Muhammad Daffa Blog

Disclaimer: My post is for academic purposes only, How to use this information is the visitor’s responsibility.

This week, I have learned how to use search engines as tools to improve my pentesting skill and using google is one such way to find vulnerability on a target.

One way to utilize search engines is called google hacking or Dorking. Google Dorking is an information-gathering technique used by an attacker leveraging advanced Google searching techniques. Google hacking search queries can be used to identify security vulnerabilities in web applications, gather information for arbitrary or individual targets, discover error messages disclosing sensitive information, discover files containing credentials, and other sensitive data.

For example, Google Dorking, google dorking can search query that will list SQL files that have been indexed by google or websites.