Process and analysis
What is Google dorking?
Using advanced search operators such as site:, filetype: and inurl: to find specific or exposed information that normal searches miss.
Google dorking means using advanced search operators to make a search engine return very specific results: site: limits results to a domain, filetype: to a format, inurl: and intitle: to words in the address or title, and quotation marks to exact phrases.
OSINT analysts use it to find documents, exposed login pages, old subdomains and mentions of a target. Attackers use the same operators to find exposed files and vulnerable pages, which is why defenders run them against their own domains.