Dorks: The Simple Search Tricks That Expose Hidden Data

 



Dorks: The Simple Search Tricks That Expose Hidden Data

Most people type normal words into Google. But there’s a smarter way to search — using Google dorks. These are special search operators that let you dig deeper into what’s indexed online. They’re simple, but they can reveal things people never meant to be public.

What is a Dork?

A “dork” is just a search query that uses Google’s advanced filters. Instead of typing project plan, you might type:

Code
site:claude.ai/public/artifacts project plan

That tells Google: “Only show me results from Claude’s public artifacts that mention project plan.”

It’s like putting on night‑vision goggles — suddenly you see things hidden in plain sight.

Why Dorks Are Useful

  • They help security researchers spot leaks.

  • They let companies audit what’s accidentally exposed.

  • They show how much sensitive data is floating around online.

The scary part? Anyone can use them. And right now, Claude’s shared chats and artifacts are being indexed, which means dorks can pull up private dashboards, resumes, even API keys.

Examples of Dorks

Here are some practical ones:

  • site:claude.ai/share → Lists all shared Claude chats Google has indexed.

  • site:claude.ai/public/artifacts → Shows all published Claude artifacts like apps, docs, and dashboards.

  • site:claude.ai/public/artifacts confidential OR internal → Surfaces artifacts labeled “confidential” or “internal.”

  • site:claude.ai/share resume OR CV OR phone → Finds shared chats containing resumes or contact details.

  • site:claude.ai/public/artifacts password OR key OR token → Searches for exposed credentials or API keys.

Explanation in Plain Words

Think of it this way:

  • site: tells Google to only look at one domain.

  • keywords tell it what to find.

  • OR lets you search for multiple terms at once.

So if you type site:claude.ai/share api key OR token, you’re basically saying: “Google, show me Claude shared chats that mention either an API key or a token.”

Bottom Line

Dorks aren’t hacking tools. They’re just smarter searches. But when companies forget to protect shared links, dorks make those leaks easy to find.

If you’ve ever shared something on Claude, remember: “Anyone with the link” might actually mean “anyone who searches.”

Comments