Monday, May 23, 2022

Google Dorking Tome 1

Google Dorking Tome 1

The Google Dorking Tome 1.

Patterns :

site:vps-*.vps.ovh.net
inurl:adminpanel site:gov.*
site:gov.* intitle:"index of" *.csv
site:papaly.com + keyword
Fwd: intitle:"Index of /" intext:"resource/"
Google to wordpress
Fwd: intitle:"atvise - next generation"
inurl:admin filetype:xlsx site:gov.*
inurl:"*admin | login" | inurl:.php | .asp
intitle:index of settings.py
inurl:/intranet/login.php
inurl: /wp-content/uploads/ inurl:"robots.txt" "Disallow:"
site:postman.com + keyword
site:pastebin.com intitle:"cpanel"
inurl:admin filetype:xls

Operators :

filetype:
intext:
intitle:
inurl:
site:

Thursday, February 8, 2018

intitle:index of / & filetype:sql

Find juicy files on an index



INTITLE PARAMETER + FILETYPE PARAMETER :

intitle:index of / & filetype:sql

Result :

- Listing of SQL files or dumps.
- Filetype can be modified.

Monday, December 4, 2017

inurl:composer.json filetype:json -site:github.com

Find juicy composer.json and composer.lock files



INURL PARAMETER + FILETYPE - SITE :

inurl:composer.json filetype:json -site:github.com

FOR composer.lock :

inurl:composer.lock filetype:lock -site:github.com

Result :

Sensitive files


About :


The root package is the package defined by the composer.json at the root of your project. It is the main composer.json that defines your project requirements.

(© Getcomposer)

Saturday, August 19, 2017

filetype:htaccess

Find htaccess files



FILETYPE PARAMETER :

filetype:htaccess

A .htaccess (hypertext access) file is a directory-level configuration file supported by several web servers, used for configuration of site-access issues, such as URL redirection, URL shortening, Access-security control (for different webpages and files), and more. A site could have more than one .htaccess file, and the files are placed inside the web tree (i.e. inside directories and their sub-directories), and hence their other name distributed configuration files.

.htaccess files act as a subset of the server's global configuration file (like httpd.conf[2]) for the directory that they are in, or all sub-directories. The original purpose of .htaccess—reflected in its name—was to allow per-directory access control by, for example, requiring a password to access the content. More commonly, however, the .htaccess files define or override many other configuration settings such as content type, character set, CGI handlers, etc.

Tuesday, May 23, 2017

intext:Dump with BackWPup & filetype:sql

Find BackWPup Wordpress dump files


BackWPup Dump file

INTEXT + FILETYPE PARAMETER :

intext:Dump with BackWPup & filetype:sql
intext:Plugin for WordPress by Daniel Huesken & filetype:sql
intext:Dump on & intext:Huesken & filetype:sql

Thursday, March 31, 2016

filetype:asp intitle:" Microsoft Outlook Web Access"

Get access to "Microsoft Outlook Web Access" Panels :





filetype:asp intitle:" Microsoft Outlook Web Access"


About Microsoft Outlook Web Access :


Outlook on the web, previously called Exchange Web Connect, Outlook Web Access, and Outlook Web App in Office 365 and Exchange Server 2013) is a suite of Outlook web apps from Microsoft. It spans across Office 365, Outlook.com, Exchange Server, and Exchange Online. It includes a web-based email client, a calendaring tool, a contact manager, and a task manager. As of November 2015, Microsoft is in process of upgrading Outlook.com to Outlook on the web and the Office 365 infrastructure through the Outlook.com Preview It also includes add-in integrations, Skype on the web, and alerts as well as new themes that span across all the web apps. Ootw is navigated using the App Launcher icon which brings down a list of web apps for the user to choose from.

Tuesday, June 9, 2015

intext:powered by joomla & filetype:sql -github

Find SQL dumps from Joomla :

intext:powered by joomla & filetype:sql -github

intext:powered by joomla & filetype:sql -github

intext:Black Stealer v2.0 & filetype:txt

Find Black Stealer files :

Juicy passwords...


intext:Black Stealer v2.0 & filetype:txt
intext:Black Stealer & filetype:txt

Saturday, December 13, 2014

intext:phpMyAdmin SQL Dump & filetype:sql

intext:phpMyAdmin SQL Dump & filetype:sql

Extract the dump from phpMyAdmin...

intext:admin & inurl:gov -github & filetype:sql

intext:admin & inurl:gov -github & filetype:sql

Find SQL backup from .GOV websites related to the word "admin"

filetype:sql & inurl:gov -github

filetype:sql & inurl:gov -github

Find SQL backup from .GOV websites, remove the Github entry...

filetype:sql & intext:wp_users & -github

filetype:sql & intext:wp_users & -github

Find Wordpress users inside SQL backup, remove the Github entry...

Saturday, November 29, 2014

Friday, August 29, 2014

Sunday, February 16, 2014

filetype:jnlp

filetype:jnlp

Java Web Start (Java Network Launch Protocol)