美国这家公司Argelius labs发布了一份针对中国开展开源情报调查的搜索技巧清单dorks，搜索技巧包括：公司注册信息、采购合同、法院和执法数据、监管处罚、专利、标准、地图、政府公开信息等等，分类详尽。看了一下团队成员，有SANS开源情报讲师、OSCP/GPEN/GWAPT渗透测试专家，也有在Black Hat等顶会分享经验的资深人士。 https://github.com/ArgeliusLabs/chinese_osint_search_dorks/…

https://argeliuslabs.com

ArgeliusLabs/chinese_osint_search_dorks

Source: https://github.com/ArgeliusLabs/chinese_osint_search_dorks

China Web OSINT Search Dorks

A bilingual field guide to Baidu, Chinese-language query pivots, public records, and verification — published by Argelius Labs.

Western OSINT researchers consistently underperform on China-focused work for one reason: they treat the Chinese-language internet as a translated copy of the English-language web. It isn’t. The highest-value records — company registries, procurement awards, court and enforcement data, regulatory penalties, patents, disclosures — are indexed under Chinese names, Chinese pivot terms, Chinese identifiers, and Chinese document conventions, and they surface on different engines and official portals than the ones English-speakers default to.

This repository is a practical, bilingual playbook for doing that work well and lawfully.

📖 Read the guide

→ guide.md — the full field guide (28 sections).

Every Chinese query, keyword, and operator is paired with an English translation, so you can use it whether or not you read Chinese.

What’s inside

• A repeatable workflow: resolve the canonical Chinese identity, pivot on one Chinese term at a time, constrain by source and file type, then move from search engines to primary portals.
• Baidu search syntax and how it differs from Google — with honest caveats about what each operator actually does.
• Ready-to-use “dork” libraries for corporate ownership, listed-company disclosures, people and biographies, government and regulatory records, procurement and tenders, litigation and enforcement, IP and standards, technical footprint, locations, and social platforms.
• A map of official, high-value Chinese source portals (registries, courts, procurement, IP, securities, standards, maps).
• Verification discipline: a source hierarchy, status words that change a record’s meaning, common analytical traps, an evidence-log template, and preservation/integrity steps.
• Troubleshooting, classroom exercises, a quick-reference cheat sheet, and a briefing-slide summary.

Who it’s for

OSINT students, investigators, journalists, researchers, analysts, due-diligence teams, and technical professionals doing lawful research on information that is intentionally public.

⚠️ Read this first

This is open-source intelligence material — it covers information intentionally made public. It does not teach bypassing access controls, credential hunting, scraping in violation of law or terms, or collecting private personal data without a lawful purpose.

It is educational material and not legal advice, and is not affiliated with or endorsed by any government, agency, search engine, or platform named within it. Researching Chinese entities can carry legal exposure for you as the collector — including under China’s Data Security Law, PIPL, and Counter-Espionage Law — depending on the subject, your location, and what you do with the data. See Section 1 of the guide before you start.

License

Released under the Creative Commons Attribution 4.0 International (CC BY 4.0) license — see LICENSE. You may share and adapt the material, including commercially, with attribution.

Contributing & contact

Issues and pull requests are welcome — corrections to translations, dead links, and changed portal behavior are especially valuable. Learn more about us at argeliuslabs.com. (Add your preferred contact email or contribution guidelines here.)

Maintenance

Search engines and official portals change. Before relying on a specific operator or link, test it against the live interface. The guide’s “Last reviewed” date reflects the most recent check.

© Argelius Labs · argeliuslabs.com · China Web OSINT Search Dorks is provided for educational use under CC BY 4.0.