Basic Dorks

cache:target.com
cache:target.com XYZ #check for specific keywords in cached

inurl:index.php?id= site:target.com # check for SQLi
inurl:index.php?id #check for targets globally

filetype:.php site:.gov
target.com filetype:.pdf

Intext:CVE999 site:github.com # search intext

intitle: shellshock site: exploit-db.com

Inurl:contact site:target.com

Intitle: index of inurl: ftp  #vulnerable FTP servers

Intitle: index.of id_rsa -id_rsa.pub # ssh keys laying around 

site:target.com filetype: csv inurl: email.csv #check for public mail lists

Index of database.sql.zip  #Database dumps

Intitle: index of wp-admin  #Wordpress targets

Intitle: Apache2 Ubuntu Default Page: It works  #Apache2 targets

Last updated