Decode a JWT header and payload locally and inspect its unverified time claims.
Google Dork Builder
Build an advanced Google search using a site, file type, exact phrases and exclusions.
How to use it
- Choose only the filters you need. Enter a bare domain such as example.org, not a full URL.
- Use plain text for phrases, page titles and page text; separate excluded phrases with commas.
- Build and review the query. Copy it locally or explicitly open Google using the labelled search button.
Examples
Find public PDF reports on a domain
- Input
- Site: example.org; type: PDF; exact phrase: annual report
- Result
- site:example.org filetype:pdf "annual report"
Combining Google search operators
The builder combines site: for a domain, filetype: for the selected document format, quoted exact phrases, intitle: and intext: filters. Exclusions are written as minus-prefixed quoted phrases.
A useful starting point is one site plus one distinctive phrase. Add filters gradually if you receive too many results. Overly restrictive combinations can produce no results even when a relevant page exists.
What a search query can and cannot tell you
Search operators filter the search engine’s available results; they are not a complete inventory of a website or a way to access content you are not authorized to view. Results depend on indexing and the search engine’s interpretation of the query.
Building, resetting and copying make no external request. The separate Google button sends the displayed query to Google in a new tab. Do not include confidential phrases in a query you intend to send to an external search engine.
Questions, answered.
Why does the site field reject https://?
The field expects a domain rather than a full URL, so the generated site: filter has a predictable scope.
Does the builder run the query automatically?
No. It only builds text. The clearly labelled Google button is a separate choice that sends the query to Google.
Are all matching pages guaranteed to appear?
No. Search results are limited by indexing and search-engine behavior; this is not a site audit or an authorization bypass.