{"id":201,"date":"2023-11-02T08:00:12","date_gmt":"2023-11-02T07:00:12","guid":{"rendered":"https:\/\/www.hwgsababa.com\/insights\/blog\/hacking-finding-scada-using-google-dorks\/"},"modified":"2026-11-02T19:20:06","modified_gmt":"2026-11-02T17:20:06","slug":"hacking-finding-scada-using-google-dorks","status":"publish","type":"post","link":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/","title":{"rendered":"Google Dorks for Hacking: Finding SCADA in the Network"},"content":{"rendered":"<figure><img width=\"800\" height=\"450\" src=\"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/IT-e-OT-differences-1024x576.png\" class=\"wp-image-187\" alt=\"differences between OT and IT systems\" decoding=\"async\" srcset=\"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/IT-e-OT-differences-1024x576.png 1024w, https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/IT-e-OT-differences-300x169.png 300w, https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/IT-e-OT-differences-768x432.png 768w, https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/IT-e-OT-differences-1536x864.png 1536w, https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/IT-e-OT-differences-2048x1152.png 2048w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n<p>Before diving into Google Dorks, let\u2019s take a step back and understand why Google is such a powerful tool for information discovery. It is estimated that Google has stored more pages than any other search engine in the world. With more than billions of pages and a relatively low execution time, the popular Californian search engine manages to satisfy all searches, whether performed for curiosity or for less harmless purposes. It is so powerful that it can categorise over 15 million pages in less than a minute.<\/p>\n<p>Moreover, it is assumed that 60+ thousand searches are conducted through Google&#8217;s search engine every second. This means over <strong>1 trillion<\/strong> searches per year. These are astronomical numbers that Google manages to keep up with thanks to the enormous infrastructure it has set up.<\/p>\n<p>Certainly, search engines have turned many people&#8217;s lives upside down; having so much information in the space of 1 minute is food for thought for anyone. But the most surprising thing, despite these numbers, is that we exploit only a very small part of the potential that this tool offers us.<\/p>\n<p>Few people know that Google has a proprietary language to extract information beyond the normal keyword search. Even with little knowledge of Google keywords, you can find much more information than you ever imagined. Let&#8217;s look at some of them.<\/p>\n<h3><strong>What are Google Dorks<\/strong><\/h3>\n<p>Dorks are defined as search queries that, instead of simply containing a description of what we are looking for, are also composed of several keywords that allow us to refine the parameters of the search in order to obtain specific results.<\/p>\n<h4><strong>Purposes for which they are used<\/strong><\/h4>\n<p>As mentioned, dorks are mainly used to refine search results, in order to have a more specific list of links. For instance, let&#8217;s try searching for &#8216;pizza napoletana&#8217;. The simple word &#8216;pizza&#8217;, searched on Google, has more than 1,360,000,000 results, while combined with the word \u2018napoletana\u2019, the results drop dramatically (still more than 15 million). This is already an attempt to refine our search and narrow the search field.<br \/>\nStarting from the assumption that some sysadmins may not have applied certain rules, it is possible to search for certain confidential and\/or reserved files, not intended for the general public on the Internet. Be careful, however: although some webmasters expose sensitive information on their own, this does not mean that it is legal to exploit it in order to gain an advantage (economic or not). Simple consultation is not a crime, but exploitation is and is prosecuted. It is quite easy to trace the surfing IP, even if a VPN service is used.<br \/>\nMany vulnerabilities are searched for by script kiddies precisely through Google. A careful query in fact searches for error messages, configuration files or anything else that could somehow expose software versions or confidential data to the outside world.<\/p>\n<h5><strong>Some examples of dorks<\/strong><\/h5>\n<table width=\"641\">\n<thead>\n<tr>\n<td width=\"139\"><strong>Dorks name<\/strong><\/td>\n<td width=\"341\"><strong>Description<\/strong><\/td>\n<td width=\"161\"><strong>Example<\/strong><\/td>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td width=\"139\">site:<em>domain<\/em><\/td>\n<td width=\"341\">results will be files and pages present in the domain \u201cdomain\u201d<\/td>\n<td width=\"161\">site:w3school.com<\/td>\n<\/tr>\n<tr>\n<td width=\"139\">intitle:<em>word<\/em><\/td>\n<td width=\"341\">results will contain in the title the word after the dork \u201cintitle\u201d<\/td>\n<td width=\"161\">intitle:hi<\/td>\n<\/tr>\n<tr>\n<td width=\"139\">inurl:<em>word<\/em><\/td>\n<td width=\"341\">results will contain in the title the word after the dork \u201cinurl\u201d<\/td>\n<td width=\"161\">inurl:gallery<\/td>\n<\/tr>\n<tr>\n<td width=\"139\">intext:<em>text<\/em><\/td>\n<td width=\"341\">results will contain pages with the searched &#8220;text&#8221;<\/td>\n<td width=\"161\">intext:\u201cIndex of\u201d<\/td>\n<\/tr>\n<tr>\n<td width=\"139\">ext:<em>extention<\/em><\/td>\n<td width=\"341\">results will contain files with the requested extension<\/td>\n<td width=\"161\">ext:jpg<\/td>\n<\/tr>\n<tr>\n<td width=\"139\">filetype:<em>type<\/em><\/td>\n<td width=\"341\">results will contain files with the extension specified by type<\/td>\n<td width=\"161\">filetype:pdf<\/td>\n<\/tr>\n<tr>\n<td width=\"139\">cache:<em>url<\/em><\/td>\n<td width=\"341\">redirects the user to the Google cache of the specified url<\/td>\n<td width=\"161\">cache:cyberhood.eu<\/td>\n<\/tr>\n<tr>\n<td width=\"139\">info:<em>root_domain<\/em><\/td>\n<td width=\"341\">the result will contain the root domain and all related information<\/td>\n<td width=\"161\">info:amazon.com<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>It should be mentioned that dorks can be concatenated to further refine our search, such as ext:ini intext:env.ini or ext:mdb inurl:*.mdb inurl:fpdb shop.mdb .<\/p>\n<h6><strong>Google Dorks for SCADA<\/strong><\/h6>\n<p>It must be said that there is no single Google dork that will reveal every SCADA interface that exists on the network, this is because it depends very much on the manufacturer and the products used. Each company creates its own embedded systems with proprietary features. They share common protocols and procedures, but in general they are unique objects.<br \/>\nSome of the main manufacturers are: Siemens, Schneider Electric, Rockwell Automation, GE. In addition to this, it must be considered that each of these companies makes several products belonging to the same family, so research requires that specific Google Dorks are developed for each of them. Below is a brief summary of some of the main brands and their queries.<\/p>\n<p><img src=\"\/wp-content\/uploads\/2023\/10\/Google-Dorks-hacking.png\" alt=\"google dorks hacking\" width=\"643\" height=\"652\" \/><\/p>\n<h6><strong>Using Google Dorks<\/strong><\/h6>\n<p>Now let&#8217;s try some dorks to find specific SCADA systems, starting with one of the most widely used products in automation systems in Italy: Siemens&#8217; S7 series PLC, which is the same family of controllers that were the target of the infamous Stuxnet attack against Iran&#8217;s Natanz nuclear power plant in 2010, probably the most sophisticated SCADA attack to date.<br \/>\nOur Google Dork looks like this: inurl:\/Portal\/Portal.mwsl<br \/>\nWhen we use it in a Google search, we get the results shown below.<\/p>\n<p><img src=\"\/wp-content\/uploads\/2023\/10\/google-dorks.png\" alt=\"hacking google dorks\" width=\"643\" height=\"537\" \/><\/p>\n<p>If we select the first item in the list (Siemens S7-1200_1) we access the following page:<\/p>\n<p><img src=\"\/wp-content\/uploads\/2023\/10\/Omar-Morando_google-dorks.webp\" alt=\"google dorks\" width=\"1280\" height=\"774\" \/><\/p>\n<p>This seems to be the Siemens S7 PLC administration portal somewhere in the world. To continue our search, we enter the IP address Google gave us (XX.XXX.XXX.XX) into Shodan to see where it is located. It is in Bruy\u00e8res, France.<\/p>\n<p><img src=\"\/wp-content\/uploads\/2023\/10\/assets_-M7qg_d2uMmQ2XyRcX0x_-M7vh-g4_1JzMO6N6tnL_-M7vhMuZ4gZRyYi_t4wX_image.webp\" alt=\"\" width=\"1133\" height=\"665\" \/><\/p>\n<p>When clicking on the &#8220;Identification&#8221; tab on the left, the PLC identifies itself as an S7-1200_1\/PLC_1 station. It also gives us the serial number and firmware version (thus simplifying a possible attack).<\/p>\n<p><img src=\"\/wp-content\/uploads\/2023\/10\/assets_-M7qg_d2uMmQ2XyRcX0x_-M7vhhmu7T4Q4hlHS32Q_-M7vhzllq0fD61LfDl1W_image.webp\" alt=\"\" width=\"1252\" height=\"602\" \/><\/p>\n<p>The same thing happens if we click on \u201cCommunication\u201d from the menu on the left.<\/p>\n<p><img src=\"\/wp-content\/uploads\/2023\/10\/google-dorks-M7qg_d2uMmQ2XyRcX0x_-M7vhhmu7T4Q4hlHS32Q_-M7viMcSTS63ff4lAt0s_image.webp\" alt=\"\" width=\"1250\" height=\"620\" \/><\/p>\n<p>As we can see, the security of ICS systems is still at an early stage, relying mainly on security by obscurity. These simple Google Dorks too easily expose critical systems without the slightest security criterion. Even a hacker with basic skills can access control systems and create chaos.<\/p>\n<h3><strong>So what to do to improve your ICS security?<\/strong><\/h3>\n<p>When it comes to protecting your Industrial Control Systems (ICS), a one-size-fits-all approach simply won\u2019t cut it. To build true cyber resilience, you need a combination of strategic procedures and technical defenses tailored to your operational environment.<\/p>\n<p>From Security Assessments and OT\/ICS-specific awareness training, including <a href=\"https:\/\/y-cyber.com\/ot-asset-owner\/\">secure PLC programming<\/a>, to Asset Inventory, Network Segmentation, and recovery planning &#8211; every layer counts. And with threats evolving faster than ever, staying informed and proactive is no longer optional.<\/p>\n<p>\ud83d\udd0d Curious about how to put all of this into action?<br \/>\nExplore the <a href=\"https:\/\/y-cyber.com\/\">Y Cyber portfolio<\/a> \u2013 a complete suite of solutions <a href=\"\/en\/y-cyber-new-ot-business-unit\/\">designed<\/a> to help you assess, protect, and future-proof your ICS infrastructure.<\/p>\n<h4><strong>Important Note<\/strong><\/h4>\n<p>The purpose of this article is educational and informative. Any unauthorised action against any control system on a public or private network is illegal. The information contained in this article is intended to make it clear how necessary it is to improve defence systems, and not to provide tools for attacking them. Breaking into a computer system is punishable under criminal law and can cause serious damage to property and persons, especially when it comes to ICS. All tests shown in the tutorials were carried out in isolated, secure, or manufacturer-authorised laboratories.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Before diving into Google Dorks, let\u2019s take a step back and understand why Google is such a powerful tool for information discovery. It is estimated that Google has stored more pages than any other search engine in the world. With more than billions of pages and a relatively low execution time, the popular Californian search [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":202,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47],"tags":[],"class_list":["post-201","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-threats-attacks"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Google Dorks for Hacking: Finding SCADA in the Network &#8211; HWG Sababa<\/title>\n<meta name=\"description\" content=\"Before diving into Google Dorks, let\u2019s take a step back and understand why Google is such a powerful tool for information discovery.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Google Dorks for Hacking: Finding SCADA in the Network &#8211; HWG Sababa\" \/>\n<meta property=\"og:description\" content=\"Before diving into Google Dorks, let\u2019s take a step back and understand why Google is such a powerful tool for information discovery.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/\" \/>\n<meta property=\"og:site_name\" content=\"HWG Sababa\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-02T07:00:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-02T17:20:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/differences-OT-e-IT-systems.png\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"512\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Google Dorks for Hacking: Finding SCADA in the Network\",\"datePublished\":\"2023-11-02T07:00:12+00:00\",\"dateModified\":\"2026-11-02T17:20:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/\"},\"wordCount\":1221,\"publisher\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.hwgsababa.com\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/differences-OT-e-IT-systems.webp\",\"articleSection\":[\"Threats &amp; Attacks\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/\",\"url\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/\",\"name\":\"Google Dorks for Hacking: Finding SCADA in the Network &#8211; HWG Sababa\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.hwgsababa.com\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/differences-OT-e-IT-systems.webp\",\"datePublished\":\"2023-11-02T07:00:12+00:00\",\"dateModified\":\"2026-11-02T17:20:06+00:00\",\"description\":\"Before diving into Google Dorks, let\u2019s take a step back and understand why Google is such a powerful tool for information discovery.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.hwgsababa.com\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/differences-OT-e-IT-systems.webp\",\"contentUrl\":\"https:\\\/\\\/www.hwgsababa.com\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/differences-OT-e-IT-systems.webp\",\"width\":512,\"height\":512,\"caption\":\"differences between OT e IT\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/insights\\\/blog\\\/hacking-finding-scada-using-google-dorks\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Google Dorks for Hacking: Finding SCADA in the Network\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/\",\"name\":\"HWG Sababa\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/#organization\",\"name\":\"HWG Sababa\",\"url\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.hwgsababa.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/favicon.webp\",\"contentUrl\":\"https:\\\/\\\/www.hwgsababa.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/favicon.webp\",\"width\":180,\"height\":180,\"caption\":\"HWG Sababa\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hwgsababa.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/sababasecurity\\\/\",\"https:\\\/\\\/www.youtube.com\\\/@sababasecurity7684\",\"https:\\\/\\\/www.tiktok.com\\\/@hwg.sababa\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Google Dorks for Hacking: Finding SCADA in the Network &#8211; HWG Sababa","description":"Before diving into Google Dorks, let\u2019s take a step back and understand why Google is such a powerful tool for information discovery.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/","og_locale":"en_US","og_type":"article","og_title":"Google Dorks for Hacking: Finding SCADA in the Network &#8211; HWG Sababa","og_description":"Before diving into Google Dorks, let\u2019s take a step back and understand why Google is such a powerful tool for information discovery.","og_url":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/","og_site_name":"HWG Sababa","article_published_time":"2023-11-02T07:00:12+00:00","article_modified_time":"2026-11-02T17:20:06+00:00","og_image":[{"width":512,"height":512,"url":"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/differences-OT-e-IT-systems.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/#article","isPartOf":{"@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/"},"author":{"name":"","@id":""},"headline":"Google Dorks for Hacking: Finding SCADA in the Network","datePublished":"2023-11-02T07:00:12+00:00","dateModified":"2026-11-02T17:20:06+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/"},"wordCount":1221,"publisher":{"@id":"https:\/\/www.hwgsababa.com\/en\/#organization"},"image":{"@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/differences-OT-e-IT-systems.webp","articleSection":["Threats &amp; Attacks"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/","url":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/","name":"Google Dorks for Hacking: Finding SCADA in the Network &#8211; HWG Sababa","isPartOf":{"@id":"https:\/\/www.hwgsababa.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/#primaryimage"},"image":{"@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/differences-OT-e-IT-systems.webp","datePublished":"2023-11-02T07:00:12+00:00","dateModified":"2026-11-02T17:20:06+00:00","description":"Before diving into Google Dorks, let\u2019s take a step back and understand why Google is such a powerful tool for information discovery.","breadcrumb":{"@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/#primaryimage","url":"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/differences-OT-e-IT-systems.webp","contentUrl":"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2023\/10\/differences-OT-e-IT-systems.webp","width":512,"height":512,"caption":"differences between OT e IT"},{"@type":"BreadcrumbList","@id":"https:\/\/www.hwgsababa.com\/en\/insights\/blog\/hacking-finding-scada-using-google-dorks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hwgsababa.com\/en\/"},{"@type":"ListItem","position":2,"name":"Google Dorks for Hacking: Finding SCADA in the Network"}]},{"@type":"WebSite","@id":"https:\/\/www.hwgsababa.com\/en\/#website","url":"https:\/\/www.hwgsababa.com\/en\/","name":"HWG Sababa","description":"","publisher":{"@id":"https:\/\/www.hwgsababa.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hwgsababa.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.hwgsababa.com\/en\/#organization","name":"HWG Sababa","url":"https:\/\/www.hwgsababa.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hwgsababa.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2026\/11\/favicon.webp","contentUrl":"https:\/\/www.hwgsababa.com\/wp-content\/uploads\/2026\/11\/favicon.webp","width":180,"height":180,"caption":"HWG Sababa"},"image":{"@id":"https:\/\/www.hwgsababa.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/sababasecurity\/","https:\/\/www.youtube.com\/@sababasecurity7684","https:\/\/www.tiktok.com\/@hwg.sababa"]}]}},"_links":{"self":[{"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/posts\/201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/comments?post=201"}],"version-history":[{"count":1,"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/posts\/201\/revisions"}],"predecessor-version":[{"id":752,"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/posts\/201\/revisions\/752"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/media\/202"}],"wp:attachment":[{"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/media?parent=201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/categories?post=201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hwgsababa.com\/en\/wp-json\/wp\/v2\/tags?post=201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}