Google Hacking Database (GHDB)

Search the Google Hacking Database or browse GHDB categories

Files containing juicy info

No usernames or passwords, but interesting stuff none the less.

DATE Title Summary
2013-11-27 intext:phpMyAdmin SQL Dump filetype:sql intext:INS... intext:phpMyAdmin SQL Dump filetype:sql intext:INSERT INTO `admin` (`id`, `user`, `password`) V...
2013-11-27 inurl:mikrotik filetype:backup mikrotik url backups uploaded.. then.. credentials cracked via http://mikrotikpasswordrecove...
2013-11-25 filetype:xml inurl:sitemap Sitemaps, the opposite of Web Robots Exclusion Detail directory and page map -- -[Volun...
2013-11-25 inurl:"jmx-console/HtmlAdaptor" intitle:... JBoss http://docs.jboss.org/jbossas/docs/Server_Configuration_Guide/4/html/Connecting_to_the_J...
2013-11-25 inurl:tar filetype:gz Tar files Contain user and group information (in addition to potentially useful files) -- ...
2013-11-25 filetype:bak (inurl:php | inurl:asp | inurl:rb) This one could be used to find all sorts of backup data, but this example is limited to just c...
2013-11-25 site:github.com inurl:"id_rsa" -inurl:&q... Finds private SSH keys on GitHub. - Andy G - twitter.com/vxhex ...
2013-11-25 site:github.com inurl:"known_hosts" &quo... Finds SSH known_hosts files on GitHub. - Andy G - twitter.com/vxhex ...
2013-11-25 inurl:/wp-content/uploads/ filetype:sql Google dork for WordPress database backup file (sql): inurl:/wp-content/uploads/ filetype:sq...
2013-11-25 inurl:config "fetch = +refs/heads/*:refs/remo... Git config file Easy way to find Git Repositories -- -[Voluntas Vincit Omnia]- website...
2013-11-25 filetype:php intext:"PROJECT HONEY POT ADDRES... Project Honey Pot anti-spammer detection (http://www.projecthoneypot.org/) Can identify the ...
2013-11-25 inurl:github.com intext:sftp-conf.json +intext:/wp... Find FTP logins and full path disclosures pushed to github inurl:github.com intext:sftp-conf...
2013-09-24 inurl:*/webalizer/* intitle:"Usage Statistics... *Obrigado,* ...
2013-09-24 intitle:index.of intext:.ssh Find peoples ssh public and private keys - tmc / #havok ...
2013-08-08 filetype:txt inurl:~~Wordpress2.txt This dork can be used to find symlinked Wordpress configuration files of other web sites ...
2013-08-08 filetype:txt inurl:wp-config.txt Easily hunt the Wordpress configuration file in of remote web sites Author : Un0wn_X ...
2013-08-08 inurl:~~joomla3.txt filetype:txt By this dork you can find juicy information joomla configuration files Author: Un0wn_X ...
2013-08-08 intitle:"WAMPSERVER Homepage" & inte... #Summary: Wampserver Homepage free access (*http://www.wampserver.com/).* #Author: g00gl3 5c0u...
2013-08-08 inurl:wp-content/uploads/dump.sql This is *Mohan Pendyala* (penetration tester) from india. Google Dork: *inurl:wp-content/u...
2013-08-08 inurl:fluidgalleries/dat/login.dat Works with every single fluidgalleries portofolio sites. Just decrypt the MD5 hash and login on...
2013-08-08 "information_schema" filetype:sql Dork: "information_schema" filetype:sql By: Cr4t3r ...
2013-08-08 inurl:"zendesk.com/attachments/token" si... zendesk is good ticketing system . It has thousands of clients. with the above dork you can s...
2013-04-23 allintext: /iissamples/default/ Searching for "allintext: /iissamples/default/" may provide interesting informatio...
2013-04-22 filetype:php -site:php.net intitle:phpinfo "p... Tries to reduce false positive results from similar dorks. Finds pages containing output from ...
2013-04-22 filetype:ini "This is the default settings fi... Finds PHP configuration files (php.ini) that have been placed in indexed folders. Php.ini defi...
2013-04-09 inurl:"php?id=" intext:"DB_Error Ob... Description: Files containing juicy info Author:ruben_linux ...
2013-02-05 ext:gnucash *Google Search:* http://www.google.com/search?q=ext:gnucash *Description:* Find Gnucas...
2013-02-05 runtimevar softwareVersion= Hits: 807 Config file from Thomson home routers, sometimes it contains password's and user's ...
2012-12-31 inurl:admin intext:username= AND email= AND passwo... -- nitish mehta ...
2012-12-06 inurl:newsnab/www/ automated.config.php Usenet Accounts from Newsnab configs inurl:newsnab/www/ automated.config.php Author: rmccurd...
2012-11-02 inurl:.com/configuration.php-dist Finds the configuration files of the PHP Database on the server. By Chintan GurjarRahul Tygi...
2012-08-21 filetype:avastlic Lots of Avast Licenses . Author : gr00ve_hack3r www.gr00vehack3r.wordpress.com ...
2012-08-21 filetype:docx Domain Registrar $user $pass Dork :- *filetype:docx Domain Registrar $user $pass* Use :- *To find domain login password fo...
2012-08-21 inurl:"phpmyadmin/index.php" intext:&quo... This dork finds unsecured databases ...
2012-05-15 intext:"Thank you for your purchase/trial of ... This dork can fetch you Avast product licenses especially Avast Antiviruses , including Profes...
2012-05-15 ?intitle:index.of?".mysql_history" Find some juicy info in .mysql_history files enjoy bastich ...
2012-05-15 intext:"~~Joomla1.txt" title:"Index... intext:"~~Joomla1.txt" title:"Index of /" Get all server configs files...
2011-12-27 allintext:D.N.I filetype:xls This Query contains sensitive data (D.N.I ;-) ) in a xls format (excel) and D.N.I for People of...
2011-12-19 List of Phone Numbers (In XLS File ) allinurl:tele... This is a dork for a list of Phone Private Numbers in Argentina. Author: Luciano UNLP ...
2011-12-19 Microsoft-IIS/7.0 intitle:index.of name size IIS 7 directory listing. Author: huang ...