Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There was a very recent "bug" in Search where the site: operator stopped working for a little bit and everybody in the OSINT community had a bit of a meltdown - https://www.digitaldigging.org/p/search-alert-google-filetyp...

The date operators from: to: I think have been unsupported for a while and replaced with a dropdown in the UI

filetype: is a fave and has been working for as long as I can remember

AROUND(number) is pretty useful too although I find that might be a bit buggy sometimes

There is a good list here https://www.exploit-db.com/google-hacking-database showing how dorks can be used for pentesting and/or generally finding insecure stuff



Thanks, had no idea there were that many specific operators and combinations of operators.

At least in the last year, looks like "inurl", "intitle", and "intext" have all been getting a lot of use.

Also, a lot of "index of". "db.py", "store", "secret", "ec2 -aws", "mysql inurl:./db/", ect... in combination. Must be a lot of low hanging fruit in the orchard.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: