- Search specific website - `site:"linkedin.com" ""` - `site:s3.amazonaws.com COMPANY_NAME` - Look for string in URL - `inurl:"/course/jumpto.php" site:example.com` - Find string in page title - `intitle:"index of" site:example.com` - Find pages that contain links to a certain page - `link:"https:// en.wikipedia.org/wiki/ReDoS"` - Find pages with a specific file extension - `filetype:log site:example.com` - `site:example.com ext:php` - `site:example.com ext:txt password` - Wildcards - match any character or series of characters in string - `how to hack * using Google` - Force an exact match to a string - use quotes - `"how to hack"` - "OR" operator - match pages with either one of two criteria - `"how to hack" site:(reddit.com | stackoverflow.com)` - `(SQL Injection | SQLi)` - Minus operator - exclude certain search results - `"how to hack websites" -php` - Trademark, Terms of Service, Copyright, & Privacy Policy Recon - You can Google the copyright and terms of service text from a main target to glean related hosts. - `"© 2019 Twitch Interactive, Inc." inurl:twitch` - `"© 2018 Twitch Interactive, Inc." inurl:twitch` - Public Google Drive documents - `site:docs.google.com ""` - Documents on documentcloud.org - `site:documentcloud.org ""` - Documents uploaded to Scribd - `site:scribd.com ""` - Public PowerPoint presentations - `intext:"" filetype:pptx` - Public PDF documents - `intext:"" filetype:pdf` - .docx documents on target's website - `intext:"" filetype:docx` - Remember to search gist.github.com, pastebin.com, justpaste.it, pastefs.com, codepen.io, etc.