Academy

Google Dork

2 min read

Tags :

Heuristiques

  • Cloud
    • intext:{MOT} inurl:amazonaws.com
    • intext:{MOT} inurl:s3.amazonaws.com
    • intext:{MOT} inurl:blob.core.windows.net
    • intext:{MOT} insite:digitaloceanspaces.com
    • insite:googleapis.com "{MOT}"
    • intext:{MOT} insite:storage.googleapis.com
    • intext:{MOT} inurl:aliyuncs.com
    • inurl:s3-external-1.amazonaws.com "{MOT}"
    • inurl:s3.dualstack.us-east-1.amazonaws.com "{MOT}"
    • inurl:firebaseio.com "{MOT}"
    • inurl:jfrog.io "{MOT}"
    • inurl:dropbox.com/s "{MOT}"
    • inurl:box.com/s "{MOT}"
    • inurl:digitaloceanspaces.com "{MOT}"
    • inurl:sharepoint.com "{MOT}"
    • inurl:dev.azure.com "{MOT}"
    • inurl:docs.google.com inurl:"/d/" "{MOT}"
    • inurl:onedrive.live.com "{MOT}"
    • site:drive.google.com "{MOT}"
  • General
    • site:example[.]com ext:log | ext:txt | ext:conf | ext:cnf | ext:ini | ext:env | ext:sh | ext:bak | ext:backup | ext:swp | ext:old | ext:~ | ext:git | ext:svn | ext:htpasswd | ext:htaccess | ext:json
    • inurl:{NOM} ext:doc | ext:docx | ext:odt | ext:pdf | ext:rtf | ext:sxw | ext:psw | ext:ppt | ext:pptx | ext:pps | ext:csv
  • Développer les domaines/sous-domaines
    • site:{site} -www -shop -share -ir -mfa
  • Index Of
    • inurl:sncf intitle:index.of
    • intext:"index of" inurl:sncf
  • XSS parameters
    • site:example[.]com inurl:q= | inurl:s= | inurl:search= | inurl:query= | inurl:keyword= | inurl:lang= inurl:&
  • Fichiers
    • filetype:pdf site:{MOT} "confidential"
    • ext:ppt intext:password
    • inurl:{NOM} inurl:"/phpinfo.php" | inurl:".htaccess" | inurl:"/.git" -github
    • inurl:keolis ext:php intitle:phpinfo
    • inurl:{MOT} inurl:readme | inurl:license | inurl:install | inurl:setup | inurl:config # Fichiers d’installation
  • Code
    • site:pastebin.com sncf
    • site:jsfiddle.net "example.com"
    • `site:codebeautify.org “example.com”
    • site:codepen.io "example.com"
    • site:http://ideone.com | site:http://codebeautify.org | site:http://codeshare.io | site:http://codepen.io | site:http://repl.it | site:http://justpaste.it | site:http://pastebin.com | site:http://jsfiddle.net | site:http://trello.com "sncf"
    • site:codesandbox.io "SNCF"
  • MISC
    • inurl:{MOT} inurl:redir | inurl:url | inurl:redirect | inurl:return | inurl:src=http | inurl:r=http # Site avec redirection
    • site:groups.google.com "sncf" # Groupe google
  • Trouver des programmes Bug Bounty
    • "submit vulnerability report" | "powered by bugcrowd" | "powered by hackerone"
  • Password
    • inurl:j_username inurl:j_password

Graph View