Google Hacking Database (GHDB)

Search the Google Hacking Database or browse GHDB categories

Files containing passwords

PASSWORDS, for the LOVE OF GOD!!! Google found PASSWORDS!

DATE Title Summary
2015-06-30 site:pastebin.com intext:Username # Exploit Title: [site:pastebin.com intext:Username] # Google Dork: [Pastebin Username & P...
2015-05-29 intext:DB_PASSWORD ext:env This dork finds env files, usually used in Laravel configuration, containing passwords and ot...
2015-05-19 ext:csv intext:"password" This dork finds csv files containing passwords and other juicy information. Author:NickiK. ...
2015-03-10 ext:sql intext:"alter user" intext:"... This dork will show files containing SQL instructions where the administrator set a password f...
2015-02-09 inurl:"security/xamppdirpasswd.txt" This dork shows the plain text password saved in a XAMPP installation when the administrator c...
2014-12-03 inurl:yahoo_site_admin/credentials/ # Exploit Title: [Yahoo Hosting db-credentials] # Google Dork: [inurl:yahoo_site_admin/credent...
2014-09-15 "automatic teller" "operator manual... ATM Passwords "automatic teller" "operator manual" "password" ...
2014-08-21 inurl:ws_ftp.ini "[WS_FTP]" filetype:ini inurl:ws_ftp.ini "[WS_FTP]" filetype:ini Files containing passwords By Dr4GoR...
2014-04-28 xamppdirpasswd.txt filetype:txt xamppdirpasswd.txt filetype:txt...
2014-04-07 inurl:typo3conf/localconf.php typo3 passwords :-) Bruno Schmid ...
2014-03-31 inurl:/backup intitle:index of backup intext:*sql Google Search:https://www.google.com/search?client=opera&q=admin+username+and+pass&sour...
2013-11-25 filetype:password jmxremote Passwords for Java Management Extensions (JMX Remote) Used by jconsole, Eclipse's MAT, Java Vi...
2013-11-25 ext:sql intext:@gmail.com intext:password author:haji ...
2013-11-25 site:github.com inurl:sftp-config.json Find disclosed FTP login credentials in github repositories Credit: RogueCoder...
2013-11-25 site:github.com inurl:sftp-config.json intext:/wp-... Finds disclosed ftp FTP for Wordpress installs, which have been pushed to a public repo on GitH...
2013-09-24 "BEGIN RSA PRIVATE KEY" filetype:key -gi... To find private RSA Private SSL Keys ...
2013-04-22 filetype:sql insite:pass && user Google Dork: filetype:sql insite:pass && user We Can get login username and password...
2013-04-09 ext:sql intext:@hotmail.com intext :password By , NItish Mehta , www.illuminativeworks.com/blog https://www.facebook.com/illuminativework...
2013-04-09 filetype:config inurl:web.config inurl:ftp This google dork to find sensitive information of MySqlServer , "uid, and password" ...
2013-02-05 filetype:inc OR filetype:bak OR filetype:old mysql... Aggregates previous mysql_(p)connect google dorks and adds a new filetype. Searches common fil...
2013-02-05 ext:xml ("proto='prpl-'" | "prpl-ya... *Google Search:* https://www.google.com/search?q=ext:xml%20(%22proto='prpl-'%22%20|%20%22prp...
2012-11-05 allinurl:"User_info/auth_user_file.txt" Google dork for find user info and configuration password of DCForum allinurl:"User_info/...
2012-11-02 inurl:"/dbman/default.pass" A path to a DES encrypted password for DBMan ( http://www.gossamer-threads.com/products/archiv...
2012-11-02 "parent directory" proftpdpasswd intitle... This dork is based on this: http://www.exploit-db.com/ghdb/1212/ but improved cause that is u...
2012-11-02 filetype:xls "username | password" filetype:xls "username | password" This search reveals usernames and/or passwords of ...
2012-11-02 ext:xml ("mode_passive"|"mode_defau... OffSec: So the dork is: ext:xml ("mode_passive"|"mode_default") Th...
2012-08-21 intext:charset_test= email= default_persistent= find facebook email and password ;) ...
2012-08-21 inurl:"passes" OR inurl:"passwords&... Hack the $cr1pt kiddies. There are a lot of Phishing pages hosted on internet , this dork wi...
2012-05-15 filetype:cfg "radius" (pass|passwd|passw... Find config files with radius configs and passwords and secrets... Love Bastich ...
2011-12-27 (username=* | username:* |) | ( ((password=* | pas... Logged username, passwords, hashes Author: GhOsT-PR ...
2011-12-14 filetype:sql inurl:wp-content/backup-* Search for WordPress MySQL database backup. Author: AngelParrot ...
2011-12-12 "My RoboForm Data" "index of" This dork looks for Roboform password files. Author: Robert McCurdy ...
2011-11-19 inurl:"/Application Data/Filezilla/*" OR... this dork locates files containing ftp passwords ...
2011-10-11 filetype:php~ (pass|passwd|password|dbpass|db_pass... Backup or temp versions of php files containing you guessed it passwords or other ripe for the...
2011-09-26 inurl:ftp "password" filetype:xls this string may be used to find many low hanging fruit on FTP sites recently indexed by google....
2011-06-28 filetype:sql "phpmyAdmin SQL Dump" (pass... phpMyAdmin SQL dump with passwords Bastich ...
2011-06-28 filetype:sql "MySQL dump" (pass|password... MySQL database dump with passwords Bastich ...
2011-06-28 filetype:sql "PostgreSQL database dump" ... PostgreSQL database dump with passwords Bastich ...
2011-04-18 filetype:ini "[FFFTP]" (pass|passwd|pass... Asian FTP software -, run the password hash through John etc. Author: Bastich ...
2011-04-18 filetype:ini "FtpInBackground" (pass|pas... Total commander wxc_ftp.ini run has through John etc. or even better use http://wcxftp.org.ru/...