in

Google Hacking Operators

Last post 07-17-2007 11:51 AM by halon73. 0 replies.
Page 1 of 1 (1 items)
Sort Posts: Previous Next
  • 07-17-2007 11:51 AM

    • halon73
    • Top 25 Contributor
    • Joined on 02-16-2007
    • Broomfield, CO
    • Posts 4
    • Points 65

    Google Hacking Operators

    Well it's been a while since I have posted anything to this forum.  I've been working and working and that is no exscuss but a buddy of mine sent this to me and I wanted to get it out to the group.  Feel free to ammend as you like!   
     
     

     Operator

    Operator Description

    cache:

    If you include other words in the query, Google will highlight those words within the cached document. For instance, [cache:www.google.com web] will show the cached content with the word "web" highlighted.  This functionality is also accessible by clicking on the "Cached" link on Google's main results page.  The query [cache:] will show the version of the web page that Google has in its cache. For instance, [cache:www.google.com] will show Google's cache of the Google homepage. Note there can be no space between the "cache:" and the web page url.

    link:

    The query [link:] will list webpages that have links to the specified webpage. For instance, [link:www.google.com] will list webpages that have links pointing to the Google homepage. Note there can be no space between the "link:" and the web page url.  This functionality is also accessible from the Advanced Search page, under Page Specific Search > Links.

    related:

    The query [related:] will list web pages that are "similar" to a specified web page. For instance, [related:www.google.com] will list web pages that are similar to the Google homepage. Note there can be no space between the "related:" and the web page url.  This functionality is also accessible by clicking on the "Similar Pages" link on Google's main results page, and from the Advanced Search page, under Page Specific Search > Similar.

    info:

    The query [info:] will present some information that Google has about that web page. For instance, [info:www.google.com] will show information about the Google homepage. Note there can be no space between the "info:" and the web page url.   This functionality is also accessible by typing the web page url directly into a Google search box.

    define:

    The query [define:] will provide a definition of the words you enter after it, gathered from various online sources. The definition will be for the entire phrase entered (i.e., it will include all the words in the exact order you typed them).

    stocks:

    If you begin a query with the [stocks:] operator, Google will treat the rest of the query terms as stock ticker symbols, and will link to a page showing stock information for those symbols. For instance, [stocks: intc yhoo] will show information about Intel and Yahoo. (Note you must type the ticker symbols, not the company name.) This functionality is also available if you search just on the stock symbols (e.g. [ intc yhoo ]) and then click on the "Show stock quotes" link on the results page.

    NOTE

    Pay attention to preferences before you start, remove “safesearch” filtering to see true results  

    .

    Use a period between words instead of a blank space (same as using “Mr Hankey”

    +

    force the inclusion of the word that follows, same as AND function, no space (+and justice for +all). Google automatically drops common words such as and, or, all, etc

    -

    excludes a word from a search, same as NOT function, no space (bird feeders –crows)

    |

    Google to locate either one term or another, same as OR function (intext:username | userid | user)

    “”

    Use “ “ to search for exact string  (“mr. Hankey”), can also use mr.hankey Google is not case sensitive

    hl

    URL syntax - language which the results page will be printed (hl=en) English, stays in preferences unless you change it

    q

    URL syntax – query to be submitted (q=”I hack stuff”)

    lr

    URL syntax – language restrict, only displays pages written in this language

    as_qdr

    URL syntax – locates pages updated within specified time frame, m3 equals 3 months, y equals past year (as_qdr=m6)

    as_dt

    include or exclude searches from the domain specified by as_sitesearch  i equals include, e equals exclude (as_dt=i)

    as_sitesearch  

    include or exclude this domain per as_dt (as_sitesearch=cnn.com)

    intitle

    query will return pages that have the word “Google” in page title(HTML TITLE TAG), (intitle:Google, intitle:”index of” private, intitle:”index of” “backup files”) Note: only the first value after the colon is considered “intitle”, other values could be found anywhere in the pageIf you include [intitle:] in your query, Google will restrict the results to documents containing that word in the title. For instance, [intitle:google search] will return documents that mention the word "google" in their title, and mention the word "search" anywhere in the document (title or no). Note there can be no space between the "intitle:" and the following word. Putting [intitle:] in front of every word in your query is equivalent to putting [allintitle:] at the front of your query: [intitle:google intitle:search] is the same as [allintitle: google search].

    Allintitle

    Same as intitle above except all values must be included in the title (allintitle:”index of” “backup files” “trunk monkey”) – does not work very will with other commands

    Allintext

    same as allintitle except searches page text, same rules as above

    Inurl

    If you include [inurl:] in your query, Google will restrict the results to documents containing that word in the url. For instance, [inurl:google search] will return documents that mention the word "google" in their url, and mention the word "search" anywhere in the document (url or no). Note there can be no space between the "inurl:" and the following word. Putting "inurl:" in front of every word in your query is equivalent to putting "allinurl:" at the front of your query: [inurl:google inurl:search] is the same as [allinurl: google search].

    Allinurl

    same as allintitle but searches URL’sSite searches for pages on a specific server or domain. Note: Google reads server names from Right to Left (site:apple.com, site:store.apple.com) site:store.apple is wrong – no “.apple” domain exists – Google reads right to left  If you start a query with [allinurl:], Google will restrict the results to those with all of the query words in the url. For instance, [allinurl: google search] will return only documents that have both "google" and "search" in the url. Note that [allinurl:] works on words, not url components. In particular, it ignores punctuation. Thus, [allinurl: foo/bar] will restrict the results to page with the words "foo" and "bar" in the url, but won't require that they be separated by a slash within that url, that they be adjacent, or that they be in that particular word order. There is currently no way to enforce these constraints. This functionality is also available through Advanced Search page, under Advanced Web Search > Occurrences.

    Filetype

    searches for a specific file type such as PDF, doc, ppt, etc (filetype:xls)  try http://filext.com/ for ideas. Google converts everything to HTML or text for viewing.

    Link

    search for pages that link to other pages (link:www.cnn.com) lists all pages that link to www.cnn.com. Only searches URL’s available to browser or URL’s found in source code

    Inanchor

    searches text representation (html anchor) of a link (inanchor:click, inanchor:”current page” or inanchor:current.page)

    Cache

    searches cached pages only (cache:blackhat.org or cache:http://www.flxracing.com). This command cannot be used with other commandsNumrange used to find a number within a range, need to supply a minimum and max number. To find 12345 (numrange:12344-12346, can also try 12344..12346 (two periods) or ext:12344-12346)

    Daterange

    locates pages based on date of last index by google. Must use Julian dates (daterange:2452164-2452164 would be 9/11/01. Much easier to use as_qdr function. Try http://aa.usno.navy.mil/data/docs/JulianDate.html for conversion

    Info

    shows summary information for a site such as link to, similar to, sort of a general info search. (info:www.csc.com). Cannot be used with other operators

    Related

    lists sites that are related to a site, same as “similar pages” link. (related:www.securityfocus.com). Cannot be used with other operators

    Author

    search for the author of a newsgroup post using name or email address. (author:jonny.long, author:sam@walmart.com)

    Group

    search title of google groups posts for search terms, wildcard “*” works well. (group:*.forsale, or group:windows)

    Insubject

    same as intitle operator. (insubject:dragon is the same as intitle:dragon)

    Msgid

    searches google groups by message id in the format xxx@yyy.com. (msgid:123998hsdf8@4ax.com) Cannot be used with other operators

    Stocks

    search for stock market info about a particular company based on ticker symbol. (stocks:xom). Cannot be used with other operators

    Define

    returns definitions for a search term. (define:ironic). Cannot be used with other operators

    Phonebook

    searches for business and residential phone listings. Rphonebook = residential, bphonebook = business or Phonebook = both. Every word listed after the operator is included in the operator search (phonebook:George Bush dc)

    Go Anon

    View cached pages to stay anonymous, watch out as you may lose anonymity when it loads any image files such as .gif, etc as it may pull it directly from the original server directly to your machine.  

    Paul Zedeck | Security Engineer
    Information Security Consulting & Architecture
    http://www.linkedin.com/in/zedeck
    Filed under: , ,
    • Post Points: 25
Page 1 of 1 (1 items)
All Rights Reserved - The ISM-Community
Powered by Community Server (Commercial Edition), by Telligent Systems