Google Dorks: Ho hlahloba mefuta ea bona le mokhoa oa ho e sebelisa [Cheatsheet]

Lefats'eng le leholo la lipatlisiso tsa Marang-rang, ho na le mekhoa e tsoetseng pele ea ho batla tlhaiso-leseling e ikhethang e fetang feela ho kenya mantsoe a bohlokoa mochining oa ho batla. E 'ngoe ea mekhoa ena e tsoetseng pele ea ho batla e se e tumme tšimong ea ts'ireletso ea khomphutha le lipatlisiso tsa tlhahisoleseling, Google Dorks.

Re bua ka letoto la litaelo le mekhoa e lumellang basebelisi ho fumana boitsebiso bo patiloeng le bo bobebe ka nepo le ka katleho.

Sehloohong sena, re tla hlahloba mekhoa e fapaneng ea ho basebelisi ba ka holisa tsebo ea bona ea ho batla inthaneteng; fumana lintlha tsa bohlokoa ntle le ho itšetleha feela ka lipatlisiso tse tloaelehileng. Bala ho fihlela qetellong 'me u be setsebi sa ho fumana boitsebiso Inthaneteng.

Re tla qala ka ho u hlakisetsa hore na Dork ke eng ho Computer Science

Ha se letho haese khoele e khethehileng ea ho batla e sebelisetsoang ho fumana lintlha ka lienjineri tsa ho batla, joalo ka Google. Likhoele tsena tsa ho batla, tse tsejoang hape e le "Google dorks" kapa "dorks", li lumella basebelisi ho etsa lipatlisiso tse tsoetseng pele le tse nepahetseng. fumana lintlha tse patiloeng kapa tsa bohlokoa tse neng li ke ke tsa fumaneha habonolo ka lipatlisiso tse tloaelehileng.

Li-Dorks li entsoe ka mantsoe a bohlokoa le li-operators tse kentsoeng ka har'a enjine ea ho batla ho sefa liphetho bakeng sa tlhaiso-leseling e itseng. Ka mohlala, dork e ka 'na ea etselitsoe ho batla li-directory, li-password tse lutiloeng, lifaele tsa bohlokoa, kapa liwebsaete tse kotsing ea ho hlaseloa. Li-Dork li sebelisoa haholo ke litsebi tsa ts'ireletso, bafuputsi le linokoane tsa boitšoaro ho fumana le ho lekola bofokoli bo ka bang teng lits'ebetsong le lits'ebetsong.

Ke mefuta efe ea Google Dorks 'me e sebelisoa joang?

Google Dorks ke sesebelisoa se matla. Litaelo tsena tse tsoetseng pele tsa patlo li lumella basebelisi ho etsa lipatlisiso tse khethehileng le ho fumana lintlha tseo ka tloaelo li neng li ke ke tsa fumaneha ka tsela e tloaelehileng. Mona ea bohlokoa ka ho fetisisa:

Google Dorks ea mantlha

ea Basic Google Dorks ke litaelo tse bonolo le tse sebelisoang haholo ho batla. Li-dorks tsena li shebane le ho batla mantsoe a bohlokoa maqepheng a webo mme li ka thusa ho fumana lintlha tse ikhethang. Mehlala e meng ea Google Dorks ea mantlha ke:

• sehlooho: E u lumella ho batla mantsoe a sehlooho sehloohong sa leqephe la webo. Mohlala, "intitle:hackers" e tla hlahisa maqephe ohle a nang le lentsoe "hackers" lihloohong tsa bona.
• inurl: Dork ena e batla mantsoe a bohlokoa ho li-URL tsa maqephe a webo. Mohlala, "inurl:admin" e tla hlahisa maqephe ohle a nang le lentsoe "admin" ho URL ea bona.
• Mofuta oa faele: Batla lifaele tse ikhethileng ho latela mofuta oa tsona. Mohlala, "filetype:pdf" e tla bonts'a lifaele tsohle tsa PDF tse amanang le senotlolo se boletsoeng.

li-dorks tse tsoetseng pele

Google Dorks e tsoetseng pele e fetela ka nģ'ane ho lipatlisiso tsa motheo le ho lumella boithuto bo tebileng ba marang-rang. Li-dorks tsena li etselitsoe ho fumana lintlha tse tebileng kapa tse tobileng.. Mehlala e meng ea Google Dorks e tsoetseng pele ke:

• Site: Dork ena e u lumella ho batla tlhahisoleseling e itseng webosaeteng e itseng. Mohlala, "site:example.com password" e tla khutlisa maqephe ohle a ho example.com a nang le lentsoe "password".
• sekoahelong: Dork ena e bonts'a mofuta oa cache oa leqephe la webo. E na le thuso ha o batla ho fumana leqephe le tlositsoeng kapa le sa fumaneheng hajoale.
• Link: Dork ena e bontša maqephe a amanang le URL e itseng. E ka ba molemo ho fumana liwebsaete tse amanang kapa ho fumana li-backlink.

Dorks bakeng sa ts'ireletso ea k'homphieutha

Google Dorks e boetse e sebelisoa haholo lefapheng la ts'ireletso ea khomphutha ho batla bofokoli, ho pepeseha, le data ea bohlokoa. Mehlala e meng ea Google Dorks e sebelisitsoeng ts'ireletso ea komporo ke:

• Password: Dork ena e batla maqephe a tepo a nang le lifaele tsa password tse pepesitsoeng kapa li-directory tse tlokotsing.
• shōdan: E sebelisetsoa ho batla lisebelisoa tse amanang le Inthanete ka mochine oa ho batla oa Shodan. Mohlala, "shodan:webcam" e tla bonts'a lik'hamera tsa tepo tse fumanehang phatlalatsa.
• "Index ea": E batla li-directory tsa index ea lifaele ho li-server tsa marang-rang, tse ka pepesang lifaele tsa lekunutu kapa tsa lekunutu.

Dorks bakeng sa lipatlisiso tsa tlhahisoleseling

Google Dorks hape ke lisebelisoa tsa bohlokoa bakeng sa lipatlisiso tsa tlhahisoleseling le pokello ea lintlha. Mehlala e meng ea Google Dorks e sebelisitsoeng lipatlisisong tsa tlhahisoleseling ke:

• "mongolo:": Dork ena e u lumella ho batla lentsoe kapa poleloana e itseng ka har'a litaba tsa leqephe la webo. Mohlala, "intext:OpenAI" e tla hlahisa maqephe ohle a nang le lentsoe "OpenAI" ka har'a litaba tsa ona.

• "enanchor:" Sheba mantsoe a bohlokoa ho lihokelo tsa leqephe la webo. E ka ba molemo ho fumana liwebsaete tse amanang le sehlooho se itseng kapa lentsoe la sehlooho.
• amanang:: Bontša libaka tsa marang-rang tse amanang le URL kapa sebaka se itseng. E ka thusa ho fumana liwebsaete tse tšoanang kapa tse amanang le sehlooho se itseng.

Dorks ho batla bofokoli

Google Dorks e boetse e sebelisetsoa ho batla bofokoli ho liwebsaete le lits'ebetso. Li-dorks tsena li etselitsoe ho fumana liwebsaete tse ka hlaseloang habonolo kapa ho lutla ha tlhahisoleseling. Mehlala e meng ea Google Dorks e sebelisitsoeng ho batla bofokoli ke:

• Ente ea SQL: Dork ena e batla liwebsaete tse ka bang kotsing ea ho hlaseloa ke ente ea SQL.
• "XSS": Sena se sheba liwebsaete tse ka bang kotsing ea ho hlaseloa ke li-cross-site scripting (XSS).
• Faele Upload: E batla liwebsaete tse lumellang ho kenya lifaele, tse ka bang kotsi haeba li sa kengoa tšebetsong ka nepo.

Tse ling tsa Lipotso tse atisang ho botsoa le likarabo tsa tsona mabapi le Google Dorks

Kaha re batla hore u se ke ua ba le lipelaelo ka lisebelisoa tsena, mona re u siela likarabo tse molemohali lipelaelong tsa hau:

Na ho molaong ho sebelisa Google Dorks?

Tšebeliso ea Google Dorks ka boeona e molaong. Leha ho le joalo, ho bohlokoa ho li sebelisa ka mokhoa o nepahetseng le ka mokhoa o nang le boikarabelo. Ho sebelisa li-dorks bakeng sa mesebetsi e seng molaong, joalo ka phihlello e sa lumelloeng ea lits'ebetso, ho tlola lekunutu kapa ho etsa bosholu, ha ho molaong ebile ha ho lumelloe.

Likotsi tsa ho sebelisa Google Dorks ke life?

Tšebeliso e fosahetseng kapa e se nang boikarabelo ea Google Dorks e ka ba le liphello tse mpe, tse kang ho senya boinotši ba batho ba bang, ho fumana boitsebiso ba bohlokoa ntle le tumello, kapa ho etsa mesebetsi e seng molaong. Ho bohlokoa ho utloisisa meeli ea boitšoaro le ea molao ha u sebelisa lisebelisoa tsena.

Litšebeliso tsa boitšoaro tsa Google Dorks ke life?

Tšebeliso e nepahetseng ea Google Dorks e kenyelletsa ho tsebahatsa le ho lokisa bofokoli tsamaisong le lits'ebetsong, ho lekola ts'ireletso ea sebaka sa Marang-rang, le ho fumana lintlha tse pepeneneng ho tsebisa beng le ho thusa ho sireletsa lekunutu le ts'ireletso.

Nka ithuta ho sebelisa Google Dorks ka katleho joang?

U ka ithuta ho sebelisa Google Dorks ka katleho ka ho etsa lipatlisiso, ho bala litokomane, ho kenya letsoho lichabeng tsa ts'ireletso ea lik'homphieutha le liforamu, le ho itloaetsa. Ho na le lisebelisoa tsa marang-rang, lithupelo, le lithuto tse ka u thusang ho ntlafatsa tsebo ea hau ea ho sebelisa Google Dorks.

Mofuta oa Google Dork	Mohlala oa Google Dork
patlo ea motheo	sehlooho: "lentsoe la bohlokoa"
	inurl:"lentsoe la bohlokoa"
	filetype: "mofuta oa faele"
	sebaka: "domain.com"
	cache: "URL"
	link: "URL"
Tšireletso e nang le boitsebiso	mongolo: "SQL phoso"
	mongolo: "password leaked"
	mongolo: "litlhophiso tsa ts'ireletso"
	inurl: "admin.php"
	sehlooho: "control panel"
	sebaka: "domain.com" ext:sql
Litaba tsa lekunutu	mongolo:"boitsebiso ba lekunutu"
	sehlooho: "faele ea senotlolo"
	filetype: docx "sekunutu"
	inurl: "file.pdf" mongolo:"nomoro ea ts'ireletso ea sechaba"
	inurl: "bekapo" ext:sql
	sehlooho: "directory index"
ho hlahloba sebaka sa marang-rang	sebaka:domain.com "kena"
	sebaka:domain.com "index of"
	site:domain.com sehlooho se reng: "password file"
	site:domain.com ext:php intext:"Phoso ea SQL"
	sebaka:domain.com inurl: "admin"
	site:domain.com filetype:pdf
ba bang	allinurl:"lentsoe la bohlokoa"
	allintext:"lentsoe la bohlokoa"
	e amanang le:domain.com
	lintlha:domain.com
	hlalosa: "lentsoe"
	buka ea mohala: "lebitso la lebitso"

Na ho na le mekhoa e meng bakeng sa lipatlisiso tse tsoetseng pele bakeng sa sesebelisoa see?

E, ho na le lisebelisoa tse ling le mekhoa ea ho etsa lipatlisiso tse tsoetseng pele, tse kang Bing dorks, Yandex dorks kapa Shodan (bakeng sa ho batla lisebelisoa tse amanang le Inthanete). E 'ngoe le e' ngoe e na le litšobotsi le mekhoa ea eona e ikhethang.

Nka sireletsa sebaka sa ka sa marang-rang kapa sesebelisoa sa ka joang hore se se ke sa fumanoa ke Google Dorks?

Ho sireletsa sebaka sa hau sa marang-rang kapa sesebelisoa sa hau hore se se ke sa fumanoa ke Google Dorks, ho bohlokoa ho kenya ts'ebetsong mekhoa e metle ea ts'ireletso, joalo ka ho etsa bonnete ba hore li-directory le lifaele li sirelelitsoe, ho boloka software e le morao-rao, ho sebelisa litlhophiso tse ntle tsa ts'ireletso, le ho etsa liteko tsa ho kenella ho eona. tsebahatsa bofokoli bo ka bang teng.

Ke mehato efe ea tšireletso eo ke lokelang ho e nka haeba ke fumana hore sebaka sa ka sa marang-rang se kotsing ka Google Dorks?

Haeba u fumana hore sebaka sa hau sa marang-rang se kotsing ka Google Dorks, ho bohlokoa ho nka khato hanghang ho lokisa bofokoli boo. Sena se ka kenyelletsa ho patching sistimi, ho lokisa liphoso tsa tlhophiso, ho thibela phihlello e sa lumelloeng, le ho ntlafatsa ts'ireletso ka kakaretso ea sebaka.

A na li ka sebelisoa lienjineng tse ling tsa ho batla ntle le Google?

Le ha Google Dorks e le litaelo tse etselitsoeng ho sebelisoa mocheng oa ho batla oa Google, tse ling tsa basebelisi le mekhoa li ka sebelisoa le ho lienjineri tse ling tsa patlo. Leha ho le joalo, ho bohlokoa ho hlokomela phapang ea syntax le liphetho lipakeng tsa lienjineri tsa lipatlisiso.

Nka sebelisa Google Dorks joang ho batla bofokoli liwebsaeteng?

U ka sebelisa Google Dorks ho batla bofokoli liwebosaeteng ka ho tsebahatsa mekhoa e ikhethileng ho li-URL, ho batla li-directory tse pepesitsoeng, ho batla lifaele tse hlokolosi, kapa ho batla melaetsa ea liphoso e ka senolang tlhahisoleseling e tebileng. Ke habohlokoa ho etsa joalo ka mekhoa e metle le ho hlompha boinotši ba ba bang.

Na ho na le sechaba sa marang-rang kapa liforamo moo Google Dorks e buisanoang le ho arolelanoa?

E, ho na le sechaba sa marang-rang le liforamu moo litsebi tsa ts'ireletso ea tlhahisoleseling le batho ba chesehelang litaba ba arolelanang tlhahisoleseling, mekhoa le ho buisana ka tšebeliso ea Google Dorks. Libaka tsena li ka ba molemo bakeng sa ho ithuta, ho arolelana tsebo le ho tsamaisana le mekhoa ea morao-rao ea tšebeliso ea li-dorks.

Liforamo tse ling le sechaba sa marang-rang moo tsebo mabapi le ts'ebeliso ea Google Dorks le ts'ireletso ea likhomphutha li buisanoang le ho arolelanoa ke tsena:

1. Sebelisa Sechaba sa Database: Sechaba sa marang-rang se inehetseng ho ts'ireletso ea likhomphutha le ho arolelana tlhahisoleseling mabapi le bofokoli le liketso. (https://www.exploit-db.com/)
2. Reddit - r/NetSec: Subreddit e inehetseng ho ts'ireletso ea khomphutha, moo litsebi le ba chesehang ba arolelanang litaba tse amanang le ts'ireletso, lipuisano le mahlale. (https://www.reddit.com/r/netsec/)
3. Sechaba sa HackerOne: Sechaba sa linokoane tsa boitšoaro le litsebi tsa ts'ireletso inthaneteng, moo bofokoli, mekhoa ea ts'ireletso e buisanoang, 'me liphuputso li arolelanoa. (https://www.hackerone.com/community)
4. The Ethical Hacker Network: Sechaba sa marang-rang bakeng sa litsebi tsa ts'ireletso ea tlhahisoleseling le lits'oants'o tsa boitšoaro, moo lisebelisoa li arolelanoang, mekhoa e buisanoang, 'me litšebelisano li etsoa. (https://www.ethicalhacker.net/)
5. SecurityTrails Community Forum: Seboka sa ts'ireletso sa Marang-rang moo litsebi tsa ts'ireletso le batho ba chesehang ba buisanang ka litaba tse amanang le ts'ireletso ea khomphutha, ho kenyelletsa le ts'ebeliso ea Google Dorks. (https://community.securitytrails.com/)

Mofuta oa Google Dork	Mohlala oa Google Dork
patlo ea motheo	sehlooho: "lentsoe la bohlokoa"
	inurl:"lentsoe la bohlokoa"
	filetype: "mofuta oa faele"
	sebaka: "domain.com"
	cache: "URL"
	link: "URL"
Tšireletso e nang le boitsebiso	mongolo: "SQL phoso"
	mongolo: "password leaked"
	mongolo: "litlhophiso tsa ts'ireletso"
	inurl: "admin.php"
	sehlooho: "control panel"
	sebaka: "domain.com" ext:sql
Litaba tsa lekunutu	mongolo:"boitsebiso ba lekunutu"
	sehlooho: "faele ea senotlolo"
	filetype: docx "sekunutu"
	inurl: "file.pdf" mongolo:"nomoro ea ts'ireletso ea sechaba"
	inurl: "bekapo" ext:sql
	sehlooho: "directory index"
ho hlahloba sebaka sa marang-rang	sebaka:domain.com "kena"
	sebaka:domain.com "index of"
	site:domain.com sehlooho se reng: "password file"
	site:domain.com ext:php intext:"Phoso ea SQL"
	sebaka:domain.com inurl: "admin"
	site:domain.com filetype:pdf
ba bang	allinurl:"lentsoe la bohlokoa"
	allintext:"lentsoe la bohlokoa"
	e amanang le:domain.com
	lintlha:domain.com
	hlalosa: "lentsoe"
	buka ea mohala: "lebitso la lebitso"