Skip to content

Instantly share code, notes, and snippets.

@ruevaughn
Last active April 30, 2023 12:42
Show Gist options
  • Save ruevaughn/f9aaf80d236947e221c1f7dd67b775d1 to your computer and use it in GitHub Desktop.
Save ruevaughn/f9aaf80d236947e221c1f7dd67b775d1 to your computer and use it in GitHub Desktop.
Google Dorks that I use combined with others and where to find them
site:hackerone.com inurl:reports intext:account takeover intext:disclosed(full)
Company Recon
Some Devs use "Google Groups" as a workplace because it is easy and free. But a lot of sensitive information is leaked Such as "access keys", "aws secrets" ...etc .
Dork: site:http://groups.google.com "$COMPANY"
site:*.google.com Manually search for Subdomains
site: packetpub.com fieltype:pdf
Open Redirects
inurl:redirecturi site:example.com
inurl:redirect_uri site:example.com
inurl:redirecturl site:example.com
inurl:redirect_uri site:example.com
inurl:return site:example.com
inurl:returnurl site:example.com
inurl:relaystate site:example.com
inurl:forward site:example.com
inurl:forwardurl site:example.com
inurl:forward_url site:example.com
inurl:url site:example.com
inurl:uri site:example.com
inurl:dest site:example.com
inurl:destination site:example.com
inurl:next site:example.com
Osint
"username*com"
inurl:resume “john smith”
intext:resume “john smith”
"<name>" (☎ OR ☏ OR ✆ OR 📱)
site:http://github.com/orgs/*/people
intitle:final.attendee.list OR inurl:final.attendee.list
site:http://trello.com password + admin OR username
site:<domain> filetype:PDF
filetype:pdf <domain> "email"
filetype:"doc | pdf | xls | txt | ps | rtf | odt | sxw | psw | ppt | pps | xml"
filetype:xls site:.gov
site:http://cdn2.hubspot.net intitle:2019 OR inurl:2019 "* trends"
"Email delivery powered by Google" ext:pdf OR ext:txt nypd OR fbi OR cia
site:http://s3.amazonaws.com confidential OR "top secret"
filetype:"xls | xlsx | doc | docx | txt | pdf" site:.gov
s3 site:http://amazonaws.com filetype:xls password
"text of a tweet" -site:https://twitter.com
ext:sql intext:"-- phpMyAdmin SQL Dump"
@dutch_osintguy -site:twitter.com/dutch_osintguy
site:http://linkedin.com/in "<job title>" (☎ OR ☏ OR ✆ OR 📱) +"<location>"
@ruevaughn
Copy link
Author

@ruevaughn
Copy link
Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment