Overview
File-type searching restricts results to specific document types — useful for finding published documents. This lesson covers searching by file type.
Learning objectives
- Explain file-type search operators.
- Describe finding specific document types.
- Connect file-type searching to OSINT and exposure awareness.
Core concept
File-type searching limits results to a specific document/file type (commonly via a filetype: operator) — for example, finding published documents, spreadsheets, or presentations of a given format. This is useful in OSINT for locating publicly-published documents an organization or source has made available, which often contain more detailed information than web pages. Combined with domain restriction, it can find specific document types on a specific site — a precise way to discover publicly-exposed documents. It works only on publicly-indexed files.
How it works
Adding a file-type operator (e.g. filetype:pdf) restricts results to that format. Combined with terms and domain restriction, the practitioner can find, for instance, publicly-published documents of a specific type on a specific organization's domain. Such documents (reports, guides, published records) often hold richer information than web pages. For defensive OSINT, an organization can use this to discover which documents it has inadvertently exposed publicly (a common source of unintended information disclosure). File-type searching thus both aids legitimate research and highlights exposure awareness. As always, it surfaces only public/indexed files — nothing private.
Practical example
To find publicly-published documents of a specific type on an organization's domain, the practitioner combines file-type and domain-restriction operators (e.g. filetype:pdf site:example.com) with relevant terms — surfacing that organization's publicly-indexed documents of that type. Defensively, the organization could run the same search to discover documents it has unintentionally exposed publicly, then address the exposure. The file-type operator precisely located the target document type — richer information than pages, and an exposure-awareness aid.
Cybersecurity relevance
File-type searching is valuable in OSINT for finding publicly-published documents (often information-rich) and, defensively, for exposure awareness — organizations can discover documents they've inadvertently made public (a common unintended-disclosure issue). Combined with domain restriction, it precisely targets specific document types on specific sites — public content only, used ethically. It reflects the "search-engine hacking"/dorking techniques applied to document discovery. For both research and defensive self-assessment, file-type searching efficiently surfaces published documents that plain searches might miss — a useful OSINT operator.
Common mistakes
- Not using file-type operators when seeking specific document types.
- Overlooking exposure awareness — organizations should check what documents they expose.
- Assuming it accesses private files — only public/indexed files are surfaced.
Key takeaways
- File-type searching (
filetype:) restricts results to specific document types, useful for finding publicly-published (often information-rich) documents. - Combined with domain restriction, it precisely targets document types on specific sites; defensively, it reveals inadvertently-exposed documents (exposure awareness).
- It surfaces only public/indexed files (used ethically), reflecting dorking techniques for document discovery — useful for research and defensive self-assessment.
Check your understanding
- How does file-type searching help locate specific published documents?
- How can an organization use file-type searching defensively for exposure awareness?