dorking (how to find anything on the Internet)


obs.: esta é uma cópia integral.

dorking (how to find anything on the Internet)

Sat 04 April 2020

tagged dorkingnon-technicalhow-toscrapinggrowth hacksreference

tl;dr: Use advanced Google Search to find any webpage, emails, info, or secrets

cost: $0

time: 2 minutes

Software engineers have long joked about how much of their job is simply Googling things

Now you can do the same, but for free

Below, I’ll cover dorking, the use of search engines to find very specific data

For each example, you can paste it directly into Google to see the result

table of contents:


Inspired by this Twitter exchange with Gumroad CEO Sahil Lavingia, the next few examples will cover Gumroad and Sahil.

find specific pages within a website (ex: for DynamoDB e-books) dynamodb

find specific pages that must include a phrase in the Title text

allintitle:"support this"

find similar sites (Google only)

you can chain operators together (ex: looking for bug bounties with either security or bug-bounty in the URL)

(inurl:security OR inurl:bug-bounty OR + "gumroad"

you can restrict to certain top-level domains (ex: lists of teachers) filetype:xls inurl:"email.xls"


find Gmail accounts

sahil lavingia ""

find work accounts (you’ll need to find their domain first)

sahil lavingia ""

not finding what you’re looking for with either of those? Try to guess the format of the email (try going to this site, search the domain, and click Identified Name Formats))

"s.lavingia" "@" ".com"

you can always find every page with emails on it (and then use the next snippet below) intext:""

find every email on a web page that you’re on. The big kahuna – this works for every website. Inject it into a site with Chrome DevTools (more here)

var elems = document.body.getElementsByTagName("*");
var re = new RegExp("(^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\.[a-zA-Z0-9-.]+$)");
for (var i = 0; i < elems.length; i++) {
    if (re.test(elems[i].innerHTML)) {

this will log every email found, without you having to scan through the whole page.


find spreadsheets

filetype:csv OR filetype:xlsx OR filetype:xls OR filetype:xltx OR filetype:xlt OR

find Google Docs and Google Sheets "gumroad"

find where your competitor’s logo is (ex: partners or customers’ websites)

"Gumroad Logo.png"

find your competitors’ sales pitches and whitepapers (filetype:pdf OR filetype:ppt)

find case studies written about competitors

inurl:hubspot-case-study -site:


find sites with specific keywords in the anchor text

inanchor:"cyber security"

research blog posts with specific keywords in their title

inposttitle:"diy slime"

find backlinks (ex: other sites that link to a particular blog post). note: the link operator is now deprecated

find keyword permutations with the wildcard operator

* design tools

find companies using a given widget

intext:"Powered by Intercom"


search the site itself for codes ("coupon" | "referral code" | "affiliate code" | "discount code" | "VIP")

next, try twitter + "meundies" + ("coupon" | "referral code" | "affiliate code" | "discount code" | "VIP")

next, try Mailchimp emails + "blueapron" + ("coupon" | "referral code" | "affiliate code" | "discount code" | "VIP")


cybersecurity experts use dorking, as one tool among many, to find potential vulnerabilities in a company. I will not be covering any such queries, out of concern for their potential for misuse.

operator review

operators are components of a search query that narrow the results down. You can combine as many as you want in one query. The most useful ones you’ll want to know are:

“phrase”results must include “phrase”
-phraseexclude results with phrase
phrase1 AND phrase2    phrase1 and phrase2 must both be included
phrase1 OR phrase2one of phrase1 and phrase2 must be included (or both)
site:example.comresults must be on domain
filetype:jpgresults must be of type .jpg

AND/OR logic can be used to combine distinct queries

"phrase1" OR "phrase 2" AND "phrase3"
# equivalent to these two searches
>> "phrase1"
>> "phrase 2" AND "phrase3"

reduzindo tamanho de pdf com ps2pdf


ps2pdf input.pdf output.pdf

ou com os parâmetros:

ps2pdf -dPDFSETTINGS=/ebook input.pdf output.pdf

erro de acesso vnc com x2vnc

estava tentando usar o x2vnc para acessar outro linux, mas dava o erro abaixo:

x2vnc: VNC server supports protocol version 3.7 (viewer 3.3)
x2vnc: VNC connection failed: No security type suitable for RFB 3.3 supported

a solução foi, executar o comando no terminal do pc remoto que eu estava tentando acessar:

gsettings set org.gnome.Vino require-encryption false


Formatando cpf no Excel/Calc

teste a dica do,n%C3%BAmero%20de%20um%20CPF%3A%2012345678910, mas não funcionou.

então adaptei para:

1º selecione a coluna com os cpfs, clique com o botão direito, e clique em Formatar Células:

2º coque o formato de texto no padrão: 000\.000\.000\-00 e clique em OK.

o macete está em “escapar” os caracteres especiais “.” e “-“

Uma urna A contém 5 bolas: 2 brancas e 3 pretas; uma urna B contém 6 bolas: 4 brancas e 2 pretas; uma urna C contém 7 bolas: 3 brancas e 4 pretas. Escolheu-se uma urna ao acaso e dela extraiu-se uma bola ao acaso. Qual a probabilidade de essa bola ser preta?

Uma urna A contém 5 bolas: 2 brancas e 3 pretas; uma urna B contém 6 bolas: 4 brancas e 2 pretas; uma urna C contém 7 bolas: 3 brancas e 4 pretas. Escolheu-se uma urna ao acaso e dela extraiu-se uma bola ao acaso. Qual a probabilidade de essa bola ser preta?

Resposta: 158/315=0,501558

Explicação passo-a-passo:

deve-se usar: qtde_Pretas/Total_na_Urna

Prob= ((3/5)+(2/6)+(4/7))/3

(urna A 3preta/5total) (3/5)
(urna B 2preta/6total) (2/6)
(urna A 4preta/7total) (4/7)
(tudo dividido pelo toal de urnas3) 3

aplicando a matematica

convert: recortando imagens com offset

convert -crop 600x400+10+120 input.png output.png

neste exemplo vai fazer um recorte de x=600 por y=400, começanco o corte na posição x=10 e y=120 da imagem original input.png


Nemo como gerenciador de arquivos padrão


Installing Nemo file manager in Ubuntu Linux

Open the terminal (you can use Ctrl+Alt+T terminal shortcut in Ubuntu) and use the following command:

sudo apt install nemo

That’s it. It may take some time in downloading and installing Nemo, depending upon your internet speed.

Once installed you can see some icons on the desktop to access Nemo file manager. Mind that if you look for Nemo in Unity Dash, it will be shown as Files and not as Nemo. But you can distinguish between Nemo and Files (Nautilus) by the icons.

Once you have installed Nemo file manager in Ubuntu, you’ll see that Nautilus is still the primary file manager in the system.

Now, let’s see how can you make Nemo the default file manager in Ubuntu.

Make Nemo default file manager in Ubuntu

Open the terminal and use the following command:

xdg-mime default nemo.desktop inode/directory application/x-gnome-saved-search

And then you can set up Nemo to handle the desktop completely with the following commands (in the given order):

gsettings set org.gnome.desktop.background show-desktop-icons false
gsettings set org.nemo.desktop show-desktop-icons true

The first command disables the handling of desktop by Nautilus and the second one enables Nemo to take its place.

You should also add nemo-desktop in the list of startup applications.

That’s it. You have just made Nemo the default file manager in Ubuntu. You can verify it by using xdg-open $HOME command in the terminal. The tutorial to make Nemo default file manager should also work with other versions of Ubuntu.

7 Amazing Developer Tools that you’re not using yet


Continuar lendo

Ubuntu: monitor desligando em poucos segundos / configurar tempo do monitor para desligar

eu estava com o seguinte problema no ubuntu 18.04:
após poucos segundos de inatividade, uns 10 segundos por exemplo, o monitor desligava sozinho.

Continuar lendo

Turn Off/Disable Notifications on your Ubuntu’s Lock Screen

cópia na integra do site, pois eu não quero perder essa informação.


Continuar lendo