Google Hacking Database (GHDB)

Search the Google Hacking Database or browse GHDB categories

Files containing juicy info

No usernames or passwords, but interesting stuff none the less.

DATE Title Summary
2015-05-29 intitle:"index of" "archive.pst&quo... Google Dork: intitle:"index of" "archive.pst" -contrib Author: Sphearis ...
2015-05-26 filetype:pub inurl:ssh This dork finds various SSH pub files. Author:NickiK. ...
2015-04-28 intext:JSESSIONID OR intext:PHPSESSID inurl:access... Google dork to find session IDs and potentially impersonate users: intext:JSESSIONID OR inte...
2015-03-31 intitle:index of /weekly cpbackup useful for finding cpanel backups -- Regards, H.R. ...
2015-02-09 filetype:xml inurl:/WEB-INF/ inurl:ftp:// -www Hi, This google dork to find sensitive and interesting information under WEB-INF directory ...
2015-01-27 inurl:"/server-info" intext:"Loaded... Search Apache server information though default module info_module: inurl:"/server-info...
2014-12-31 inurl:"installer-log.txt" intext:"D... Files found with this google dork will show juicy information about a migration of a complete ...
2014-12-11 ext:pem intext:BEGIN CERTIFICATE Vulnerables CA files. By Rootkit. ...
2014-11-24 filetype:mobileconfig intext:password OR intext:pa... filetype:mobileconfig intext:password OR intext:pass...
2014-11-24 ext:log telnet intext:password Telnet logs. By Rootkit. ...
2014-11-18 ext:txt inurl:gov intext:"Content-Type: text/... ext:txt inurl:gov intext:"Content-Type: text/plain; charset=utf-8" AND intext:"R...
2014-11-17 ext:msg OR ext:eml site:gov OR site:edu Mails leak by Rootkit. ...
2014-10-21 filetype:log intext:org.apache.hadoop.hdfs Dork : filetype:log intext:org.apache.hadoop.hdfs List of Log files which contain details ab...
2014-10-09 intext:5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 AN... Looks for text files with SHA1 of "password". These could be tips (not very useful),...
2014-10-09 (intext:mail AND intext:samAccountName) AND (filet... Search for samAccountName (an ActiveDirectory attribute). 50/50 success, some usernames disclo...
2014-09-15 "google confidential" filetype:pdf "google confidential" filetype:pdf Google leaking their own files ...
2014-07-29 http://www.google.com/search?q=filetype:sql site:c... filetype:sql site:com and "insert into" admin "2014" http://facebook.c...
2014-07-04 filetype:sql site:gov and "insert into" filetype:sql site:gov and "insert into" find sql files with data on governments ...
2014-06-03 ("DMZ" | "Public IP" | "P... Files with information DMZ, public IP, private IP network segments, etc. Daniel Maldonado h...
2014-03-31 filetype:pdf "acunetix website audit" &q... Finds reports generated by Acunetix scans. - Andy G - twitter.com/vxhex ...
2014-03-27 inurl:clientaccesspolicy filetype:xml intext:allow... Locates clientaccesspolicy.xml files used by silverlight to determine the cross domain policy ...
2014-03-27 inurl:crossdomain filetype:xml intext:allow-access... Locates crossdomain.xml files used by flash/flex/silverlight to determine the cross domain pol...
2014-02-05 site:bitbucket.org inurl:.bash_history Finding Sensitive data site:bitbucket.org inurl:.bash_history By Pharos ...
2013-11-27 intext:phpMyAdmin SQL Dump filetype:sql intext:INS... intext:phpMyAdmin SQL Dump filetype:sql intext:INSERT INTO `admin` (`id`, `user`, `password`) V...
2013-11-27 inurl:mikrotik filetype:backup mikrotik url backups uploaded.. then.. credentials cracked via http://mikrotikpasswordrecove...
2013-11-25 filetype:xml inurl:sitemap Sitemaps, the opposite of Web Robots Exclusion Detail directory and page map -- -[Volun...
2013-11-25 inurl:"jmx-console/HtmlAdaptor" intitle:... JBoss http://docs.jboss.org/jbossas/docs/Server_Configuration_Guide/4/html/Connecting_to_the_J...
2013-11-25 inurl:tar filetype:gz Tar files Contain user and group information (in addition to potentially useful files) -- ...
2013-11-25 filetype:bak (inurl:php | inurl:asp | inurl:rb) This one could be used to find all sorts of backup data, but this example is limited to just c...
2013-11-25 site:github.com inurl:"id_rsa" -inurl:&q... Finds private SSH keys on GitHub. - Andy G - twitter.com/vxhex ...
2013-11-25 site:github.com inurl:"known_hosts" &quo... Finds SSH known_hosts files on GitHub. - Andy G - twitter.com/vxhex ...
2013-11-25 inurl:/wp-content/uploads/ filetype:sql Google dork for WordPress database backup file (sql): inurl:/wp-content/uploads/ filetype:sq...
2013-11-25 inurl:config "fetch = +refs/heads/*:refs/remo... Git config file Easy way to find Git Repositories -- -[Voluntas Vincit Omnia]- website...
2013-11-25 filetype:php intext:"PROJECT HONEY POT ADDRES... Project Honey Pot anti-spammer detection (http://www.projecthoneypot.org/) Can identify the ...
2013-11-25 inurl:github.com intext:sftp-conf.json +intext:/wp... Find FTP logins and full path disclosures pushed to github inurl:github.com intext:sftp-conf...
2013-09-24 inurl:*/webalizer/* intitle:"Usage Statistics... *Obrigado,* ...
2013-09-24 intitle:index.of intext:.ssh Find peoples ssh public and private keys - tmc / #havok ...
2013-08-08 filetype:txt inurl:~~Wordpress2.txt This dork can be used to find symlinked Wordpress configuration files of other web sites ...
2013-08-08 filetype:txt inurl:wp-config.txt Easily hunt the Wordpress configuration file in of remote web sites Author : Un0wn_X ...
2013-08-08 inurl:~~joomla3.txt filetype:txt By this dork you can find juicy information joomla configuration files Author: Un0wn_X ...