CVE Certified
GHDB

Google Hacking Database

Files containing juicy info

No usernames or passwords, but interesting stuff none the less.

DATE Title Summary
2011-11-19 filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS this dork locates registry dumps ...
2011-11-19 intitle:index.of? configuration.php.zip this dork finds mostly backed up configuration.php files. Its possible to change the *.zip to ...
2011-11-19 inurl:"/includes/config.php" The Dork Allows you to get data base information from config files. Author: XeNon ...
2011-11-19 inurl:"trace.axd" ext:axd "Applicat... example google dork to find trace.axd, a file used for debugging asp that reveals full http re...
2011-09-26 +intext:"AWSTATS DATA FILE" filetype:txt Shows data downloads containing statistics on the site.Made by AwstatsThe best dork for that sy...
2011-08-25 filetype:ini "Bootstrap.php" (pass|passw... Zend application ini, with usernames, passwords and db info love Bastich ...
2011-07-26 filetype:pem "Microsoft" Microsoft private keys, frequently used for servers with UserID on the same page. -- Sha...
2011-07-26 inurl:server-info intitle:"Server Information... Juicy information about the apache server installation in the website. -- *Regards, Fady ...
2011-07-18 inurl:/push/ .pem apns -"push notifications&q... iphone apple push notification system private keys, frequently unencrypted, frequently with De...
2011-07-18 site:stashbox.org cv Or resume OR curriculum vitae... Searches StashBox for publicly avaliable PDF's or .doc files containing information used in a...
2011-07-18 site:mediafire.com cv Or resume OR curriculum vita... Searches Mediafire for publicly avaliable PDF's containing information used in a CV/Resume/Cur...
2011-07-18 site:docs.google.com intitle:(cv Or resume OR curr... Searches GoogleDocs for publicly avaliable PDF's containing information used in a CV/Resume/Cu...
2011-07-01 site:dl.dropbox.com filetype:pdf cv OR curriculum ... Searches Dropbox for publicly avaliable PDF's containing information used in a CV/Resume/Curri...
2011-05-26 inurl:sarg inurl:siteuser.html Submitter: pipefish Squid User Access Reports that show users' browsing history t...
2011-05-03 filetype:xls + password + inurl:.com The filetype:xls never changes What is inbtween then + sings can be what ever you are looking ...
2011-05-03 allinurl:http://www.google.co.in/latitude/apps/bad... Site: google.com/latitude - This is a free application where you can track your PC, laptop and...
2011-02-24 intext:db_pass inurl:settings.ini Submitter: Bastich mysql.nimbit.com dashboard settings...
2011-02-19 inurl:app/etc/local.xml Magento local.xml sensitive information disclosure Author: Rambaud Pierre...
2010-12-13 allinurl:/xampp/security.php XAMPP Security Setting Page Information Disclosure. Author: modpr0be ...
2010-12-10 inurl:phpinfo.php Locates phpinfo files. A phpinfo file Outputs a large amount of information about the current s...