Gwzhrf9t

1|------------------|
2|- google hacking -|
3|------------------|
4https://www.exploit-db.com/google-hacking-database/
5https://www.google.com/search?as_q=admin&as_epq=&as_oq=&as_eq=&as_nlo=&as_nhi=&lr=&cr=countryDE&as_qdr=all&as_sitesearch=&as_occt=any&safe=images&as_filetype=&as_rights=
6
7# URL
8
9num=100&start=100 # Número de resultados por página
10strip=1 # Evita o download de imagens ao acessar páginas em cache
11lr=lang_ar #Trás páginas escritas em árabe
12hl=pt-BR
13gl=br
14site:br #sites brasileiros
15
16https://www.google.com.br/search?q=google+hacking+cheat+sheet&oq=google+hacking+cheat+sheet#q=site:exemplo.com.br+(%22error%22+%7C+%22warning%22+%7C+%22login%22+%7C+%22logon%22+%7C+%22admin%22+%7C+%22userid%22+%7C+%22username%22+%7C+%22your+username+is%22)&num=100&start=100
17
18# Caracteres especiais
19( + ) force inclusion of something common
20( - ) exclude a search term
21( “ ) use quotes around search phrases
22( . ) a single-character wildcard
23( * ) any word
24( | ) boolean ‘OR’
25Parenthesis group queries (“master card” | mastercard)
26
27|-----------------------|
28|- Dorks interessantes -|
29|-----------------------|
30
31"password dump" +@gmail.com site:pastebin.com
32"password dump" +@gmail.com site:ghostbin.com
33site:<cliente.com> -site:www.cliente.com #Recuperar hosts sem brute de DNS
34site:<*.*.cliente.com> -www
35site:<cliente> inurl:/phpMyAdmin/index.php db=
36inurl:"cliente.com" filetype:PDF acesso
37+<nome do cliente> site:github.com
38("Index Of" | “[To Parent Directory]”) inbody:TERM site:<cliente.com> # Directory listing
39intitle:index.of (filetype:log | filetype:sql)
40site:<cliente.com> (inurl:bkp | inurl:sql | inurl:tmp | inurl:temp | inurl:zip | inurl:backup | inurl:log)
41site:<cliente.com> -ext:html -ext:htm -ext:php -ext:asp -ext:aspx
42+intext:webalizer +intext:"Total usernames" +intext:"statistics for" #Webalyzer
43filetype:reg HKEY_CURRENT_USER 
44("Index Of" | "[To Parent Directory]") AND "*financ*" inbody:xlsx site:somebank.com
45intitle:"Index of" inurl:admin
46
47# Filetypes 
48site:<cliente.com> (filetype:log | filetype:docx | filetype:doc | filetype:XLS | filetype:XSLX | filetype:conf | filetype:bkp | filetype:sql | filetype:txt | filetype:zip | filetype:reg | filetype:csv )
49
50* CISCO VPN
51filetype:pcf site:<cliente> grouppwd
52
53* OpenVPN
54filetype:ovpn site:<cliente> filetype:key +client
55
56*SSH
57filetype:key site:<cliente> +id_rsa filetype:id_rsa 
58
59
60#Senhas
61ext:pwd inurl:_vti_pvt inurl:(service | authors | administrators)
62intext:(password | passcode | passw | senha ) intext:( username | user | userid ) site:<cliente.com>
63intext:(password | passcode | "Your password is") site:<cliente.com>
64
65#CPF
66site:br +RG +CPF filetype:xls
67
68#SQL Injection
69intext:"SQL syntax" site:<cliente>
70
71#Palavras:
72error warning login logon admin userid username "your username is" login logon  
73
74-ext:html  
75
76(intext:password | intext:passwd | intext:senha ) site:cliente
77
78+ - AND OR NOT
79
80# intitle - Encontra strings no título da página
81intitle:"Tomcat Status" inurl:/status site:somecompany.com
82
83# allintitle - Encontra todos os termos no título da página
84allintitle:"Tomcat Status"
85
86# inurl - Encontra strings na url da página
87​"preventing ransomware" inurl:fbi 
88
89#allinurl - Encontra todos os termos na url da página
90allinurl: "blog wordpress" information security
91
92#site - faz buscas apenas no site
93windows xp end of life ​site:microsoft.com​
94
95# filetype - Encontra tipos de arquivos específicos
96filetype:pdf
97
98# ext - Procura arquivos pela extensão
99ext:exe
100
101# Link - Procura páginas que contenham links que conduzam a uma url
102link:http://www.somecompany.com/supersecretfile.doc
103
104# Inanchor - Encontra texto na descrição do link
105inanchor:texto do link <a>aqui</a>
106
107# info - Exibe um resumo informativo da página
108(useful for finding cached pages)
109​info:www.usgs.gov
110
111Ex: patient record ​intext:"index of /htdocs"
112related: Find website results that are related to your search term.
113Ex:​ related:sans.org