PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Recon series #5: A hacker’s guide to Google dorking

yeswehack.com | blog | #bug-bounty | #osint | #recon | #google-dorking | #passive-recon | #search-operators
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Beginner-friendly guide to Google dorking: core operators such as site:, inurl: and filetype:, plus hands-on queries for subdomain discovery, hidden files, login portals and exposed credentials.
Published
Collected

Related coverage

blog · yeswehack.com
Recon Series #6: Excavating hidden artifacts with Wayback Machine and other web-archive tools
Recon series #6 explains archive-based reconnaissance with Wayback Machine, CommonCrawl, Archive.today and URLScan to recover deprecated endpoints, embedded secrets and forgotten admin panels.
blog · netlas.io
Google Dorking in Cybersecurity: Techniques for OSINT & Pentesting
Introduces Google dorking for OSINT and pentesting: the most valuable search operators for exposing files and pages, practical examples, automation approaches, and alternative search tools.
blog · netspi.com
NetblockTool: The Easy Way to Find IP Addresses Owned by a Company
NetblockTool is a Python tool that automates netblock discovery, scraping Google dorks, ARIN, and IPinfo to build a confidence-ranked list of IP ranges owned by a company and its subsidiaries.
blog · netspi.com
Analyzing DNS TXT Records to Fingerprint Online Service Providers
Analyzes leftover domain-validation TXT records across a million domains to fingerprint the online service providers a company uses, releasing a PowerShell script to automate the reconnaissance.
blog · netspi.com
Anonymously Enumerating Azure Services
Karl Fosaaen releases a script for anonymous Azure service enumeration, brute forcing DNS across azurewebsites.net, cloudapp.net, and blob.core.windows.net to map a target's public Azure footprint.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
Back