intitle:"SSL Network Extender Login" -checkpoint.com
intitle:"SSL Network Extender Login" -checkpoint.com
Vulnerable Servers
Vulnerable Servers 相关类别内容索引。GHDB/SHDB 是使用 Google 与其它搜索引擎检索公开信息的 dorks 索引，面向渗透测试者与安全研究人员的搜索语法数据库。
类别
Advisories and Vulnerabilities2,094Pages Containing Login Portals922Files Containing Juicy Info665Various Online Devices371Sensitive Directories308Files Containing Passwords244Error Messages107Footholds97Web Server Detection93Vulnerable Servers92Network or Vulnerability Data77Vulnerable Files64Files Containing Usernames21Sensitive Online Shopping Info11
intext:GlobalProtect Portal inurl:/global-protect intitle:GlobalProtect Portal
intext:GlobalProtect Portal inurl:/global-protect intitle:GlobalProtect Portal
inurl:"cgi-bin/koha"
inurl:"cgi-bin/koha"
intext:"siemens" & inurl:"/portal/portal.mwsl"
intext:"siemens" & inurl:"/portal/portal.mwsl"
allintitle:"ITRS OP5 Monitor"
allintitle:"ITRS OP5 Monitor"
intitle:"FileCatalyst file transfer solution"
intitle:"FileCatalyst file transfer solution"
inurl:"wa.exe?TICKET"
inurl:"wa.exe?TICKET"
Google Dorks for Default XAMPP Dashboards
Google Dorks for Default XAMPP Dashboards
"PMB" AND ("changelog.txt" OR inurl:opac_css)
"PMB" AND ("changelog.txt" OR inurl:opac_css)
allintitle:"Bright Cluster Manager" site:.edu
allintitle:"Bright Cluster Manager" site:.edu
intitle:"Welcome to iTop version" wizard
intitle:"Welcome to iTop version" wizard
intitle:"Installation Wizard – PowerCMS v2"
intitle:"Installation Wizard – PowerCMS v2"
intitle:"OpenVpn Status Monitor"
intitle:"OpenVpn Status Monitor"
Apache Struts 2.x Path Traversal Vulnerability (CVE-2023-50164) Detection Dork
Apache Struts 2.x Path Traversal Vulnerability (CVE-2023-50164) Detection Dork
inurl:install.php intitle:"Froxlor Server Management Panel – Installation"
inurl:install.php intitle:"Froxlor Server Management Panel – Installation"
inurl:"/geoserver/ows?service=wfs"
inurl:"/geoserver/ows?service=wfs"
intitle:"HFS" AND intext:"httpfileserver 2.3" AND -intext:"remote"
intitle:"HFS" AND intext:"httpfileserver 2.3" AND -intext:"remote"
inurl:adm/login.jsp.bak
inurl:adm/login.jsp.bak
intitle:"TileServer GL – Server for vector and raster maps with GL styles"
intitle:"TileServer GL – Server for vector and raster maps with GL styles"
intitle:"index of" "/views/auth/passwords"
intitle:"index of" "/views/auth/passwords"
inurl /editor/filemanager/connectors/uploadtest.html
inurl /editor/filemanager/connectors/uploadtest.html
intext:"user name" intext:"orion core" -solarwinds.com
intext:"user name" intext:"orion core" -solarwinds.com
inurl:RichWidgets/Popup_Upload.aspx
inurl:RichWidgets/Popup_Upload.aspx
intitle:"Vulnerability Report" "Critical" ext:pdf
intitle:"Vulnerability Report" "Critical" ext:pdf
intitle:"Wing FTP Server – Web"
intitle:"Wing FTP Server – Web"
intext:"Powered By Gila CMS"
intext:"Powered By Gila CMS"
site: target.com ext:action | ext:struts | ext:do
site: target.com ext:action | ext:struts | ext:do
intitle:"index of" "shell.php"
intitle:"index of" "shell.php"
intitle:"index of" "filemail.pl"
intitle:"index of" "filemail.pl"
intitle:"index of" "AT-admin.cgi"
intitle:"index of" "AT-admin.cgi"
intext:"(c) GUnet 2003-2007"
intext:"(c) GUnet 2003-2007"
inurl:/+CSCOE+/logon.html
inurl:/+CSCOE+/logon.html
"Powered by Jira Service Desk"
"Powered by Jira Service Desk"
vBulletin 5.0 < 5.5.4 – Unauthenticated Remote Code Execution
vBulletin 5.0 < 5.5.4 – Unauthenticated Remote Code Execution
inurl:"q=user/password"
inurl:"q=user/password"
Drupal CMS – Drupalgeddon2
Drupal CMS – Drupalgeddon2
Joomla! com_joomanager – Arbitrary File Download
Joomla! com_joomanager – Arbitrary File Download
inurl:/proc/self/cwd
inurl:/proc/self/cwd
"dirLIST – PHP Directory Lister" "Banned files: php | php3 | php4 | php5 | htaccess | htpasswd | asp | aspx" "index of" ext:php
"dirLIST – PHP Directory Lister" "Banned files: php | php3 | php4 | php5 | htaccess | htpasswd | asp | aspx" "index of" ext:php
allintext:Copyright Smart PHP Poll. All Rights Reserved. -exploit
allintext:Copyright Smart PHP Poll. All Rights Reserved. -exploit
allinurl:moadmin.php -google -github
allinurl:moadmin.php -google -github
inurl:/elfinder/elfinder.html+intitle:"elFinder 2.0"
inurl:/elfinder/elfinder.html+intitle:"elFinder 2.0"
inurl:CHANGELOG.txt intext:drupal intext:"SA-CORE" -intext:7.32 -site:github.com -site:drupal.org
inurl:CHANGELOG.txt intext:drupal intext:"SA-CORE" -intext:7.32 -site:github.com -site:drupal.org
inurl:robots.txt intext:CHANGELOG.txt intext:disallow ext:txt -site:github.com
inurl:robots.txt intext:CHANGELOG.txt intext:disallow ext:txt -site:github.com
ext:cgi inurl:cgi-bin intext:#!/bin/bash
ext:cgi inurl:cgi-bin intext:#!/bin/bash
"OpenSSL" AND "1.0.1 Server at" OR "1.0.1a Server at" OR "1.0.1b Server at" OR "1.0.1c Server at" OR "1.0.1d Server at" OR "1.0.1e Server at" OR "1.0.1f Server at"
"OpenSSL" AND "1.0.1 Server at" OR "1.0.1a Server at" OR "1.0.1b Server at" OR "1.0.1c Server at" OR "1.0.1d Server at" OR "1.0.1e Server at" OR "1.0.1f Server at"
inurl:"/reports/rwservlet" intext:"Oracle"
inurl:"/reports/rwservlet" intext:"Oracle"
inurl:"struts" filetype:action
inurl:"struts" filetype:action
inurl:.php? intext:CHARACTER_SETS,COLLATIONS, ?intitle:phpmyadmin
inurl:.php? intext:CHARACTER_SETS,COLLATIONS, ?intitle:phpmyadmin
inurl:/wp-content/w3tc/dbcache/
inurl:/wp-content/w3tc/dbcache/