CVE Certified
GHDB

Google Hacking Database

Sensitive Directories

Google's collection of web sites sharing sensitive directories. The files contained in here will vary from sesitive to uber-secret!

DATE Title Summary
2005-09-26 intitle:"Folder Listing" "Folder Li... directory listing for Fastream NETFile Web Server...
2005-09-13 intitle:"Backup-Management (phpMyBackup v.0.4... phpMyBackup is an mySQL backup tool, with features like copying backups to a different server u...
2005-07-21 intitle:"pictures thumbnails" site:pictu... This search reveals the photo albums taken by Sprint PCS customers. Pictures taken with Sprint'...
2005-05-02 intitle:index.of WEB-INF Finds java powered web servers which have indexing enabled on their config directory...
2005-03-26 intitle:index.of /maildir/new/ search gives you a mailbox dir. Contains a lot of mails....
2005-02-17 filetype:ini Desktop.ini intext:mydocs.dll This dork finds any webshared windows folder inside my docs. You can change the end bit "i...
2005-01-16 filetype:torrent torrent Torrent files .. don't expect to find spectacular stuff with this kind of string, this just to ...
2005-01-09 "Index of" rar r01 nfo Modified 2004 New Warez Directory Lists...
2005-01-07 "Web File Browser" "Use regular exp... This will ask google to search for a php script used to manage files on a server. The script &q...
2005-01-05 intitle:"HFS /" +"HttpFileServer&qu... "The HttpFileServer is a Java based mechanism for providing web access to a set of files o...
2005-01-01 intitle:upload inurl:upload intext:upload -forum -... The search reveals server upload portals.An attacker can use server space for his own benefit....
2004-12-30 intitle:"index of" inurl:ftp (pub | inco... Adding "inurl:ftp (pub | incoming)" to the "index.of" searches helps locati...
2004-12-29 allinurl:"/*/_vti_pvt/" | allinurl:"... Frontpage extensions for Unix ? So be it.....
2004-12-19 intitle:index.of abyss.conf These directories reveal the configuration file of the abyss webserver. These files can contain...
2004-12-19 intitle:"Index of /CFIDE/" administrator With ColdFusion, you can build and deploy powerful web applications and web services with far l...
2004-12-19 "Powered by Invision Power File Manager"... Invision Power File Manager is a popular file management script, written in the popular PHP Scr...
2004-12-05 intitle:"index of" "parent director... This search uses desktop.ini to track users with a webserver running on their desktop computers...
2004-11-28 intext:"Powered By: TotalIndex" intitle:... TotalIndex v2.0 is an open source script that is designed to replace the simple, and boring def...
2004-11-07 "intitle:Index.Of /" stats merchant cgi-... This search looks for indexes with the following subdirectories: stats, merchant, online-store ...
2004-10-31 intitle:"index of" intext:"content.... This dork indicates the "Local settings" dir in most cases, and browseble server dire...