# Does anyone have a dorks bible? **URL:** \ **Category:** Discussion & Solutions\ **Tags:** help\ **Created:** [กันยายน 13, 2026, 6:56am UTC](https://onehack.st/t/does-anyone-have-a-dorks-bible/325526 "2026-09-13T06:56:00Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![KTYM](https://onehack.st/user_avatar/onehack.st/ktym/32/175646_2.png) [@KTYM](https://onehack.st/u/KTYM)\ **Post date:** [กันยายน 13, 2026, 6:56am UTC](https://onehack.st/t/does-anyone-have-a-dorks-bible/325526/1 "2026-09-13T06:56:00Z")
I’d like more information on dorks; I’m already familiar with a variety of things, but if anyone has further knowledge on the subject or new tips that might be useful to me, I’d appreciate it. The more detailed, the better. ---
**Author:** ![SRZ](https://onehack.st/user_avatar/onehack.st/srz/32/146132_2.png) [@SRZ](https://onehack.st/u/SRZ)\ **Post date:** [กันยายน 20, 2026, 2:30pm UTC](https://onehack.st/t/does-anyone-have-a-dorks-bible/325526/3 "2026-09-20T14:30:18Z")
### The dorks bible — five layers, every source still online ```auto 🏛️ LAYER 1 · the origin the first dork lists ↓ 📚 LAYER 2 · collections the lists still being updated ↓ 🧭 LAYER 3 · engines the ones with their own dork language ↓ ⚙️ LAYER 4 · runners what turns a list into live targets ↓ 🧠 LAYER 5 · operators what you type ``` **What a dork is** — a search with operators. Type `login` and you get blogs about logging in. Type `inurl:login` and you get the login pages. ```auto inurl:"index of" ext:sql → an open folder listing its database files intitle:"webcam" inurl:view → camera pages ext:env "DB_PASSWORD" → config files holding passwords ``` Same search box. Different operators. **Why it matters** — the files are already public. A dork is how a public file gets found. **Start here** — open Layer 2, take one list, type one line from Layer 5. > **🏛️ LAYER 1 — the origin** > > The 2002 to 2005 sources. The dorks, and the category names everything since reuses. > > - 🏛 **2002 dork list** — [web.archive.org](https://web.archive.org/web/20021208144443/http://johnny.ihackstuff.com/security/googleDorks.shtml) · the first published dork list > - 🔨 **GoolagScanner** — [github.com/GoolagScanner](https://github.com/chr1sk0n/GoolagScanner) · 1,500 dorks inside the download > - 🎓 **Black Hat EU 2005 slides** — [blackhat.com](https://blackhat.com/presentations/bh-europe-05/BH_EU_05-Long.pdf) · the dork categories, named > **📚 LAYER 2 — the collections still being updated** > > The live lists. Sorted by target, from 13,760 dorks up to millions. > > - 🗂 **Dorks collections list** — [github.com/Dorks-collections-list](https://github.com/cipher387/Dorks-collections-list) · dork repos listed per engine: Netlas, Censys, Shodan, onion, CCTV, carding > - 🌊 **GDorks** — [github.com/GDorks](https://github.com/Ishanoshada/GDorks) · 320+ categories, millions of dorks > - 💥 **OneDorkForAll** — [github.com/OneDorkForAll](https://github.com/SecShiv/OneDorkForAll) · one million dorks, split by CCTV, CMS, LFI, SQLi > - 📜 **13,760 dork list** — [github.com/google\_dork\_list](https://github.com/Bullseye0/google_dork_list) · 13,760 dorks > - 🎯 **DorkDB** — [github.com/DorkDB](https://github.com/AashiqRamachandran/DorkDB) · runs each dork and stores the hosts it returns > **🧭 LAYER 3 — engines with their own dork language** > > Engines that take operators the big one does not have. > > - 🇷🇺 **Yandex** — [yandex.com](https://yandex.com/support/search/en/query-language/search-operators) · `!word` exact form · `mime:` · `date:YYYYMMDD` > - 🔍 **Mojeek** — [mojeek.com](https://www.mojeek.com/support/search-operators.html) · `since:month` · `inanchor:` > - 🕸 **Stract** — [stract.com](https://stract.com/) · `linkto:` backlinks · `exacturl:` one exact page > - 🌐 **Onyphe** — [search.onyphe.io](https://search.onyphe.io/) · `category:` over internet-wide scans > - 💧 **LeakIX** — [leakix.net](https://leakix.net/api-documentation) · a free researcher key opens the whole index > - 📡 **GreyNoise** — [viz.greynoise.io](https://viz.greynoise.io/) · IP behaviour index > - 🧬 **PublicWWW** — [publicwww.com](https://publicwww.com/docs/query-syntax/operators) · `depth:all` walks inner pages > **⚙️ LAYER 4 — runners** > > Tools that take a dork list and query it for you, one line at a time. > > - 🏃 **Pagodo** — [github.com/pagodo](https://github.com/opsdisk/pagodo) · scrapes the database, then queries it with delays > - 🎛 **Dorkator** — [github.com/dorkator](https://github.com/twux-sec/dorkator) · 84 dorks, batched across Google, Bing and DDG, exported to MD or JSON > **🧠 LAYER 5 — operators** > > | Type this | You get | > | --- | --- | > | `intitle:` | the words in the page title | > | `inurl:` | the words in the address | > | `intext:` | the words in the body | > | `allintitle:` | every word, all in the title | > | `AROUND(n)` | two words within n words of each other | > | `before:` `after:` | a date range | > | `filetype:` | one file type | > | `ext:sql` `ext:bak` | database and backup files | > | `ext:env` `ext:conf` `ext:yml` | config files | > | `ext:log` `ext:reg` `ext:ppk` | logs, registry, private keys | > | `inurl:"index of"` | open directories | Five layers, five bookmarks. ---
**Author:** ![KTYM](https://onehack.st/user_avatar/onehack.st/ktym/32/175646_2.png) [@KTYM](https://onehack.st/u/KTYM)\ **Post date:** [กันยายน 20, 2026, 7:05pm UTC](https://onehack.st/t/does-anyone-have-a-dorks-bible/325526/4 "2026-09-20T19:05:15Z")
Thanks—as always, helpful and very good answers.