Google Dorks | Shahul Hameed

 What is Google Dorks

A Google dork query, sometimes just referred to as a dork, is a search string or custom query that uses advanced search operators to find information not readily available on a website. Google dorking, also known as Google hacking, can return information difficult to locate through simple search queries.

URL: https://www.tutorialspoint.com/google_hacking_tests.htm

          https://www.exploit-db.com/google-hacking-database

Commands:

  • allintext:
  • filetype:
  • intitle:
  • allinurl:
  • link:
  • site:
  • email lists:
  • log files:
  • inurl:
  • intitle:

GHDB:

https://www.exploit-db.com/

Practice Tutorial for Google Dorks

https://www.tutorialspoint.com/google_hacking_tests.html


Parameter Dorks

php?id=1


Specific Domain Search

php?id=1 shopping


Search by Domain

site: simplelearn.com

site: avg.com phishing


Search by URLs

inurl: ethical hacking or "ethical"

inurl:backup.zip
inurl:config secret
inurl:& intext:admin intext:login
intext: “Index of /” +.htaccess
inurl:env filetype:txt
inurl:config.php password
inurl:config.php dbpasswd
inurl:config pass


Search by Title

intitle: admin


Search by File Format

site:cybersecurity.com filetype:pdf,doc,xls


Search by Logs

filetype:logfiles


Search by Cache

cache: google.com


Search by Intext

intext: bug hunting , ssrf , vulnerabilities


Search By AllinText

allintext: hacking networking


Search By Index

index of root

index of credentials site: google.com


Combination of Dorks

site:yahoo.com filetype:pdf intext: ssrf


Search By Link

link: yahoo.com



















Comments

Post a Comment

Popular posts from this blog

Havij - Advanced Automated SQL Injection

Image
Tool Name: Havij (Educational Purpose Only) Description: Havij is an automated SQL injection tool designed for penetration testers to identify and exploit SQL injection vulnerabilities in web applications. It streamlines the testing process, allowing security professionals to efficiently assess the security of a website's database interactions. Download URL:  https://www.darknet.org.uk/2010/09/havij-advanced-automated-sql-injection-tool/ Step 1:  Enter the application target link in the Havij tool and click analyze . Step 2: Get the application details from the Info Section. Step 3: Get the application database's from the  Tables  section. Step 4: Get the application database records with columns details. Successfully logged in the application as shown in the below screenshots.
Read more

Using Burp Suite - Brute Force payloads using XSS Validator(Extension) | Shahul Hameed

Image
XSS Brute Force Payloads using Burp Suite  Step 1: Get the parameter variable from the scope URL. Step 2: Intercept the parameter value using the burp suite application as shown in the below screenshot. Step 3: Clear and add the variable position which goes to perform an attack on the brute force of XSS payloads. Step 4: Install xssValidator extension in the burp suite and we can also add custom payloads in the below payloads box. Step 5: Set the following options in the Payloads option. Step 6: In Intruder clear, the Grep-Match and Grep-Payloads checked option search responses for payload strings. Step 7: Copy the grep phase from xssValidator and paste it into the intruder grep-match. Step 8: Unchecked the option from the payload encoding. Step 9: Start the attack and check the results with the grep value is 1 manually in the web browser which exploited the XSS attack payload.
Read more

SQL Basics | Shahul Hameed

Image
  SQL _Queries   Resource: https://balanced-quince-db1.notion.site/SQL-7347f5956fe347f887b4132c716cd236#17bc403a1add453db519621da47c1de3 Database queries CREATE DATABASE LOGICFIRST; -- creates a new database -- TO DELETE A DATABASE DROP DATABASE LOGICFIRST; DROP SCHEMA LOGICFIRST; -- same as above. u can use DATABASE Or SCHEMA DROP SCHEMA IF EXISTS LOGICFIRST; -- prevents error if db not found   SHOW DATABASES; -- shows all the databases SHOW SCHEMAS; -- same as above. shows schemas/db   USE SYS; -- uses this database for all further commands SHOW TABLES;-- shows all tables in the database being used Table - Create,Delete,Alter primary key - uniquely identifies a row in a table //creating a table CREATE TABLE student(                id INT PRIMARY KEY,     name VARCHAR(30),     gpa DECIMAL(3,2) ); -- ----or----- CREATE ...
Read more