Use advanced search operators (Google Dorks) to find juicy information about target websites.
Target Reconnaissance
Google Hacking is a powerful reconnaissance method since it basically searches all information indexed by Google about the target websites/domains.
Completely Passive
This scan does not interact in any way with the target website. All the information comes directly from Google, without sending any packet to the target.
Advanced Search Operators
The Google Hacking tool uses advanced Google search operators (Google Hacking dorks). It tries to discover vulnerabilities and misconfigurations indexed by Google.
Every penetration test should start with a passive reconnaissance phase. Public search engines gather amounts of information about almost every website from the Internet. It's a good idea to make specific queries and get relevant data. Use them to discover sensitive information or data that’s not supposed to be public.
Google has a set of advanced search operators to use and find interesting information about a target website or domain.