> For the complete documentation index, see [llms.txt](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/google-dorking.md). # Google dorking input these into google and replace example.com with your desired target Searches for pages within a specific domain ``` site:example.com ``` Searches for pages within a specific domain that contain "admin" in the URL. This could potentially be a way to find an admin panel. ``` site:example.com inurl:admin ``` Searches for pages within a specific domain that contain "forum" in the URL. This could be used to find a forum on a website. ``` site:example.com inurl:forum ``` Searches for subdomains of a domain listed by Google. ``` site:*.example.com ``` Searches for subdomains of a domain listed by Google that contain "admin" in the page title. ``` site:*.example.com intitle:admin ``` Searches for pages within subdomains of a domain listed by Google that contain "crm" in a PDF file. Replace "example.com" with the desired target domain and "pdf" with the desired file extension. ``` site:*.example.com filetype:pdf crm ``` Searches for pages within subdomains of a domain listed by Google that contain "employees" in the URL. ``` site:*.example.com employees ``` Searches for pages within subdomains of a domain listed by Google that contain "index of" in the page title. This could potentially expose data that should not be exposed. ``` site:*.example.com intitle:index of ``` Views a cached version of a website. ``` intitle:cache.example.com ``` Searches for sites that have leaked login files. ``` inurl:auth_user_file.txt ``` Searches for sites that have leaked their etc password file onto the internet. ``` inurl:passwd.txt ``` Searches for CSV files within government domains listed by Google. ``` site:gov.* intitle:"index of" *.csv ``` Searches for CSV files with "passwords" in the title within government domains listed by Google. ``` site:gov.* intitle:"index of" *.csv passwords ``` Searches for sites that have taken a backup of the WordPress config file and not deleted the backup. ``` inurl:wp-config.bak ```