Dorking is the practice of using search-engine operators, such as site:, filetype:, intitle:, or quoted strings, to find specific content that is already publicly reachable or indexed. In cybersecurity, it is a reconnaissance technique: the attacker is not breaking in, but searching for exposed pages, documents, backups, login portals, configuration files, or other sensitive material that a crawler can see.
It matters because indexed content can reveal attack paths before any intrusion occurs. Security teams use dorking to audit their own exposure and to test whether private data, staging systems, or shared links have become searchable. Defenders reduce risk by restricting access, using password protection, applying noindex where appropriate, and avoiding public publication of sensitive files. Dorking is most powerful when weak visibility controls turn an ordinary web page into an easy target.