Transcription
I prepared for this video much more than I expected, but it's okay, it was worth it. Why? If you want to know how advanced search engines, like Google, can help us find the information we need 10 times faster, this video is for you. In this video, I will show you 27 practical queries, from academic PDF files to ready-made guides, presentations, everything we want to search for information correctly. This content is created for educational purposes. Let's start. Here I have my browser. I will start writing my Google dorks here. First, if you don't know, I'll show a very small, primitive example. It's not related to the twenty-seven yet, but if I write, for example, "Python Guide 1 2 3" as an example, you will notice that mainly, yes, "Python Guide 1 2 3" will appear, but "1 2 3" is not written everywhere. If I put "1 2 3" in quotes, you will now see that only results where "1 2 3" is present are shown to me. Here "1 2 3" is present. I can do Ctrl F3. Here is "1 2 3". Here is "Python 1 2 3 1 2 3 1 2 3". We see, I get only those results where "Python 1 2 3" is written. Let's start. The first dork will be to search for public annual reports on university websites, for example. It will look like this. I'll go here and write the following. "filetype:pdf" - this is a dork. We write the file type, then a colon, then "pdf". In quotes, as I showed you, we write "annual report" and the site where "edu" because university websites usually end with ".edu". Here. I see all the results. "Annual report", "annual report", "annual report". Important information. We see all PDF files here. Of course, I won't open them now, you can do that yourself. So, I will leave a link to the GitHub link where you will find all the dorks that I will show here. This is the first dork. We are looking at information again. PDF files, universities. Next. Let's look. We will search for public lecture notes and lectures in PDF format on educational websites. It will look like this. Again, we have the "edu" site, and "filetype" is again "pdf", but this time we write "lecture notes". And we see again, we see "lecture notes". This can be useful. Perhaps you are currently in university and studying. I am sure this can be useful to you. Next. Cloud architecture will look like this. We will find, uh, um, a presentation about cloud architecture, cloud, you know, cloud, specifically on SlideShare. Let's see how it looks. And notice that everything I show here, uh, okay. slide. Let's remove it from the site here. And here "security privacy cloud computing". Okay, fine. You will notice here what is important. Everything I show here are just examples. You can change it to whatever you want here. You can write "test arch" if you want, it doesn't matter. You can write something so that it finds absolutely nothing, for example, like this. But you can remember it yourself. You can write whatever you want here. I'm just showing you basic examples. Now we will select repositories with README files on GitHub. If you know, there are README files that have an installation section, which means it's "installation". How to do it? It looks like this. "site:github.com". We have "README Installation". Here are repositories with README. We can all see installations everywhere. Next. We are looking for public "to-do" comments in the code. "To-do" means what needs to be done. If someone has left it publicly, I need to do this task. Now we can see "to-do". We can look. "org" here. Uh, let me do it better, "todo". I'll write it like this using Ctrl F. "to do fix fix this to do refactor". I can now look publicly. People who have left repositories publicly have written "to-do" about what they need to do. And this is very important information, if you are in cybersecurity or just in IT. Next. Let's look at searching for scientific articles on deep learning. Searching for scientific articles on deep learning. If you need to search for scientific articles, it looks like this. "The principles of deep learning theory". Again, PDF. This scheme should already be familiar to you. Next, we will look at a file, this time I will change it to a CSV dataset where we have "COVID" written. We can also see the data we need here in CSV format, of course. Next, searching for datasets on the topic of housing on the Kaggle website. It looks like this. "kaggle.com", "open datasets", "machine learning project", "open datasets", "open datasets", "beginner friendly". So, if you are also interested in datasets like this, this is for you. "medium.com" website, if you know, is used for blogging. What can we do? Let's try "site:medium.com". I will search here for "case study" on "data engineering". If I'm specifically interested in something. And as an example, if you are, for example, dealing with CTF machines, you can write here, for example, "CTF" and specifically let it be "Windows", for example. Let's write something like this. And we will write "Windows Security CTF". We specifically found a CTF that is related to Windows. Next. Stack Overflow results for Pandas. The Pandas library helps to work with, uh, pictures, with images, uh, pictures, that is, with images in Python repositories. And here we are searching on the Stack Overflow site, the most popular site before ChatGPT appeared for programmers to search for information. And here we see about Pandas. Let me search for "pandas". How to use Pandas here, here, here, and blah, blah, and blah, blah. If you are developing, this will be useful to you. Next. "developer.apple.com". As you know, for developers, if you work, for example, with iOS devices and WWDC Sessions. You can also look here for WWDC sessions on the official website, we select, that is, questions and answers, what do we have here? And if you are still watching this video, most likely you are interested in cybersecurity, which is why I strongly recommend that you check out our course, Cybersecurity Engineer. In this course, you will learn how to work correctly with companies. Everything will be practical. How to protect their data, which is the most valuable thing at the moment. How to protect companies from various attacks. How to conduct attack simulations. How to build entire architectures. And the most important thing is that at the moment, this is one of the most in-demand professions in the IT field. And besides learning a lot and becoming a true professional, at the moment, cybersecurity engineers earn a lot, a lot of money. So don't wait, try the course for free, and then use the code David to get a discount. Let's continue. Next, we see, uh, "microsoft.com", "How to Azure". Azure is Microsoft's cloud, the second most popular cloud, if I'm not mistaken, after Amazon, and after Azure comes Google. This is just an excerpt for you. Here we see "docs Microsoft", official documentation, we read "how to". To see "how to leverage", if we need to search for some kind of guide information on the official website. Next. Let's write "nytimes.com". "nytimes.com". Like this. The New York Times, if you don't know, it finds interactive maps and materials on The New York Times. Everything that is here, because we see "Interactive", we see "Map". Next, the site "archive.org" and photographs. What did the archive do here, you can read yourself. Searching for photo collections on the Internet Archive. Internet Archive. You know, everything that happened on the internet is stored in the archive. And that's why when they tell you: "What if you posted something, even if you delete it, the internet will always remember." This is what is meant. The internet will not forget anything. "Intitle:". Here. "research file filetype:pdf". We see it very easily here. We are looking for PDF files that contain "research" only. And the site is "government", as we can see here. We find public PDF policies, privacy policies on official government, I apologize, websites. Next, we will look at the LinkedIn site. If I am still working, for example, as a software engineer, a developer, and I want to find a remote position, uh, here I see sites like "remote in Armenia", "remote in United States", "remote in United Kingdom", "Germany", okay, great. Where are they all? If you want to become someone else, for example, I'll write "penetration tester". We are interested in "pentest", here are 1,000+ pentest jobs. And you can already, in principle, understand how to search for a job, how to do it. And LinkedIn is a must, you can also do hh.ru or any other site you want. Next. We are searching for plugin documentation on WordPress. "site:wordpress.org plugin documentation". Notice that again, everything I show here is just so that we can look together at how it will look here, and how they look. It means examples of the most popular dorks that exist. You can change anything you want. I want you to understand this. This is what I would look for, for example, on GitHub. I would look for README, which you will see. Remember this README that showed "Installation"? This is very important for you to understand. I'm saying again, these are not just ordinary dorks. These are dorks that I would possibly use if I were doing. Next, I see, uh, "how to install nginx". We find pages with instructions on how to install, of course, nginx. Next, I will look at "filetype:md". If you know, an MD file is like README, for example. There are syntax files. On "installation docker". We can see. And, of course, here is "University College London" result. We are looking for markdown files that have Docker installation. On the site, if we want to search for Docker on YouTube, instead of going to YouTube and searching for "Docker Tutorial", you will most likely see something else in the fifth and tenth results. But this way, I only see tutorials that exist for Docker. You can also specifically search for my videos and see what tutorials I or other people on the CyberShara channel have made. This is "reddit.com". We are looking for "Guide Linux". Next. "Slideshare". Again, we are looking for presentations on Slideshare. Let's do another one here. "example.com". Let's write "contact.email". It should be clear, but not "example.com". Let me write "cybers.com contact email". We see everything here that is related to cybers, what emails exist. You can, of course, do "connect.example.com". Next, let's do "site:example.com career openings". Okay, we see nothing here. Let me write "linkedin.com". By the way, I'm also interested in this now, so for demonstration, I'll do "hh.ru". It should be nothing. Here, one thing was found: "Work in the company". Uh, okay. We won't read this, it's not necessary. And let's look at the last one. Instead of GitHub, let's look at "gitlab.com README". This time, instead of having GitHub, we can now look at "gitlab.com README" again with installations. You have seen all the example dorks here that I, uh, found, searched for, and, uh, wrote comments for each one, so that you can, of course, review them. I wrote comments in English, then made a translation, and I hope you will understand what is written, I read it myself. The link will be in the description again. You can calmly read all the dorks, I recommend you use them, change them. And again, remember that these are just examples of dorks that can be used for OSINT, if you are a cybersecurity specialist, if all this interests you. I strongly recommend that you learn Google dorks and instead of just taking and doing copy-paste, as I am doing now, you could always write them manually from memory. This is very important, very useful. Use search engines correctly. This will always help you find information 10 times faster. And, of course, you will work more effectively. Thanks for watching. I can continue. As you can see, the dorks here are quite simple. I wrote mostly "site", "file", "site", "filetype", quotes. I can make much more complex dorks. So, part two. If the video does well, expect it. Thanks for watching. Bye.