Does anyone have a dorks bible?

Discussion & Solutions
1

I’d like more information on dorks; I’m already familiar with a variety of things, but if anyone has further knowledge on the subject or new tips that might be useful to me, I’d appreciate it. The more detailed, the better.

3

The dorks bible — five layers, every source still online

🏛️  LAYER 1 · the origin       the first dork lists
     ↓
📚  LAYER 2 · collections      the lists still being updated
     ↓
🧭  LAYER 3 · engines          the ones with their own dork language
     ↓
⚙️  LAYER 4 · runners          what turns a list into live targets
     ↓
🧠  LAYER 5 · operators        what you type

What a dork is — a search with operators.

Type login and you get blogs about logging in. Type inurl:login and you get the login pages.

inurl:"index of" ext:sql     →  an open folder listing its database files
intitle:"webcam" inurl:view  →  camera pages
ext:env "DB_PASSWORD"        →  config files holding passwords

Same search box. Different operators.

Why it matters — the files are already public. A dork is how a public file gets found.

Start here — open Layer 2, take one list, type one line from Layer 5.

🏛️ LAYER 1 — the origin

The 2002 to 2005 sources. The dorks, and the category names everything since reuses.

📚 LAYER 2 — the collections still being updated

The live lists. Sorted by target, from 13,760 dorks up to millions.

🧭 LAYER 3 — engines with their own dork language

Engines that take operators the big one does not have.

  • :russia: Yandex — yandex.com · !word exact form · mime: · date:YYYYMMDD
  • :magnifying_glass_tilted_left: Mojeek — mojeek.com · since:month · inanchor:
  • :spider_web: Stract — stract.com · linkto: backlinks · exacturl: one exact page
  • :globe_with_meridians: Onyphe — search.onyphe.io · category: over internet-wide scans
  • :droplet: LeakIX — leakix.net · a free researcher key opens the whole index
  • :satellite_antenna: GreyNoise — viz.greynoise.io · IP behaviour index
  • :dna: PublicWWW — publicwww.com · depth:all walks inner pages
⚙️ LAYER 4 — runners

Tools that take a dork list and query it for you, one line at a time.

  • :person_running: Pagodo — github.com/pagodo · scrapes the database, then queries it with delays
  • :control_knobs: Dorkator — github.com/dorkator · 84 dorks, batched across Google, Bing and DDG, exported to MD or JSON
🧠 LAYER 5 — operators
Type this You get
intitle: the words in the page title
inurl: the words in the address
intext: the words in the body
allintitle: every word, all in the title
AROUND(n) two words within n words of each other
before: after: a date range
filetype: one file type
ext:sql ext:bak database and backup files
ext:env ext:conf ext:yml config files
ext:log ext:reg ext:ppk logs, registry, private keys
inurl:"index of" open directories

Five layers, five bookmarks.

4

Thanks—as always, helpful and very good answers.