Google Dorks: Ke ʻimi nei i kā lākou ʻano a pehea e hoʻohana ai iā lākou [Cheatsheet]

I loko o ka honua nui o ka huli pūnaewele, aia nā ala ʻoi aʻe e ʻimi ai i ka ʻike kikoʻī ma mua o ke komo ʻana i nā huaʻōlelo i loko o kahi ʻenekini huli. ʻO kekahi o kēia mau ʻenehana hulina ʻoi aku ka maʻalahi i lilo i mea kaulana ma ke kahua o ka palekana kamepiula a me ka noiʻi ʻike ʻike, ʻo Google Dorks.

Ke kamaʻilio nei mākou e pili ana i ke ʻano o nā kauoha a me nā ʻenehana e hiki ai i nā mea hoʻohana ke ʻimi i ka ʻike huna a me ka ʻike ʻoi aku ka pololei a me ka maikaʻi.

Ma kēia ʻatikala, e ʻimi mākou i nā ʻano like ʻole hiki i nā mea hoʻohana ke hoʻonui i kā lākou mau mākau huli ma ka pūnaewele; ʻike i ka ʻikepili waiwai me ka hilinaʻi ʻole i nā ʻimi maʻamau. Heluhelu a hiki i ka hopena a lilo i loea i ka ʻimi ʻana i ka ʻike ma ka Pūnaewele.

E hoʻomaka mākou ma ka wehewehe ʻana iā ʻoe i ke ʻano o Dork i ka ʻepekema kamepiula

ʻAʻole ia he mea ʻē aʻe ma mua o kahi kaula hulina kūikawā i hoʻohana ʻia e ʻimi i ka ʻike kikoʻī ma o nā ʻenekini huli, e like me Google. ʻO kēia mau kaula hulina, i ʻike ʻia ʻo "Google dorks" a i ʻole "dorks" wale nō, e ʻae i nā mea hoʻohana e hana i nā ʻimi ʻoi aʻe a pololei. e ʻike i ka ʻike huna a i ʻole ka ʻike maʻalahi i hiki ʻole ke loaʻa ma o ka huli maʻamau.

Hana ʻia ʻo Dorks i nā huaʻōlelo kikoʻī a me nā mea hoʻohana i hoʻokomo ʻia i loko o kahi ʻenekini huli e kānana i nā hopena no ka ʻike kikoʻī. No ka laʻana, hiki ke hoʻolālā ʻia kahi dork e ʻimi i nā papa kuhikuhi i hōʻike ʻia, nā ʻōlelo huna, nā faila koʻikoʻi, a i ʻole nā ​​​​pūnaewele i hiki ke hoʻouka ʻia. Hoʻohana nui ʻia ʻo Dorks e nā loea palekana, nā mea noiʻi, a me nā hacker etika e ʻimi a loiloi i nā mea nāwaliwali i nā ʻōnaehana a me nā noi.

He aha nā ʻano o Google Dorks a pehea e hoʻohana ʻia ai?

He mea hana ikaika ʻo Google Dorks. Hāʻawi kēia mau kauoha hulina holomua i nā mea hoʻohana e hana i nā ʻimi kikoʻī hou aʻe a ʻike i ka ʻike i hiki ʻole ke loaʻa ma ke ʻano maʻamau. Eia ka mea nui loa:

Kumu Google Dorks

ka ʻO Google Dorks kumu ka maʻalahi a me ka hoʻohana maʻamau i nā kauoha huli. Ke nānā nei kēia mau dorks i ka ʻimi ʻana i nā huaʻōlelo kikoʻī ma nā ʻaoʻao pūnaewele a hiki ke hoʻohana no ka ʻimi ʻana i ka ʻike kikoʻī. ʻO kekahi mau laʻana o Google Dorks maʻamau:

• inoa: Hāʻawi iā ʻoe e ʻimi i nā huaʻōlelo ma ke poʻo inoa o kahi ʻaoʻao pūnaewele. No ka laʻana, "intitle: hackers" e hōʻike i nā ʻaoʻao āpau i loaʻa ka huaʻōlelo "hackers" ma ko lākou poʻo inoa.
• inurl: Ke nānā nei kēia dork i nā huaʻōlelo ma nā URL o nā ʻaoʻao pūnaewele. No ka laʻana, "inurl:admin" e hōʻike i nā ʻaoʻao āpau i loaʻa ka huaʻōlelo "admin" ma kā lākou URL.
• ʻAno waihona: E ʻimi i nā faila ma muli o ko lākou ʻano. No ka laʻana, "filetype:pdf" e hōʻike i nā faila PDF āpau e pili ana i ka huaʻōlelo i kuhikuhi ʻia.

dorks holomua

ʻO Google Dorks kiʻekiʻe ma mua o nā hulina kumu a ʻae i ka ʻimi hohonu ʻana o ka pūnaewele. Hoʻolālā ʻia kēia mau dorks e ʻimi i ka ʻike koʻikoʻi a kikoʻī paha.. ʻO kekahi mau hiʻohiʻona o Google Dorks holomua:

• paena: Hāʻawi kēia dork iā ʻoe e ʻimi i ka ʻike kikoʻī ma kahi pūnaewele. No ka laʻana, "site:example.com password" e hoʻihoʻi i nā ʻaoʻao āpau ma example.com i loaʻa ka huaʻōlelo "password".
• aloha: Hōʻike kēia dork i ka mana huna o kahi ʻaoʻao pūnaewele. He mea pono ia inā makemake ʻoe e komo i kahi ʻaoʻao i wehe ʻia a ʻaʻole i loaʻa i kēia manawa.
• Link: Hōʻike kēia dork i nā ʻaoʻao e pili ana i kahi URL kikoʻī. Hiki ke kōkua no ka ʻimi ʻana i nā pūnaewele pili a i ʻole ka ʻike ʻana i nā backlink.

Dorks no ka palekana kamepiula

Hoʻohana nui ʻia ʻo Google Dorks ma ke kahua o ka palekana kamepiula e ʻimi ai i nā nāwaliwali, nā hōʻike, a me nā ʻikepili koʻikoʻi. ʻO kekahi mau hiʻohiʻona o Google Dorks i hoʻohana ʻia i ka palekana kamepiula:

• Hua huna: Ke nānā nei kēia dork i nā ʻaoʻao pūnaewele i loaʻa nā faila ʻōlelo huna a i ʻole nā ​​papa kuhikuhi pilikia.
• shōdan: Hoʻohana ʻia e ʻimi i nā mea pili pūnaewele ma o ka ʻenekini huli Shodan. No ka laʻana, "shodan:webcam" e hōʻike i nā pahupaʻikiʻi pūnaewele hiki ke ʻike ʻia.
• “Index of”: Huli i nā papa kuhikuhi waihona ma nā kikowaena pūnaewele, hiki ke hōʻike i nā faila koʻikoʻi a pilikino paha.

Dorks no ka noiʻi ʻike

ʻO Google Dorks kekahi mau mea hana waiwai no ka noiʻi ʻike a me ka hōʻiliʻili ʻikepili. ʻO kekahi mau laʻana o Google Dorks i hoʻohana ʻia i ka noiʻi ʻike:

• "intext:": Hāʻawi kēia dork iā ʻoe e ʻimi i kahi huaʻōlelo a ʻōlelo paha i loko o ka ʻike o kahi ʻaoʻao pūnaewele. No ka laʻana, "intext:OpenAI" e hōʻike i nā ʻaoʻao āpau i loaʻa ka huaʻōlelo "OpenAI" i kā lākou ʻike.

• “ʻino:” E ʻimi i nā huaʻōlelo kikoʻī ma nā loulou ʻaoʻao pūnaewele. Hiki ke hoʻohana ʻia no ka ʻimi ʻana i nā pūnaewele e pili ana i kahi kumuhana a huaʻōlelo paha.
• pili:: Hōʻike i nā pūnaewele pili i kahi URL kikoʻī a i ʻole kikowaena. Hiki iā ia ke kōkua i ka ʻike ʻana i nā pūnaewele i like a pili paha i kekahi kumuhana.

ʻO Dorks e ʻimi i nā nāwaliwali

Hoʻohana pū ʻia ʻo Google Dorks e ʻimi i nā nāwaliwali i nā pūnaewele a me nā polokalamu. Hoʻolālā ʻia kēia mau dorks no ka ʻimi ʻana i nā pūnaewele i hiki ke maʻalahi i ka hoʻouka ʻana a i ʻole nā ​​​​leaks ʻike. ʻO kekahi mau hiʻohiʻona o Google Dorks i hoʻohana ʻia i ka ʻimi ʻana i nā nāwaliwali:

• SQL Injection: Ke nānā nei kēia dork i nā pūnaewele i hiki ke pilikia i ka hoʻouka kaua SQL.
• “XSS”: Ke nānā nei kēia i nā pūnaewele i pilikia paha i ka hoʻouka ʻana i nā hōʻailona cross-site (XSS).
• Hoʻouka Kōnae: E ʻimi ana i nā pūnaewele e ʻae i ka hoʻouka ʻana i nā faila, hiki ke lilo i mea nāwaliwali inā ʻaʻole hoʻokō pono.

ʻO kekahi mau nīnau i nīnau pinepine ʻia a me kā lākou pane e pili ana iā Google Dorks

Ke makemake nei mākou ʻaʻole ʻoe e kānalua e pili ana i kēia mau mea hana, eia mākou e waiho iā ʻoe i nā pane maikaʻi loa i kāu mau kānalua:

He kānāwai anei ka hoʻohana ʻana iā Google Dorks?

He kānāwai ka hoʻohana ʻana iā Google Dorks ponoʻī. Eia nō naʻe, he mea nui e hoʻohana iā lākou me ka etika a me ke kuleana. ʻO ka hoʻohana ʻana i nā dorks no nā hana kīnā ʻole, e like me ke komo ʻana i nā ʻōnaehana ʻae ʻole, uhaki i ka pilikino, a i ʻole hana hoʻopunipuni, ʻaʻole ʻae ʻia.

He aha nā pilikia o ka hoʻohana ʻana iā Google Dorks?

Hiki i ka hoʻohana pono ʻole a i ʻole ke kuleana o Google Dorks ke loaʻa nā hopena maikaʻi ʻole, e like me ka uhaki ʻana i ka pilikino o nā poʻe ʻē aʻe, ke kiʻi ʻana i ka ʻike koʻikoʻi me ka ʻole o ka ʻae ʻia, a i ʻole ke komo ʻana i nā hana hewa. He mea koʻikoʻi ka hoʻomaopopo ʻana i nā palena kūpono a me ke kānāwai i ka wā e hoʻohana ai i kēia mau mea hana.

He aha nā hoʻohana pono o Google Dorks?

ʻO ka hoʻohana pono ʻana o Google Dorks e pili ana i ka ʻike ʻana a me ka hoʻoponopono ʻana i nā nāwaliwali o nā ʻōnaehana a me nā noi, ka loiloi ʻana i ka palekana o kahi pūnaewele, a me ka ʻimi ʻana i ka ʻike i hōʻike ʻia e haʻi aku i nā mea nona a kōkua i ka pale ʻana i ka pilikino a me ka palekana.

Pehea wau e aʻo ai e hoʻohana pono iā Google Dorks?

Hiki iā ʻoe ke aʻo e hoʻohana pono iā Google Dorks ma o ka noiʻi, heluhelu ʻana i nā palapala, ke komo ʻana i nā kaiāulu palekana kamepiula a me nā ʻaha kūkā, a me ka hoʻomaʻamaʻa. Aia nā kumuwaiwai pūnaewele, nā kumu aʻo, a me nā papa e hiki ke kōkua iā ʻoe e hoʻomaikaʻi i kou mau mākaukau ma ka hoʻohana ʻana iā Google Dorks.

ʻAno Google Dork	Hoʻohālike Google Dork
huli kumu	inoa: "hua'ōlelo"
	inurl: "hua'ōlelo"
	filetype: "ʻano waihona"
	kahua: “domain.com”
	huna huna:”URL”
	loulou:”URL”
Pūnaehana palekana	intext: "SQL hewa"
	intext: “leaked password”
	intext: "nā hoʻonohonoho palekana"
	inurl: “admin.php”
	intitle: "pane hoʻomalu"
	kahua: “domain.com” ext:sql
ʻIke huna	intext: "ʻike huna"
	intitle: "faila ʻōlelo huna"
	filetype:docx "confidential"
	inurl: “file.pdf” kikokikona:”helu palekana kaiapili”
	inurl: "backup" ext:sql
	intitle: “papa kuhikuhi kuhikuhi”
ʻimi pūnaewele	kahua:domain.com "komo"
	kahua:domain.com “index of”
	kahua:domain.com intitle: "faila ʻōlelo huna"
	kahua:domain.com ext:php intext: “SQL hewa”
	kahua:domain.com inurl:”admin”
	kahua:domain.com filetype:pdf
'ē aʻe	allinurl: "hua'ōlelo"
	allintext: "hua'ōlelo"
	pili:domain.com
	ʻike: domain.com
	wehewehe: "ʻōlelo"
	puke kelepona: “inoa hoʻokaʻaʻike”

Aia kekahi mau mea ʻē aʻe i kēia mea hana no nā hulina holomua?

ʻAe, aia kekahi mau mea hana a me nā ʻenehana no ka hana ʻana i nā ʻimi holomua, e like me Bing dorks, Yandex dorks a i ʻole Shodan (no ka ʻimi ʻana i nā mea pili pūnaewele). Loaʻa i kēlā me kēia me kona mau hiʻohiʻona a me nā ala.

Pehea e hiki ai iaʻu ke pale aku i kaʻu pūnaewele a i ʻole kaʻu polokalamu mai ka loaʻa ʻana e Google Dorks?

No ka pale ʻana i kāu pūnaewele a i ʻole kāu polokalamu mai ka loaʻa ʻana e Google Dorks, he mea nui e hoʻokō i nā hana palekana maikaʻi, e like me ka mālama ʻana i nā papa kuhikuhi koʻikoʻi a me nā faila, mālama pono i nā polokalamu, hoʻohana i nā hoʻonohonoho palekana maikaʻi, a me ka hana ʻana i nā hoʻokolohua komo e hoʻomaopopo i nā mea nāwaliwali.

He aha nā hana palekana e pono ai iaʻu ke hana inā ʻike wau ua pilikia kaʻu pūnaewele ma o Google Dorks?

Inā ʻike ʻoe he palupalu kāu pūnaewele ma o Google Dorks, he mea nui e hana koke i ka hana e hoʻoponopono i nā nāwaliwali. Hiki i kēia ke hoʻopili i ka ʻōnaehana, hoʻoponopono i nā hewa hoʻonohonoho, kaohi ʻana i ka ʻae ʻole ʻia, a me ka hoʻomaikaʻi ʻana i ka palekana holoʻokoʻa o ka pūnaewele.

Hiki iā lākou ke hoʻohana i nā ʻenekini huli ʻē aʻe ma waho o Google?

ʻOiai ʻo Google Dorks he mau kauoha i hoʻolālā ʻia e hoʻohana ʻia ma ka ʻenekini huli Google, hiki ke hoʻohana ʻia kekahi o nā mea hana a me nā ʻenehana i nā ʻenekini huli ʻē aʻe. Eia naʻe, he mea nui e nānā i nā ʻokoʻa o ka syntax a me nā hopena ma waena o nā ʻenekini huli.

Pehea e hiki ai iaʻu ke hoʻohana iā Google Dorks e ʻimi i nā nāwaliwali i nā pūnaewele?

Hiki iā ʻoe ke hoʻohana iā Google Dorks e ʻimi i nā nāwaliwali ma nā pūnaewele ma ka ʻike ʻana i nā kumu kikoʻī i nā URL, ka ʻimi ʻana i nā papa kuhikuhi i hōʻike ʻia, ka ʻimi ʻana i nā faila koʻikoʻi, a i ʻole ka ʻimi ʻana i nā memo hewa e hōʻike i ka ʻike pili. He mea nui ia e hana me ka pono a me ka mahalo i ka pilikino o kekahi.

Aia nā kaiaulu pūnaewele a i ʻole nā ​​ʻaha kūkā kahi e kūkākūkā ʻia ai a kaʻana like ʻana o Google Dorks?

ʻAe, aia nā kaiāulu pūnaewele a me nā ʻaha kūkā kahi e kaʻana like ai nā ʻoihana palekana ʻike a me nā mea hoihoi i ka ʻike, nā ʻenehana, a kūkākūkā i ka hoʻohana ʻana iā Google Dorks. Hiki ke hoʻohana ʻia kēia mau wahi no ke aʻo ʻana, kaʻana like ʻana i ka ʻike a me ka mālama ʻana i nā ʻano hou o ka hoʻohana ʻana i nā dorks.

ʻO kekahi mau ʻaha kūkā a me nā kaiāulu pūnaewele kahi e kūkākūkā ʻia ai ka ʻike e pili ana i ka hoʻohana ʻana iā Google Dorks a me ka palekana kamepiula:

1. Exploit Database Community: He kaiāulu pūnaewele i hoʻolaʻa ʻia i ka palekana kamepiula a me ka hāʻawi ʻana i ka ʻike e pili ana i nā nāwaliwali a me nā hana. (https://www.exploit-db.com/)
2. Reddit - r/NetSec: He subreddit i hoʻolaʻa ʻia no ka palekana kamepiula, kahi e kaʻana like ai ka poʻe loea a me ka poʻe hoihoi i nā nūhou e pili ana i ka palekana, nā kūkākūkā, a me nā ʻenehana. (https://www.reddit.com/r/netsec/)
3. Kaiāulu HackerOne: He kaiāulu o nā mea hoʻomake kūpono a me nā ʻoihana palekana ma ka pūnaewele, kahi e kūkākūkā ʻia ai nā nāwaliwali, nā ʻenehana palekana, a me nā ʻike. (https://www.hackerone.com/community)
4. ʻO ka Ethical Hacker Network: He kaiāulu pūnaewele no ka poʻe ʻoihana palekana ʻike a me nā mea hoʻoheheʻe etika, kahi e kaʻana like ʻia ai nā kumuwaiwai, kūkākūkā ʻia nā ʻenehana, a hana pū ʻia. (https://www.ethicalhacker.net/)
5. SecurityTrails Community Forum: He hui palekana pūnaewele kahi e kūkākūkā ai nā ʻoihana palekana a me nā mea hoihoi i nā kumuhana pili i ka palekana kamepiula, me ka hoʻohana ʻana iā Google Dorks. (https://community.securitytrails.com/)

ʻAno Google Dork	Hoʻohālike Google Dork
huli kumu	inoa: "hua'ōlelo"
	inurl: "hua'ōlelo"
	filetype: "ʻano waihona"
	kahua: “domain.com”
	huna huna:”URL”
	loulou:”URL”
Pūnaehana palekana	intext: "SQL hewa"
	intext: “leaked password”
	intext: "nā hoʻonohonoho palekana"
	inurl: “admin.php”
	intitle: "pane hoʻomalu"
	kahua: “domain.com” ext:sql
ʻIke huna	intext: "ʻike huna"
	intitle: "faila ʻōlelo huna"
	filetype:docx "confidential"
	inurl: “file.pdf” kikokikona:”helu palekana kaiapili”
	inurl: "backup" ext:sql
	intitle: “papa kuhikuhi kuhikuhi”
ʻimi pūnaewele	kahua:domain.com "komo"
	kahua:domain.com “index of”
	kahua:domain.com intitle: "faila ʻōlelo huna"
	kahua:domain.com ext:php intext: “SQL hewa”
	kahua:domain.com inurl:”admin”
	kahua:domain.com filetype:pdf
'ē aʻe	allinurl: "hua'ōlelo"
	allintext: "hua'ōlelo"
	pili:domain.com
	ʻike: domain.com
	wehewehe: "ʻōlelo"
	puke kelepona: “inoa hoʻokaʻaʻike”