SpecifyingGoogleSearches for Better Results
Google indexes pages on websites, gathering every little detail and storing this information in its own databases.As a search engine with an extensive database, Google offers paramount opportunities forcollecting publicly available information(PAI).What many OSINT researchers and analysts might not realize is that Google can bewieldedin specific ways to obtainsuperiorsearchresults. One way? Google Dorking.Google Dorking involvesimplementing Google’s query languagein order to obtaincertaindata, likespecific online files. WithGoogle Dorking, an operator willenterkeywordsandsearch operators—called “dorks”—when creatingtheirsearches.These are some of themostcommonGoogle Dorkoperators:
- intitle:tofind certain keywords within the titleof a page
- intext:restricts results to keywordsappearingwithin the content of a page
- inurl:shows results for keywords appearing in the pageurl
- allintext:shows results only for pages containing all the keywords in the page’s content
- site:restrictsresultsto the site you indicate in the query
- filetype:todiscover specific file types, such as PDFs
- +:to combinemore than one keyword
- -:allowsuserstosearchforkeywords while avoiding specific others
Google Dorkingin Practice
LikeBoolean Searching, Google Dorking can help investigators narrow their search results. By implementing specific operators in a query, users will be more likely to receive information that accurately matches their requests.Aresearcheron the hunt forinformation about an online training course mightcreatethe search, “intitle:advancedOSINT training.”This querywill give results for all three keywordslisted.(An operator should be followed by a colon and then the chosen keywords, without any additional spaces.) Thesame researcher might want toimplement the minus operator (“-”) to find pages aboutdigital fingerprints, but not digital footprints. In this case, the Google Dork query would look like this: “digital fingerprint -footprint.” Users should avoid adding a space between the minus operator and the keyword they would like to exclude from the results.
Different search engines also work with Google Dorking. An investigator could input queries intoBing or DuckDuckGo while using the same keywords and search operators.This versatility makes Google Dorking an ideal method for researchers and analysts who like to utilize a variety of OSINT tools.
Why Google Dorking?
On the open web, publicly available information abounds; users can encounter terabytes of data, each of which might provide useful investigative materials.Without a specific, directed search query, investigatorscouldend up scanning through thousands of pieces of data to find the one or two sources they need.Spending hours scrolling one database to find a single name, paragraph, or sentence? Thatseems like a waste of an investigator’s time. While users will still need to createplatformaccountstosiphoninformation fromonline spaces likethe deep web, learning Google Dorking could savethem preciousoperating hours.
Risk Awareness
Before diving into the world of Google Dorking, analysts need to understand how easily their online activitiesmaybe discovered.An operatormustisolate their online activities in a safe environment. If they don’t take this step, they’ll leave a digital trail for any internet user to find.Cyber criminalscantracka user’sIP addressif the user does not implementthe propersecurityprecautions;evenVPNs can’t providetotalanonymity,contrary to whatsomeonline users mightbelieve.Google also instills its ownhurdlestoonline security when browsing. If any investigator uses a single static IP address,Google will block their connection.In view ofthese risk factors, Google Dorking may be considered an advanced OSINT techniquefor an analyst with limited experience collecting PAI.
Advanced OSINT Training: Learn Google Dorking
Using Google Dorking could result in more efficient intelligence operations. However, thissophisticatedOSINT technique comes with a few extra challenges. Operators need to be wary of how they appear when creating thesetypes ofsearches online.To discover advanced OSINT training solutionslike Google Dorking,attend a virtual lesson from our instructors at the Academy.Or,stick around the blog to read more about key operationaltechniques.
Related Article:The Challenges of Using Commercial-Off-the-Shelf (COTS) Technology for OSINT Analysis Within the U.S. National Security Community
