Robuta

# Google Dork: intitle:"index of" "*.pl" # Vulnerable Files # Date: 12/11/2021 # Exploit Author: Priyanshu Choudhary

# Google Dork: Fwd: intitle:"MedDream" "Softneta" -.com # Pages Containing Login Portals # Date:15/10/2021 # Exploit Author: Mugdha Bansode

# Google Dork: inurl:/wp-content/themes/IncredibleWP # Files Containing Juicy Info # Date:28/09/2021 # Exploit Author: Sagar Jain

# Google Dork: intitle:"index of" upload.asp " # Files Containing Juicy Info # Date:09/11/2021 # Exploit Author: Muhammad Al-Amin

Service d'upload v1.0.0 Shell Upload Vulnerability: https://www.exploit-db.com/exploits/10938

# Google Dork: inurl:login.rsp "User name" # Pages Containing Login Portals # Date: 22/07/2021 # Exploit Author: Neha Singh

Alibaba Clone Platinum (offers_buy.php) SQL Injection Vulnerability - CVE: 2010-1725: https://www.exploit-db.com/exploits/12468

login portal inurl:login_user.asp Reza Abasi(Turku)

Joomla Djice Shoutbox 1.0 Permanent XSS Vulnerability: https://www.exploit-db.com/exploits/8197

Many of the results of the search show error logs which give an attacker the server side paths including the home directory name. This name is often also used...

# Google Dork: inurl:"portal.mwsl" "Status" # Various online devices (Siemens S7 series of PLC controllers - SCADA) # Date: 9/2/2021 # Exploit Author:...

Google Dork: intext:DB_PASSWORD || intext:"MySQL hostname" ext:txt Author: Tarkan Catal X This dork allows you to search for WordPress configuration file. This...

Google Dork Description: intitle:"index of /" authorized_keys Google Search: intitle:"index of /" authorized_keys Author: @nuria_pp Sensitive Directories:...

Dork: intitle:"index of" "jsapi_ticket.json" Description: This Google dork lists out sensitive jsapi data for a web server Author: Abhi Chitkara

# Google Dork: inurl:login.rsp "User name" # Pages Containing Login Portals # Date: 24/09/2021 # Exploit Author: Neha Singh

Novell Nterprise Linux Services detection dork. Some of the features are:* iFolder* Samba* NetStorage* eDirectory Administration* Linux User Management* NMAS...

silkRoad Eprise is a dynamic content management product that simplifies the flow of content to a corporate website. The software requires NT 4, Windows 2000 or...

Description: Helm Control Panel login page Google search: intitle:"Helm : The Web Hosting Control System" Autor: nebo_oben

IRIran eShop Builder SQL Injection: http://server/patch/pages/index.php?id=0[SQL] Submitter: Ahoora

The Lantronix web manager home pages show the print server configuration (Server Name, Boot Code Version, Firmware, Uptime, Hardware Address, IP Address and...

Joomla! is a Content Management System (CMS) created by the same team that brought the Mambo CMS. This dork finds the Web Installer page. On newer versions,...

# Google Dork: inurl:ALFA_DATA intitle:"index of" # Files Containing Juicy Info. # Date: 08/06/2021 # Exploit Author: Snowglobe_io

These pages indicate that they are sharing the C:\WINDOWS directory, which is the system folder for many Windows installations.

Norton Ghost allows administrators to create hard rive images for lots of purposes including backup, migration, etc. These files contain the hard drive images...

Google Dork: "index of" "siri" Category: Files Containing Juicy Info Author: Prashant Sharma LinkedIn: https://www.linkedin.com/in/prashantique/

Finds stealer logs with usernames, passwords and sites to input them! Dxtroyer

# Google Dork: intitle:"Wing FTP Server - Web" # Wing FTP Server 6.2.5 - Privilege Escalation. This dork is linked to the # following existing exploit:...

SiteX 0.7.4.418 (THEME_FOLDER) Local File Inclusion Vulnerabilities - CVE: 2009-1846: https://www.exploit-db.com/exploits/8816

kryCMS Version 3.0 SQL Injection. Author: tempe_mendoan

# Google Dork: inurl:"view.shtml" "Network Camera" # Various online devices (webcams). # Date: 21/08/2020 # Exploit Author: Alexandros Pappas

PHPFanBase 2.x (protection.php) Remote File Include Vulnerability: https://www.exploit-db.com/exploits/2957

Asset Manager Remote File upload Vulnerability: https://www.exploit-db.com/exploits/12693

# Google Dork: site:.org inurl:/admin.aspx # Pages Containing Login Portals # Date: 04/07/2023 # Exploit Author: Sachin Gupta

# Dork: Files Containing Juicy info: site:*/phpmyadmin/server_privileges.php BR, Reza Abasi (Turku) Cyber Sec researcher

# Google Dork: allinurl:"add_vhost.php?lang=english" # Files Containing Juicy Info # Date: 20/11/2023 # Exploit: Saleh Lardhi

This dork locates Curriculum Vitale files. Author: Luciano UNLP

# Google Dork: "com.sap.itsam.problems.java.systeminfo" # Pages Containing Login Portals # Date:13/10/2021 # Exploit Author: GnosticPlayers

# Google Dork: Inurl: "login" Intitle:index of username and pass # Files Containing Passwords # Date: 22/08/2021 # Exploit Author: Sahil Gupta

DorkGenius is the ultimate tool for generating custom search queries for Google, Bing, and DuckDuckGo. - Our cutting-edge app uses the power of AI to help you...

# Google Dork: "index of" :excel documents # Files Containing Juicy Info # Date:9/11/2021 # Exploit Author: Renuka Kharat

XOOPS Module Glossario 2.2 (sid) Remote SQL Injection Vulnerability: https://www.exploit-db.com/exploits/5216

# Google Dork: inurl:8081/ "Pan, Tilt & Zoom" # Various online devices (webcams). # Date: 29/07/2020 # Exploit Author: Alexandros Pappas

PaNews is reported prone to a remote PHP script code execution vulnerability. It is reported that PHP script code may be injected into the PaNews software...

Sophos XG Firewall Login pages # Google Dork: inurl:/webconsole/webpages/login.jsp # Date: [5-11-2019] # Author: [Mohammed*_*]

Author: Charley Celice (@charleycelice) 99% of sites I found using this dork are vulnerable to XSS attacks. The "strParents" parameter seems to always be...

Author: IR-Security -Team SQL injection: http://server/administrator/index.php?section=manage_members&action=edit_photo&pho_id=-100001 union all select...

# Google Dork: inurl:"/console/login/LoginForm.jsp" # Oracle WebLogic Server 12.2.1.0 - RCE (Unauthenticated). CVE-2020 14882. #...

Files containing usernames & passwords of NOD32 antivirus accounts. Google dork: intext:"eav" filetype:txt Thanks! D0bby

date :Jan 30 2005 this search reveal the src/webmail.php which would allow acrafted URL to include a remote web page. This was assigned CAN-2005-0103by the...

Joomla Component simple shop 2.0 SQL Injection Vulnerability: https://www.exploit-db.com/exploits/5177

# Dork: intext:Basato su IceWarp Server # IceWarp WebMail 11.4.4.1 and older version - Reflective Cross-Site Scripting. # This dork is linked to the following...

The WinFrame-Client infos needed by users to connect toCitrix Application Servers (e.g. Metaframe).Often linked/stored on Webservers and sometimes reachable...

# Google Dork: intext:"index of" "signin" # Files Containing Juicy Info # Date:8/11/2021 # Exploit Author: Onkar Deshmukh

phpMySearch is a personal search engine that one can use to provide a search feature for one's own Web site. With this search an attacker can find admin logon...

Webmin is a html admin interface for Unix boxes. It is run on a proprietary web server listening on the default port of 10000.

Dork: intitle:"index of" "tinyfilemanager.php" Description: This google dork lists out websites with the "tinyfilemanager.php" shell uploaded on them and...

Zabbix login portal: inurl:"/index.php?enter=guest" Reza Abasi(Turku)

Sites with WebGais - Websendmail. Author: Parth S. Patel https://ca.linkedin.com/in/parthpateloscp

Joomla Component Nice Talk 0.9.3 (tagid) SQL Injection Vulnerability - CVE: 2007-4503: https://www.exploit-db.com/exploits/4308

This dork can be used to detect codes hosted by different companies that uses lighttpd Web Server. Anwar Ayoob

# Google Dork:HP Laserjet Config Network Page # Various Online Devices # Date:21/02/2023 # Exploit Author: Kerim Mert YILDIRIM

# Google Dork: inurl:pastebin "API_KEY" # Files Containing Juicy Info # Date:10/11/2021 # Exploit Author: Krishna Agarwal

Category : Pages containing login portals Description : Dork for finding to login portals of Employees and admins which using Automatic Data Processing Inc.,...

myBloggie is affected by multiple vulnerabilities. http://www.securityfocus.com/bid/13507

PHPFootball 1.6 (show.php) Remote Database Disclosure Vulnerability - CVE: 2007-0638: https://www.exploit-db.com/exploits/3226

# Google Dork: intitle:"index of" inurl:admin/php # Files Containing Juicy Info # Date:21/03/2023 # Exploit Author: Md Hasib

# Google Dork: intitle:"ZAP Scanning Report" + "Alert Detail" # Network or Vulnerability data. # Date: 1/07/2021 # Exploit Author: Alexandros Pappas

# Google Dork: ext:xlsx inurl:database # Date: 15/01/2021 # Information of database with .xlsv extension # Author:Raj Zamal

AJ Auction v1 (id) Remote SQL Injection Vulnerability: https://www.exploit-db.com/exploits/5868

# Google Dork: intitle:"index of" "/sql" "admin" #Description: This Dork will return the important files containing admin setup to sql. #Date: 21/09/2021....

Test CGI by Lilikoi Software aids in the installation of the Ceilidh discussion engine for the World Wide Web. An attacker can use this to gather information...

Joomla DJ-Classifieds Extension com_djclassifieds Upload Vulnerability: https://www.exploit-db.com/exploits/12479

# Google Dork: inurl:login/login-user # Files Containing Juicy Info # Date:01/08/2023 # Exploit Author: Faridul Hasan

PostNuke Module pnFlashGames 2.5 SQL Injection Vulnerabilities - CVE: 2008-2013: https://www.exploit-db.com/exploits/5500

Multiple vulnerabilities have been found in GoSmart Message Board. A remote user can conduct SQL injection attack and Cross site scripting attack....

RDP is basically a Windows-sanctioned backdoor. You can use it to access someones computer remotely. This dork finds files with RDP info and logins! Dxtroyer

ckeditor directories ManhNho

Sonicwall Global VPN Client files containing sensitive information and login

SQli Vulnerability in iScripts VisualCaster - CVE: 2010-2853: https://www.exploit-db.com/exploits/12451

Category: Page containing log in portal & Web Server Detection Description: This dork allows user to access default page of Oracle Weblogic Server - UDDI...

# Google Dork: inurl: /adminer.php # Files Containing Juicy Info # Date: 27/11/2023 # Exploit: Satyam Singh

Filemanager without authentication.

These are Citrix Metaframe login portals. Attackers can use these to profile a site and can use insecure setups of this application to access the site.

Google dork description: Mongo Express instances. Most have no authentication enabled Google Search: intitle:"Home - Mongo Express" Submitted by: Alfie...

# Google Dork: intitle:"index of" "/mysql" # Files Containing Juicy Info # Date:12/11/2021 # Exploit Author: Priyanshu Choudhary

An Oracle error message, this message can display path names, function names, filenames and partial SQL code, all of which are very helpful for hackers...

Dork: intext:"index of /" "customer.php" "~Login" Description: will give information related to customer and login info. Author: Priyanka Prasad

Ele Medios CMS SQL Injection Vulnerability: https://www.exploit-db.com/exploits/10418

# Exploit Title: Guest Login # Google Dork: inurl:/guest/login.php # Author: Francis Al Victoriano

# Dork # inurl:"saw.dll" AND intitle:"Sign In" Login Portals.

inurl:/Portal/Portal.mwsl?PriNav=FileBrowser Access into simatic step 7 plc software systems by dekingofcyber....

# Google Dork: site:gov.* intitle:"index of" *.php # Files Containing Juicy Info # Date: 24/12/2021 # Exploit Author: Girish B O

the dork keyword is: inurl:"trace" ext:axd intext:"password" purpose of dork: search for tracing files in the ASP.NET websites which might contain a sensitive...

This is the print environemnts script which lists sensitive information such as path names, server names, port numbers, server software and version numbers,...

Joomla Component com_jcollection Directory Traversal - CVE: 2010-0944: https://www.exploit-db.com/exploits/11088

# Google Dork: "index of" "user.sqlite" # Title: SQLite files disclosure. # Date: 04/06/2020 # Author: Shivani Kumari # LinkedIn:...

Joomla Component com_wmtpic 1.0 SQL Injection Vulnerability: https://www.exploit-db.com/exploits/14128

# Google Dork: [inurl:cloud_main.asp] # Date: [02/03/2018] # Exploit Author: [MikiDiCalenella] Description: web ui for Asus Aicloud

Locates SquirrelMail Login Pages Author: 0daydevilz