Advanced Google Dorking Commands

Introduction:

Google hacking, also known as Google Dorking, is a computer hacking technique that uses Google Search and other Google applications to find security holes in the configuration and computer code that websites use.

Google Dorking involves using advanced operators in the Google search engine to locate specific strings of text within search results. Some of the more popular examples are finding specific versions of vulnerable Web applications.

As you progress in your use of Google Dorks, here are some advanced commands to test out:

1.  site:static.ow.ly/docs/ intext:@gmail.com | Password
2. filetype:sql intext:wp_users phpmyadmin
3. intext:”Dumping data for table `orders`”
4. “Index of /wp-content/uploads/backupbuddy_backups” zip
5. Zixmail inurl:/s/login?
6. inurl:/remote/login/ intext:”please login”|intext:”FortiToken clock drift detected”
7. inurl:/WebInterface/login.html
8. inurl:dynamic.php?page=mailbox
9. inurl:/sap/bc/webdynpro/sap/ | “sap-system-login-oninputprocessing”
10. intext:”Powered by net2ftp”

Please post any questions or comments below.

– Thank you –