Google Dorks Reference

Essential dorks

The following table covers 20 essential Google dorks for common OSINT objectives.

Objective	Dork	Example
Government PDFs	`site:gov filetype:pdf "contract"`	Mexico
Exposure	`intitle:"index of" passwords.txt`	—
IP Cameras	`inurl:viewer/live/index.html`	—
Emails	`site:linkedin.com "@company.com"`	—
Subdomains	`site:*.target.com -www`	—

Advanced 2025/2026 dorks

The dorks below are organized by category. Expand each section to view the queries.

Sensitive information leaks

site:pastebin.com "password" "@company.com"
site:github.com "api_key" OR "api_secret" "company"
site:trello.com intext:"password" OR intext:"passwd"

Exposed corporate documents

site:*.s3.amazonaws.com ext:xls | ext:xlsx "confidential"
filetype:pdf intext:"internal use only" site:gov

IP cameras and IoT devices

inurl:/view/view.shtml
intitle:"webcamXP 5"

Exposed admin panels

intitle:"index of" "admin"
intitle:"Dashboard" inurl:login
inurl:wp-admin intitle:"Dashboard"

Exposed databases

intitle:"phpMyAdmin" "Welcome to phpMyAdmin"
inurl:"/phpmyadmin/index.php"
"#mysql dump" filetype:sql

Employee information

site:linkedin.com "company name" "CEO" | "CTO" | "CISO"
site:*.linkedin.com "@companymail.com"

Subdomains

site:*.target.com -www
site:*.*.target.com

Essential dorks