CVE Certified
GHDB

Welcome to the google hacking database

We call them 'googledorks': Inept or foolish people as revealed by Google. Whatever you call these fools, you've found the center of the Google Hacking Universe!

Search Google Dorks

Latest Google Hacking Entries

Date Title Category
2014-04-21 intitle:"Zimbra Web Client Sign In" Pages containing login portals
2014-04-21 intitle:"Zimbra Web Client Log In" Pages containing login portals
2014-04-07 inurl:typo3/install/index.php?mode= Pages containing login portals
2014-04-07 inurl:typo3conf/localconf.php Files containing passwords
2014-03-31 inurl:/backup intitle:index of backup intext:*sql Files containing passwords
2014-03-31 inurl:"Citrix/XenApp/auth/login.aspx" Pages containing login portals
2014-03-31 filetype:pdf "acunetix website audit" &q... Files containing juicy info
2014-03-27 inurl:crossdomain filetype:xml intext:allow-access... Files containing juicy info
2014-03-27 inurl:clientaccesspolicy filetype:xml intext:allow... Files containing juicy info
2014-02-28 intitle:Admin inurl:login.php site:.co.in Pages containing login portals

Google Hacking Database Categories

Footholds (31)

Examples of queries that can help a hacker gain a foothold into a web server

Files containing usernames (17)

These files contain usernames, but no passwords... Still, google finding usernames on a web site..

Sensitive Directories (74)

Google's collection of web sites sharing sensitive directories. The files contained in here will vary from sesitive to uber-secret!

Web Server Detection (72)

These links demonstrate Google's awesome ability to profile web servers..

Vulnerable Files (61)

HUNDREDS of vulnerable files that Google can find on websites...

Vulnerable Servers (76)

These searches reveal servers with specific vulnerabilities. These are found in a different way than the searches found in the "Vulnerable Files" section.

Error Messages (77)

Really retarded error messages that say WAY too much!

Files containing juicy info (303)

No usernames or passwords, but interesting stuff none the less.

Files containing passwords (172)

PASSWORDS, for the LOVE OF GOD!!! Google found PASSWORDS!

Sensitive Online Shopping Info (9)

Examples of queries that can reveal online shopping info like customer data, suppliers, orders, creditcard numbers, credit card info, etc

Network or vulnerability data (61)

These pages contain such things as firewall logs, honeypot logs, network information, IDS logs... all sorts of fun stuff!

Pages containing login portals (284)

These are login pages for various services. Consider them the front door of a website's more sensitive functions.

Various Online Devices (238)

This category contains things like printers, video cameras, and all sorts of cool things found on the web with Google.

Advisories and Vulnerabilities (1971)

These searches locate vulnerable servers. These searches are often generated from various security advisory posts, and in many cases are product or version-specific.