A Google dork is a search query that uses advanced operators such as site:, intitle:, inurl:, or filetype: to find specific content that search engines have already indexed. It is a simple technique, but it can reveal pages, documents, directories, and login portals that are not obvious through normal browsing.
In cyber security, Google dorks matter because public indexing can expose the shape of an organization’s attack surface. Defenders use them in OSINT and reconnaissance to find forgotten test pages, exposed backups, staging systems, or administrative interfaces that should not be public. Attackers use the same queries to map targets quickly and quietly. A search result does not prove a breach, but it can show that sensitive material is reachable and worth reviewing. The defensive response is usually to remove unnecessary public paths, tighten access controls, and block crawlers from sensitive content where appropriate.