Email lists
filetype:xls inurl:"email.xls"
