+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Google: Hacks And Tricks For Information Gathering (/showthread.php?tid=6193606)
Google: Hacks And Tricks For Information Gathering - Fate45 - Feb 14, 2022
Here's a list of google Dorks you can use to find hidden information on websites.
Happy hacking
Getting Open Index or Insecure Information
intitle:"index of /" Parent Directory site:yoursitehere.com
You can search for admin directories
intitle:"Index of /admin" site:yoursitehere.com
You can search for password directories
intitle:"Index of /password" site:yoursitehere.com
You can search for mail directories
intitle:"Index of /mail" site:yoursitehere.com
You can search for files like passwd
intitle:"Index of /" passwd site:yoursitehere.com
You can search for password.txt files
intitle:"Index of /" password.txt site:yoursitehere.com
You can search for htaccess file
intitle:"Index of /" .htaccess site:yoursitehere.com
You can also search for diffrent extensions.
intitle:"index of ftp" .mdb site:yoursitehere.com
You can also try and look for admin pages or the login functionalities
Intitle: "login" "admin" site:yoursitehere.com
Using InURL we can search for diffrent functionalities within the website.
Search for Admin Login Functionality on target domain
inurl:admin site:yoursitehere.com
Search for Login Functionality on target domain
inurl:login site:yoursitehere.com
Using FileType we can search for diffrent files within the website.
Searching for text files containing passwd in URL on target domain
inurl:passwd filetype:txt site:yoursitehere.com
Searching for db files containing admin in URL on target domain
inurl:admin filetype:db site:yoursitehere.com
Searching for logs on target domain
filetype:log site:yoursitehere.com
Searching for Excel and csv files on target domain
filetype:xls csv site:yoursitehere.com
Search for other sites containing links for your target website
link:yoursite.com -site:yoursite.com
ENJOY!
RE: Google: Hacks And Tricks For Information Gathering - JTheRipper - Feb 14, 2022
Oi, Imma use these. Thanks
RE: Google: Hacks And Tricks For Information Gathering - Lashley47 - Feb 15, 2022
can someone sorta help navigate with this. Like what exatcly am i looking for?
RE: Google: Hacks And Tricks For Information Gathering - Beladonis - Feb 15, 2022
(Feb 15, 2022 02:59 PM)Lashley47 Wrote: can someone sorta help navigate with this. Like what exatcly am i looking for?
These strings are Google dorks, used on Google to find juicy files (config files, db files, backups, archives, login portals etc) and other "hidden" pages of websites that were indexed at some point by google spiderbots. You could also use them to refine normal search results, because they are just filters.
RE: Google: Hacks And Tricks For Information Gathering - nshs sns - Feb 23, 2022
Thanks I’m going to try!
I’m new
RE: Google: Hacks And Tricks For Information Gathering - BMP2004 - Feb 26, 2022
Thanks for sharing!
Very useful.
RE: Google: Hacks And Tricks For Information Gathering - cabbagebatch - Mar 3, 2022
been meaning to compile some of these together but haven't gotten around so this is super useful and timely. thanks!