Google Fu

Operators.md

Google Search Operators Reference

Operator	Description
link:url	Shows other pages that link to that URL.
related:url	Finds pages that are related to the specified URL.
site:domain	Restricts search results to the specific domain.
define:word	Provides a definition of the word.
allinurl:terms	Shows only pages with all specified terms in the URL.
inurl:term	Shows pages where the next term appears in the URL.
allintitle:terms	Shows only results with all specified terms in the page title.
intitle:term	Shows results where the next term is in the title, and the rest can be anywhere.
cache:url	Displays the Google cached version of the page.
info:url	Shows a page with related searches, backlinks, and pages containing the URL.
spell:term	Force spell checks the query.
stocks:ticker	Looks up stock information for the query.
filetype:ext	Restricts search to a specific file format (e.g., -filetype:doc excludes Word docs).
daterange:julian	Searches within a date range using Julian date format (e.g., 2452384).
maps:address	Triggers map links for the provided address.
phone:number	Attempts to find a name and address associated with a phone number.
allintext:terms	Searches only within the body text, excluding links and titles.
allinlinks:terms	Searches only within the link anchors, excluding body text and titles.

Queries.md

Google Dorks for Bug Bounty & OSINT

⚠️ Use these only for legal security research, bug bounty programs, or OSINT.

---

1. Exposed Environment Files (.env)

filetype:env "DB_PASSWORD"
filetype:env "AWS_SECRET_ACCESS_KEY"
filetype:env "SECRET_KEY"
filetype:env "MAIL_PASSWORD"
filetype:env "DATABASE_URL"

---

2. Exposed Configuration Files

filetype:conf password
filetype:ini password
filetype:yaml password
filetype:json "api_key"
filetype:xml password

---

3. Backup Files

filetype:sql "dump"
filetype:bak
filetype:backup
filetype:zip backup
filetype:tar.gz backup

---

4. Log Files Containing Secrets

filetype:log password
filetype:log "AWS"
filetype:log "stack trace"
filetype:log "database error"
filetype:log "exception"

---

5. Exposed Git Repositories

intitle:"index of" ".git"
inurl:"/.git/config"
inurl:".git" "index of"
site:example.com ".git"
intitle:"index of" ".gitignore"

---

6. Open Directory Listings

intitle:"index of"
intitle:"index of" password
intitle:"index of" backup
intitle:"index of" database
intitle:"index of" config

---

7. Admin Panels

inurl:admin login
inurl:adminpanel
inurl:dashboard login
intitle:"admin login"
intitle:"dashboard" login

---

8. Jenkins Servers

intitle:"Dashboard [Jenkins]"
inurl:8080 "Jenkins"
intitle:"Jenkins"
inurl:jenkins login
intitle:"Jenkins Dashboard"

---

9. Kubernetes / DevOps Panels

intitle:"Kubernetes Dashboard"
intitle:"Grafana"
intitle:"Kibana"
intitle:"Prometheus Time Series Collection"
inurl:/api/v1/namespaces/kube-system

---

10. AWS S3 Buckets

site:s3.amazonaws.com "confidential"
site:s3.amazonaws.com "backup"
site:s3.amazonaws.com "company"
site:amazonaws.com "index of"
"s3.amazonaws.com" "example"

---

Bonus: Targeted Dorks for a Specific Domain

Replace example.com with the target.

site:example.com filetype:pdf
site:example.com filetype:log
site:example.com filetype:sql
site:example.com "password"
site:example.com inurl:admin

---