ext:(doc | pdf | xls | txt |) (intext:confidential salary) inurl:confidential
ext:(doc | pdf | xls | txt |) (intext:confidential salary) inurl:confidential
搜索语法/SHDB
GHDB/SHDB 是使用 Google 与其它搜索引擎检索公开信息的 dorks 索引，面向渗透测试者与安全研究人员的搜索语法数据库。
- 类型
- 搜索语法
- 总量
- 7,772
- 页码
- 31
类别
Advisories and Vulnerabilities2,094Pages Containing Login Portals922Files Containing Juicy Info665Various Online Devices371Sensitive Directories308Files Containing Passwords244Error Messages107Footholds97Web Server Detection93Vulnerable Servers92Network or Vulnerability Data77Vulnerable Files64Files Containing Usernames21Sensitive Online Shopping Info11
inurl:jasperserver-pro/login.html
inurl:jasperserver-pro/login.html
inurl:?XDEBUG_SESSION_START=phpstorm
inurl:?XDEBUG_SESSION_START=phpstorm
"machform" inurl:"view.php"
"machform" inurl:"view.php"
"password 7" ext:txt | ext:log | ext:cfg
"password 7" ext:txt | ext:log | ext:cfg
intitle:"index of" "idx_config"
intitle:"index of" "idx_config"
intitle:final.attendee.list | inurl:final.attendee.list
intitle:final.attendee.list | inurl:final.attendee.list
ext:xlsx inurl:database
ext:xlsx inurl:database
filetype:log inurl:paypal
filetype:log inurl:paypal
inurl:/jsps/testoperation.jsp "Test Operation"
inurl:/jsps/testoperation.jsp "Test Operation"
site:p2.*.* intitle:"login"
site:p2.*.* intitle:"login"
inurl:/config/device/wcd
inurl:/config/device/wcd
inurl:/Jview "zoom"
inurl:/Jview "zoom"
allintext:@gmail.com filetype:log
allintext:@gmail.com filetype:log
intext:"Incom CMS 2.0"
intext:"Incom CMS 2.0"
inurl:https://trello.com AND intext:@gmail.com AND intext:password
inurl:https://trello.com AND intext:@gmail.com AND intext:password
inurl:oidc/authorize
inurl:oidc/authorize
inurl:authorization.ping
inurl:authorization.ping
intitle:Login intext:HIKVISION inurl:login.asp?
intitle:Login intext:HIKVISION inurl:login.asp?
inurl:weblogin intitle:("USG20-VPN"|"USG20W-VPN"|USG40|USG40W|USG60|USG60W|USG110|USG210|USG310|USG1100|USG1900|USG2200|"ZyWALL110"|"ZyWALL310"|"ZyWALL1100"|ATP100|ATP100W|ATP200|ATP500|ATP700|ATP800|VPN50|VPN100|VPN300|VPN000|"FLEX")
inurl:weblogin intitle:("USG20-VPN"|"USG20W-VPN"|USG40|USG40W|USG60|USG60W|USG110|USG210|USG310|USG1100|USG1900|USG2200|"ZyWALL110"|"ZyWALL310"|"ZyWALL1100"|ATP100|ATP100W|ATP200|ATP500|ATP700|ATP800|VPN50|VPN100|VPN300|VPN000|"FLEX")
inurl:"/phpmyadmin/user_password.php
inurl:"/phpmyadmin/user_password.php
intitle:"index of" intext:"apikey.txt
intitle:"index of" intext:"apikey.txt
inurl:idp/Authn/UserPassword
inurl:idp/Authn/UserPassword
intitle:"index of" "*Maildir/new"
intitle:"index of" "*Maildir/new"
intext:"SonarQube" + "by SonarSource SA." + "LGPL v3"
intext:"SonarQube" + "by SonarSource SA." + "LGPL v3"
site:ftp.*.*.* "ComputerName=" + "[Unattended] UnattendMode"
site:ftp.*.*.* "ComputerName=" + "[Unattended] UnattendMode"
inurl:/xprober ext:php
inurl:/xprober ext:php
inurl:/cgi-bin/manlist?section
inurl:/cgi-bin/manlist?section
inurl:/wp-content/themes/altair/
inurl:/wp-content/themes/altair/
inurl:/pro_users/login
inurl:/pro_users/login
AXIS Camera exploit
AXIS Camera exploit
inurl:"/php/info.php" "PHP Version"
inurl:"/php/info.php" "PHP Version"
intitle:"Exchange Log In"
intitle:"Exchange Log In"
inurl:adfs inurl:wctx inurl:wtrealm -microsoft.com
inurl:adfs inurl:wctx inurl:wtrealm -microsoft.com
intitle:"Humatrix 8"
intitle:"Humatrix 8"
intext:"user name" intext:"orion core" -solarwinds.com
intext:"user name" intext:"orion core" -solarwinds.com
intitle:("Index of" AND "wp-content/plugins/boldgrid-backup/=")
intitle:("Index of" AND "wp-content/plugins/boldgrid-backup/=")
inurl:idp/prp.wsf
inurl:idp/prp.wsf
"– Dumped from database version" + "– Dumped by pg_dump version" ext:txt | ext:sql | ext:env | ext:log
"– Dumped from database version" + "– Dumped by pg_dump version" ext:txt | ext:sql | ext:env | ext:log
inurl:nidp/idff/sso
inurl:nidp/idff/sso
"mailer_password:" + "mailer_host:" + "mailer_user:" + "secret:" ext:yml
"mailer_password:" + "mailer_host:" + "mailer_user:" + "secret:" ext:yml
intitle:"NetCamSC*"
intitle:"NetCamSC*"
intitle:"NetCamXL*"
intitle:"NetCamXL*"
"System" + "Toner" + "Input Tray" + "Output Tray" inurl:cgi
"System" + "Toner" + "Input Tray" + "Output Tray" inurl:cgi
/etc/config + "index of /" /
/etc/config + "index of /" /
intitle:"web client: login"
intitle:"web client: login"
"Powered by vBulletin(R) Version 5.6.3"
"Powered by vBulletin(R) Version 5.6.3"
"The SQL command completed successfully." ext:txt | ext:log
"The SQL command completed successfully." ext:txt | ext:log
inurl:Sitefinity/Authenticate/SWT
inurl:Sitefinity/Authenticate/SWT
intext:construct('mysql:host
intext:construct('mysql:host