Google Hacking Database (GHDB)

Search the Google Hacking Database or browse GHDB categories

Files containing juicy info

No usernames or passwords, but interesting stuff none the less.

DATE Title Summary
2013-08-08 inurl:wp-content/uploads/dump.sql This is *Mohan Pendyala* (penetration tester) from india. Google Dork: *inurl:wp-content/u...
2013-08-08 inurl:fluidgalleries/dat/login.dat Works with every single fluidgalleries portofolio sites. Just decrypt the MD5 hash and login on...
2013-08-08 "information_schema" filetype:sql Dork: "information_schema" filetype:sql By: Cr4t3r ...
2013-08-08 inurl:"zendesk.com/attachments/token" si... zendesk is good ticketing system . It has thousands of clients. with the above dork you can s...
2013-04-23 allintext: /iissamples/default/ Searching for "allintext: /iissamples/default/" may provide interesting informatio...
2013-04-22 filetype:php -site:php.net intitle:phpinfo "p... Tries to reduce false positive results from similar dorks. Finds pages containing output from ...
2013-04-22 filetype:ini "This is the default settings fi... Finds PHP configuration files (php.ini) that have been placed in indexed folders. Php.ini defi...
2013-04-09 inurl:"php?id=" intext:"DB_Error Ob... Description: Files containing juicy info Author:ruben_linux ...
2013-02-05 ext:gnucash *Google Search:* http://www.google.com/search?q=ext:gnucash *Description:* Find Gnucas...
2013-02-05 runtimevar softwareVersion= Hits: 807 Config file from Thomson home routers, sometimes it contains password's and user's ...
2012-12-31 inurl:admin intext:username= AND email= AND passwo... -- nitish mehta ...
2012-12-06 inurl:newsnab/www/ automated.config.php Usenet Accounts from Newsnab configs inurl:newsnab/www/ automated.config.php Author: rmccurd...
2012-11-02 inurl:.com/configuration.php-dist Finds the configuration files of the PHP Database on the server. By Chintan GurjarRahul Tygi...
2012-08-21 filetype:avastlic Lots of Avast Licenses . Author : gr00ve_hack3r www.gr00vehack3r.wordpress.com ...
2012-08-21 filetype:docx Domain Registrar $user $pass Dork :- *filetype:docx Domain Registrar $user $pass* Use :- *To find domain login password fo...
2012-08-21 inurl:"phpmyadmin/index.php" intext:&quo... This dork finds unsecured databases ...
2012-05-15 intext:"Thank you for your purchase/trial of ... This dork can fetch you Avast product licenses especially Avast Antiviruses , including Profes...
2012-05-15 ?intitle:index.of?".mysql_history" Find some juicy info in .mysql_history files enjoy bastich ...
2012-05-15 intext:"~~Joomla1.txt" title:"Index... intext:"~~Joomla1.txt" title:"Index of /" Get all server configs files...
2011-12-27 allintext:D.N.I filetype:xls This Query contains sensitive data (D.N.I ;-) ) in a xls format (excel) and D.N.I for People of...
2011-12-19 List of Phone Numbers (In XLS File ) allinurl:tele... This is a dork for a list of Phone Private Numbers in Argentina. Author: Luciano UNLP ...
2011-12-19 Microsoft-IIS/7.0 intitle:index.of name size IIS 7 directory listing. Author: huang ...
2011-12-16 Google Dork inurl:Curriculum Vitale filetype:doc (... This dork locates Curriculum Vitale files. Author: Luciano UNLP ...
2011-12-16 Google Dork For Social Security Number ( In Spain ... This dork locates social security numbers. Author: Luciano UNLP ...
2011-11-24 filetype:old (mysql_connect) () There are three of mysql_connects but that all search in .inc or warnings, non search for .old...
2011-11-24 filetype:old (define)(DB_USER|DB_PASS|DB_NAME) this dork locates backed up config files filetype:php~ (define)(DB_USER|DB_PASS|DB_NAME) file...
2011-11-19 filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS this dork locates registry dumps ...
2011-11-19 intitle:index.of? configuration.php.zip this dork finds mostly backed up configuration.php files. Its possible to change the *.zip to ...
2011-11-19 inurl:"/includes/config.php" The Dork Allows you to get data base information from config files. Author: XeNon ...
2011-11-19 inurl:"trace.axd" ext:axd "Applicat... example google dork to find trace.axd, a file used for debugging asp that reveals full http re...
2011-09-26 +intext:"AWSTATS DATA FILE" filetype:txt Shows data downloads containing statistics on the site.Made by AwstatsThe best dork for that sy...
2011-08-25 filetype:ini "Bootstrap.php" (pass|passw... Zend application ini, with usernames, passwords and db info love Bastich ...
2011-07-26 filetype:pem "Microsoft" Microsoft private keys, frequently used for servers with UserID on the same page. -- Sha...
2011-07-26 inurl:server-info intitle:"Server Information... Juicy information about the apache server installation in the website. -- *Regards, Fady ...
2011-07-18 inurl:/push/ .pem apns -"push notifications&q... iphone apple push notification system private keys, frequently unencrypted, frequently with De...
2011-07-18 site:stashbox.org cv Or resume OR curriculum vitae... Searches StashBox for publicly avaliable PDF's or .doc files containing information used in a...
2011-07-18 site:mediafire.com cv Or resume OR curriculum vita... Searches Mediafire for publicly avaliable PDF's containing information used in a CV/Resume/Cur...
2011-07-18 site:docs.google.com intitle:(cv Or resume OR curr... Searches GoogleDocs for publicly avaliable PDF's containing information used in a CV/Resume/Cu...
2011-07-01 site:dl.dropbox.com filetype:pdf cv OR curriculum ... Searches Dropbox for publicly avaliable PDF's containing information used in a CV/Resume/Curri...
2011-05-26 inurl:sarg inurl:siteuser.html Submitter: pipefish Squid User Access Reports that show users' browsing history t...