Dork library
List of useful dorks.
Country filtering
Search for IPs in France and domains with fr TLD.
1+(country:"France" host:"fr")
Country is case sensitive.
Search for results in Europe without Russia.
1+geoip.continent_name:"Europe" -country:"Russia"
Severity filtering
Search for all GitConfigHttpPlugin with critical severity OR all DotDsStoreOpenPlugin with high severity.
1(+plugin:"GitConfigHttpPlugin" +severity:"critical") (+plugin:"DotDsStoreOpenPlugin" +severity:"high")
Dataset filtering
Search for dataset bigger than ~1GB and infected by a ransom note.
1+dataset.infected:true +dataset.size:>10000000000
Search for dataset with a ransom note containing btc.
1+dataset.ransom_notes:"btc"
SSL filtering
Search for results with FortiGate as SSL issuer name.
1+ssl.certificate.issuer_name:"FortiGate"
Search for results with co.uk as TLD in SSL Common Names or domains.
1ssl.certificate.cn:"co.uk" ssl.certificate.domain:"co.uk"
Date filtering
Search for results with co.uk as TLD in SSL Common Names or domains and created after 2023-01-01.
1+(ssl.certificate.cn:"co.uk" ssl.certificate.domain:"co.uk") +creation_date:>2023-01-01