Google Hacking Quick Reference

Basic Operators
• AND
◦ Returns results with both words
◦ Try the following search: three AND stooges
• OR
◦ Returns results with either word
◦ Try the following search: three OR stooges
• The Plus Operator (+)
◦ Forces inclusion of a common word
◦ Common words not used in searches include a, about, an, and, are, as, at, be, by, from, how, i,
in, is, it, of, on, or, that, the, this, to, we, what, when, where, which, with
◦ Try the following search: +the three stooges
• The Minus Operator (-)
◦ Excludes results containing a term
◦ Try the following search: three -stooges
▪ Searches for pages containing the term three
▪ Excludes pages containing stooges
• The Star Wildcard (*)
• Single-word wildcard
• Does not support stemming (Meteor * won't return results on Meteorology)
• The Dot Wildcard (.)
• Single-character wildcard
a) intitle:Test.Page.for.Apache
• The Quote Operator (“”)
◦ Used to search for phrases
◦ Order matters
◦ Try the following searches and note the differing results:
▪ ice cream
▪ cream ice
▪ “ice cream”
▪ “cream ice”

Advanced Operators
1. Syntax
a) Operator:SearchTerm
b) Ex. cache:“Microsoft XP”
2. Operators
a) cache:search_term
1. Searches the pages cached by Google for search_term
2. Ex. cache:“apache”
3. If disable images through browser - very stealthy. You never actually touch target server.
(Just Google servers)
b) intext:search_term
1. Searches for search_term in text of document
2. Use allintext: to search for multiple terms
3. Ex. intext:compiler
 4. Ex2: allintext:compiler assembler linker
c) intitle:search_term
1. Searches html title of documents (<title>search this text</title>) for search_term
2. Use allintitle to search multiple terms
d) inurl:search_term
1. Searches the url (http://...) of documents
2. Use allinurl to search multiple search terms
e) link:URL
1. Returns list of sites linked to URL
2. Ex. link:www.af.mil returns pages that link to www.af.mil
f) related:URL
1. Lists pages similar to URL
2. Same functionality as the “Similar Pages” link on the main results page
g) filetype:extension
1. Returns documents with the specified extension
2. Ex. filetype:txt
3. Ex2. filetype:doc
4. Question: Which file type is most prevalent on the web?
h) site:URL
1. Searches and returns results only from the specified URL
2. Ex. site:www.ubuntu.com “server edition”

Sample Searches

Find a Web Server

• intitle:Test.Page.for.Apache It.worked! this.web.site! //Apache 1.3.X
• intitle:welcome.to.IIS.4.0 //IIS 4
• allintitle:Welcome to Windows XP Server Internet Services //IIS 6

Find Web Server Directory Listings

• intitle:index.of “parent directory”
• intitle:index.of server.at
• intitle:index.of “Apache/1.3.3 Server at”

Find Manuals and Sample Apps

• inurl:manual apache directives modules //Apache Manual
• allinurl:iishelp core //IIS Manual
• inurl:iissamples //IIS Samples

Find Sensitive Information

• inurl:admin inurl:userlist
• intitle:index.of.etc
• inurl:admin
• filetype:log inurl:password.log
• inurl:ws_ftp.log