Google Hacking Database (GHDB)

Search the Google Hacking Database or browse GHDB categories

Files containing juicy info

No usernames or passwords, but interesting stuff none the less.

DATE Title Summary
2015-09-02 site:.edu | .gov ext:bkf | ext:bkp | ext:bak | ext... Dork : site:.edu | .gov ext:bkf | ext:bkp | ext:bak | ext:old | ext:backup This Will help t...
2015-09-02 inurl:xampp inurl:perlinfo.pl ext:pl Panels with a lot of data for webservers. Dork by Rootkit Pentester. ...
2015-08-27 inurl:src/viewcvs.cgi/log/.c?= Vulnerable CVS logs ...
2015-08-21 inurl: mil|/issue.php filetype:xls Files containing juicy info of the involved current issuers Author : aye_robot...
2015-08-18 filetype:pac inurl:"/proxy" Search the Web Proxy Autodiscovery Protocol Ing. Daniel Maldonadohttp://www.caceriadespammer...
2015-08-17 intext:bbdd index.of "/" "Parent Di... Databases directory info. Have Fun! Rootkit. ...
2015-08-17 intext:/homedir/.cpanel-datastore/ intext:/homedir/.cpanel-datastore dork displays publicly accessible and indexed cpanel datasto...
2015-08-12 inurl:cgi-bin ext:pl intext:"-rwxr-xr-x" List of Directories of Unix and Linux webs. Enjoy!. By Rootkit. ...
2015-08-10 intext:"Full path to a .htpasswd file in this... Files containing Juicy information from web online tools for generating .htpasswd and giving fu...
2015-07-27 inurl:wp-admin/admin-ajax.php inurl:wp-config.php The dork 'inurl:wp-admin/admin-ajax.php inurl:wp-config.php' finds the 'wp-config.php' file. ...
2015-07-08 intext:OLD_FOREIGN_KEY_CHECKS"; = ext:txt Google dork Description: MySQL dumpGoogle search: intext:OLD_FOREIGN_KEY_CHECKS"; = ext:tx...
2015-07-08 inurl:access.cnf ext:cnf File vulnerability, reveals the path of Password Server. Have fun. This Dork is present By Roo...
2015-06-30 phpMyAdmin SQL Dump # Exploit Title: [phpMyAdmin SQL Dump] # Google Dork: [intext:SET SQL_MODE="NO_AUTO_VALUE...
2015-06-30 "Futon on Apache" inurl:_utils Exposed CouchDB admin panels By Gabor Szathmari...
2015-06-24 "signons.sqlite" intitle:"index of&... "signons.sqlite" intitle:"index of" This dork finds firefox profiles and...
2015-06-10 intitle:"index of" "fic" "... # Exploit Title: intitle:"index of" "fic" "ndx" # Google Dork: i...
2015-06-10 filetype:pcf vpn OR Group Google Dork: filetype:pcf vpn OR Group Author: azupwn This dork allows you to search for pu...
2015-06-10 intitle:"Index of" "mail" &quo... This Dork reveal the folders of "Inbox" and "Sent" for mail servers. Enjoy....
2015-06-03 inurl:/dbg-wizard.php # Exploit Title: Nusphere PHP DBG wizard # Date: 02-06-2015 # Vendor Homepage: http://www.nu...
2015-05-29 intitle:"index of" "archive.pst&quo... Google Dork: intitle:"index of" "archive.pst" -contrib Author: Sphearis ...
2015-05-26 filetype:pub inurl:ssh This dork finds various SSH pub files. Author:NickiK. ...
2015-04-28 intext:JSESSIONID OR intext:PHPSESSID inurl:access... Google dork to find session IDs and potentially impersonate users: intext:JSESSIONID OR inte...
2015-03-31 intitle:index of /weekly cpbackup useful for finding cpanel backups -- Regards, H.R. ...
2015-02-09 filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www Hi, This google dork to find sensitive and interesting information under WEB-INF directory ...
2015-01-27 inurl:"/server-info" intext:"Loaded... Search Apache server information though default module info_module: inurl:"/server-info...
2014-12-31 inurl:"installer-log.txt" intext:"D... Files found with this google dork will show juicy information about a migration of a complete ...
2014-12-11 ext:pem intext:BEGIN CERTIFICATE Vulnerables CA files. By Rootkit. ...
2014-11-24 filetype:mobileconfig intext:password OR intext:pa... filetype:mobileconfig intext:password OR intext:pass...
2014-11-24 ext:log telnet intext:password Telnet logs. By Rootkit. ...
2014-11-18 ext:txt inurl:gov intext:"Content-Type: text/... ext:txt inurl:gov intext:"Content-Type: text/plain; charset=utf-8" AND intext:"R...
2014-11-17 ext:msg OR ext:eml site:gov OR site:edu Mails leak by Rootkit. ...
2014-10-21 filetype:log intext:org.apache.hadoop.hdfs Dork : filetype:log intext:org.apache.hadoop.hdfs List of Log files which contain details ab...
2014-10-09 intext:5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 AN... Looks for text files with SHA1 of "password". These could be tips (not very useful),...
2014-10-09 (intext:mail AND intext:samAccountName) AND (filet... Search for samAccountName (an ActiveDirectory attribute). 50/50 success, some usernames disclo...
2014-09-15 "google confidential" filetype:pdf "google confidential" filetype:pdf Google leaking their own files ...
2014-07-29 http://www.google.com/search?q=filetype:sql site:c... filetype:sql site:com and "insert into" admin "2014" http://facebook.c...
2014-07-04 filetype:sql site:gov and "insert into" filetype:sql site:gov and "insert into" find sql files with data on governments ...
2014-06-03 ("DMZ" | "Public IP" | "P... Files with information DMZ, public IP, private IP network segments, etc. Daniel Maldonado h...
2014-03-31 filetype:pdf "acunetix website audit" &q... Finds reports generated by Acunetix scans. - Andy G - twitter.com/vxhex ...
2014-03-27 inurl:clientaccesspolicy filetype:xml intext:allow... Locates clientaccesspolicy.xml files used by silverlight to determine the cross domain policy ...