[HIGH]
·
HackerOne
·
Resolved
What Is GitHub Dorking?
GitHub dorking is essentially targeted code search.
GitHub's search functionality supports qualifiers that allow researchers to narrow results by things such as:
| Qualifier | Purpose |
|---|---|
"keyword" |
Search for an exact string |
filename: |
Search for a specific filename |
extension: |
Search by file extension |
language: |
Restrict results to a programming language |
org: |
Search within a specific GitHub organization |
Individually, these are simple filters.
Combined together, they become extremely useful for identifying accidentally committed secrets, insecure configuration, exposed credentials, and other security-relevant information.