intitle:"Lost Password Reset" | inurl:/secure/pwreset.php | inurl:/portal/index.php
intitle:"Lost Password Reset" | inurl:/secure/pwreset.php | inurl:/portal/index.php
搜索语法/SHDB
GHDB/SHDB 是使用 Google 与其它搜索引擎检索公开信息的 dorks 索引，面向渗透测试者与安全研究人员的搜索语法数据库。
- 类型
- 搜索语法
- 总量
- 7,772
- 页码
- 83
类别
Advisories and Vulnerabilities2,094Pages Containing Login Portals922Files Containing Juicy Info665Various Online Devices371Sensitive Directories308Files Containing Passwords244Error Messages107Footholds97Web Server Detection93Vulnerable Servers92Network or Vulnerability Data77Vulnerable Files64Files Containing Usernames21Sensitive Online Shopping Info11
intitle:"Microsoft+Outlook+Web+Access+Log+On" | inurl:/owa/auth/logon.aspx
intitle:"Microsoft+Outlook+Web+Access+Log+On" | inurl:/owa/auth/logon.aspx
inurl:/tcpipv4.htm
inurl:/tcpipv4.htm
inurl:/server/webapps
inurl:/server/webapps
"Stats generated by pisg v0.73"
"Stats generated by pisg v0.73"
inurl:/index.htm?cat=info&printerInfo
inurl:/index.htm?cat=info&printerInfo
inurl:/index.htm?cat=info&pagesRemaining
inurl:/index.htm?cat=info&pagesRemaining
inurl:/hp/device/supply_status.htm
inurl:/hp/device/supply_status.htm
inurl:/cgi-bin/luci/freifunk/graph/olsrd/topology/
inurl:/cgi-bin/luci/freifunk/graph/olsrd/topology/
inurl:/tcpipv6.htm
inurl:/tcpipv6.htm
inurl:"cgi-bin" "No password set!" " There is no password set on this router."
inurl:"cgi-bin" "No password set!" " There is no password set on this router."
inurl:/node/add/event
inurl:/node/add/event
inurl:wp-content/uploads filetype:xls | filetype:xlsx password
inurl:wp-content/uploads filetype:xls | filetype:xlsx password
intitle:(build 13064) – Info
intitle:(build 13064) – Info
intitle:"CPPLUS DVR -Web View"
intitle:"CPPLUS DVR -Web View"
inurl:http | -inurl:https inurl:ftp ext:pdf taxreturn
inurl:http | -inurl:https inurl:ftp ext:pdf taxreturn
inurl:"server-status" intext:"Apache Server Status"
inurl:"server-status" intext:"Apache Server Status"
inurl:/cgi-bin/MANGA/index.cgi
inurl:/cgi-bin/MANGA/index.cgi
intext:"Powered By OpenCart" -site:opencart.com -inurl:"Powered By OpenCart" -intitle:"OpenCart" -intitle:"powered by"
intext:"Powered By OpenCart" -site:opencart.com -inurl:"Powered By OpenCart" -intitle:"OpenCart" -intitle:"powered by"
inurl:httpmon.php
inurl:httpmon.php
inurl:/uniquesig0/ or inurl:/uniquesig0/InternalSite/
inurl:/uniquesig0/ or inurl:/uniquesig0/InternalSite/
intext:"Please select file to upload:" ext:php
intext:"Please select file to upload:" ext:php
intext:"Thehacker – Agd_Scorp – BLaSTER – Cr@zy_King – KinSize – JeXToXiC – s3f4 – rx5"
intext:"Thehacker – Agd_Scorp – BLaSTER – Cr@zy_King – KinSize – JeXToXiC – s3f4 – rx5"
inurl:"trace" ext:axd intext:"password"
inurl:"trace" ext:axd intext:"password"
intext:"GET http://" ext:txt intext:"password" inurl:log
intext:"GET http://" ext:txt intext:"password" inurl:log
inurl:/net/net/protocol.html
inurl:/net/net/protocol.html
inurl:net/net/airprint.html
inurl:net/net/airprint.html
inurl:trafficcams -intext:trafficcams ext:asp OR ext:htm
inurl:trafficcams -intext:trafficcams ext:asp OR ext:htm
inurl:index.php?id= intext:"mysql_fetch_array"
inurl:index.php?id= intext:"mysql_fetch_array"
-inurl:http | -inurl:https inurl:ftp ext:xls | ext:xlsx bank
-inurl:http | -inurl:https inurl:ftp ext:xls | ext:xlsx bank
intitle:"Mail – AfterLogic WebMail"
intitle:"Mail – AfterLogic WebMail"
intitle:Tomcat Status | inurl:/status?full=true
intitle:Tomcat Status | inurl:/status?full=true
intext:"Roundcube Webmail" intitle:"Welcome to Roundcube Webmail" -site:roundcube.net
intext:"Roundcube Webmail" intitle:"Welcome to Roundcube Webmail" -site:roundcube.net
intitle:FootPrints Login | inurl:/MRcgi/MRentrancePage.pl
intitle:FootPrints Login | inurl:/MRcgi/MRentrancePage.pl
intitle:AP Router New Generation | inurl:/home.asp
intitle:AP Router New Generation | inurl:/home.asp
inurl:.gov/wp-login.php | inurl:.edu/wp-login.php | inurl:.mil/wp-login.php | inurl:.us/wp-login.php
inurl:.gov/wp-login.php | inurl:.edu/wp-login.php | inurl:.mil/wp-login.php | inurl:.us/wp-login.php
" Proudly Served by LiteSpeed Web Server" intitle:index.of./
" Proudly Served by LiteSpeed Web Server" intitle:index.of./
intitle:index.of.mail
intitle:index.of.mail
intitle:"router"inurl:"home.asp"
intitle:"router"inurl:"home.asp"
intext:http | https intext:login | logon intext:password | passcode filetype:xls | filetype:xlsx
intext:http | https intext:login | logon intext:password | passcode filetype:xls | filetype:xlsx
intext:"This is Apache Hadoop release" "Local Logs"
intext:"This is Apache Hadoop release" "Local Logs"
ext:sql intext:username intext:password
ext:sql intext:username intext:password
intitle:"Workspace Login" intext:"WinOcular WorkSpace"
intitle:"Workspace Login" intext:"WinOcular WorkSpace"
inurl:"ftp" intext:"user" | "username" | "userID" | "user ID" | "logon" | "login" intext:"password" | "passcode" filetype:xls | filetype:xlsx
inurl:"ftp" intext:"user" | "username" | "userID" | "user ID" | "logon" | "login" intext:"password" | "passcode" filetype:xls | filetype:xlsx
intext:smtp | pop3 intext:login | logon intext:password | passcode filetype:xls | filetype:xlsx
intext:smtp | pop3 intext:login | logon intext:password | passcode filetype:xls | filetype:xlsx
inurl:"http://canvas" | inurl:"https://canvas" | intitle:"Log In to Canvas"
inurl:"http://canvas" | inurl:"https://canvas" | intitle:"Log In to Canvas"
inurl:"https://blackboard" | inurl:"http://blackboard"
inurl:"https://blackboard" | inurl:"http://blackboard"
inurl:pipermail intitle:index.of parent
inurl:pipermail intitle:index.of parent
inurl:"wp-content/uploads/private"
inurl:"wp-content/uploads/private"
intitle:"SmarterMail Login" inurl:"/Login.aspx"
intitle:"SmarterMail Login" inurl:"/Login.aspx"