Google hacking usage

Google search grammar

"+关键词" 包含关键词
"-关键词" 不包含关键词
intitle:关键词 （在标题中包含关键词）
intext:关键词 （在正文中包含关键词）
site:关键词 （在站点中包含关键词）
inurl:关键词 （在url中包含关键词）
filetype:pdf （指明文件类型，以PDF为例）

GHDB

https://www.exploit-db.com/google-hacking-database

Practical exercise

Example: +支付 -充值 -宝(note the space before -)

Contains keyword payment but does not include recharge and treasure search

Example: 支付 充值(Search containing recharge or payment)

Example: "支付充值"(Search with recharge and payment)

Example:北京 intitle:电子商务 intext:法人 intext:电话

Example:北京 site:alibaba.com inurl:contact

Example:SOX filetype:pdf

Example:payment site:cn

Example:inurl:"level/15/exec/-/show"

Example:intitle:"netbotz appliance" "ok"

Example:inurl /admin/login.php

Example:inurl:qq.txt

Example:filetype:xls "username | password"

Example:inurl:ftp "password" filetype:xls site:baidu.com

Example:inurl:service.pwd