Google Dorks for Security Researchers, Penetration Testers, and Cybersecurity Auditors

Admin Panel Dorks

These Google Dorks are designed to help identify exposed admin panels or login portals on web servers. They are commonly used to find unprotected or misconfigured admin interfaces.

1. inurl:"/admin"
   
   

2. inurl:"admin.asp"
   
   

3. intitle:"Login page" inurl:"admin"
   
   

4. inurl:"/admin/login"
   
   

5. intitle:"Administrator Login" inurl:"/admin"
   
   

6. intitle:"login" inurl:"admin"
   
   

7. inurl:"admin/config"
   
   

8. intitle:"Dashboard" inurl:"admin"
   
   

9. inurl:"wp-admin"
   
   

10. inurl:"/admin/index.php"
    
    

11. inurl:"admin.php"
    
    

12. intitle:"Admin Login" inurl:"admin"
    
    

13. inurl:"/login" inurl:"admin"
    
    

14. inurl:"admin/login.php"
    
    

15. intitle:"Administrator" inurl:"/login"
    
    

16. inurl:"/adminpanel"
    
    

17. inurl:"admincp"
    
    

18. intitle:"Login to your account" inurl:"admin"
    
    

19. intitle:"Control Panel" inurl:"admin"
    
    

20. inurl:"/admin/configuration"
    
    

File & Directory Indexing Dorks

File indexing vulnerabilities occur when websites expose their directories to the public. These Google Dorks help locate such files and directories, potentially revealing sensitive information.

21. intitle:"index of" "backup"
    
    

22. intitle:"index of" "config"
    
    

23. intitle:"index of" "password"
    
    

24. intitle:"index of" "logs"
    
    

25. intitle:"index of" "admin"
    
    

26. intitle:"index of" "ftp"
    
    

27. intitle:"index of" "private"
    
    

28. intitle:"index of" "database"
    
    

29. intitle:"index of" "uploads"
    
    

30. intitle:"index of" "files"
    
    

31. intitle:"index of" "test"
    
    

32. intitle:"index of" "secrets"
    
    

33. intitle:"index of" "settings"
    
    

34. intitle:"index of" "html"
    
    

35. intitle:"index of" "images"
    
    

36. intitle:"index of" "video"
    
    

37. intitle:"index of" "scripts"
    
    

38. intitle:"index of" "backups"
    
    

39. intitle:"index of" "docs"
    
    

40. intitle:"index of" "public"
    
    

Sensitive Data Exposure Dorks

Sensitive data, such as passwords, database credentials, or confidential documents, can often be accidentally exposed on the web. These Google Dorks search for potential leaks of such sensitive information.

41. inurl:"/passwords"
    
    

42. inurl:"/config.php"
    
    

43. inurl:"/wp-config.php"
    
    

44. intitle:"index of" "users.db"
    
    

45. intitle:"index of" "secrets.txt"
    
    

46. filetype:sql inurl:"password"
    
    

47. filetype:db inurl:"credentials"
    
    

48. intitle:"index of" "backup.sql"
    
    

49. intitle:"index of" "database.bak"
    
    

50. inurl:"/usernames" filetype:csv
    
    

51. intitle:"index of" "mysql"
    
    

52. filetype:xml inurl:"password"
    
    

53. intitle:"index of" "config.json"
    
    

54. intitle:"index of" "API_keys"
    
    

55. filetype:txt "password"
    
    

56. filetype:csv "users"
    
    

57. intitle:"index of" "private_keys"
    
    

58. intitle:"index of" "database_config"
    
    

59. filetype:json "api_key"
    
    

60. filetype:log inurl:"password"
    
    

Vulnerability Scan Dorks

These Google Dorks help locate instances of vulnerable services, web applications, or misconfigured pages that can be targeted in penetration testing.

61. inurl:"/phpmyadmin"
    
    

62. inurl:"/adminer"
    
    

63. inurl:"/admin.php"
    
    

64. inurl:"/dbadmin"
    
    

65. intitle:"Index of" "login"
    
    

66. inurl:"/install.php"
    
    

67. inurl:"/setup.php"
    
    

68. inurl:"/phpinfo.php"
    
    

69. intitle:"index of" "test.php"
    
    

70. intitle:"index of" "backup"
    
    

71. inurl:"/test"
    
    

72. inurl:"/backup" filetype:sql
    
    

73. inurl:"/cgi-bin/"
    
    

74. intitle:"index of" "php.ini"
    
    

75. intitle:"index of" "error_log"
    
    

76. inurl:"/dev" intitle:"Index of"
    
    

77. inurl:"/staging"
    
    

78. intitle:"Index of" "staging"
    
    

79. inurl:"/cms" intitle:"Index of"
    
    

80. inurl:"/tmp" intitle:"Index of"
    
    

CMS (Content Management System) Dorks

Content Management Systems (CMSs) like WordPress, Joomla, and Drupal are common targets for attackers. These dorks help identify exposed CMS-related files and directories that could be vulnerable to attack.

81. inurl:"/wp-content"
    
    

82. inurl:"/wp-admin"
    
    

83. inurl:"/wp-login.php"
    
    

84. intitle:"WordPress" inurl:"/wp-content/plugins"
    
    

85. intitle:"Joomla" inurl:"/administrator"
    
    

86. intitle:"Drupal" inurl:"/user/login"
    
    

87. intitle:"Magento" inurl:"/admin"
    
    

88. inurl:"/cms/login"
    
    

89. inurl:"/site-admin"
    
    

90. intitle:"index of" "joomla"
    
    

91. inurl:"/wp-includes"
    
    

92. intitle:"index of" "content/plugins"
    
    

93. intitle:"index of" "wp-content/themes"
    
    

94. inurl:"/wp-json"
    
    

95. inurl:"/wp-admin/options.php"
    
    

96. inurl:"/user/login" site:drupal.org
    
    

97. intitle:"index of" "wp-content/uploads"
    
    

98. inurl:"/blog/wp-admin"
    
    

99. inurl:"/joomla/login"
    
    

100. inurl:"/drupal/login"
     
     

Database Dorks

These Google Dorks help locate database-related vulnerabilities, potentially revealing sensitive or misconfigured databases.

101. inurl:"/phpmyadmin/"
     
     

102. intitle:"index of" "db.sql"
     
     

103. filetype:sql "user"
     
     

104. filetype:sql inurl:"admin"
     
     

105. intitle:"index of" "mongodb"
     
     

106. inurl:"/mysql" filetype:sql
     
     

107. inurl:"/dbadmin"
     
     

108. intitle:"Index of" "backup.sql"
     
     

109. intitle:"Index of" "dump.sql"
     
     

110. inurl:"/database/admin"
     
     

Server Configuration Dorks

Misconfigured servers can present a major security risk, as exposed directories and configuration files might reveal critical information. The following dorks help locate misconfigured web servers or server files.

111. intitle:"index of" "server-status"
     
     

112. intitle:"index of" "nginx-status"
     
     

113. intitle:"index of" "server-info"
     
     

114. inurl:"/server-status"
     
     

115. inurl:"/nginx-status"
     
     

116. inurl:"/apache-status"
     
     

117. intitle:"index of" "error_log"
     
     

118. inurl:"/etc/passwd"
     
     

119. inurl:"/var/log/apache2"
     
     

120. intitle:"index of" "passwd"
     
     

121. intitle:"index of" "httpd.conf"
     
     

122. intitle:"index of" "nginx.conf"
     
     

123. inurl:"/etc/shadow"
     
     

124. inurl:"/conf/httpd.conf"
     
     

125. inurl:"/var/www/" intitle:"index of"
     
     

126. intitle:"index of" "ssl.conf"
     
     

127. inurl:"/server-info" filetype:conf
     
     

128. inurl:"/cgi-bin/" inurl:"config"
     
     

129. intitle:"index of" "error"
     
     

130. inurl:"/server-info"
     
     

File Inclusion Vulnerabilities Dorks

File inclusion vulnerabilities can lead to remote code execution or the exposure of sensitive files. The following dorks help uncover such vulnerabilities.

131. inurl:"index.php?page="
     
     

132. inurl:"index.php?file="
     
     

133. inurl:"index.php?module="
     
     

134. inurl:"?page="
     
     

135. intitle:"index of" "etc/passwd"
     
     

136. inurl:"?lang="
     
     

137. inurl:"/readme.txt"
     
     

138. inurl:"/config.php"
     
     

139. inurl:"/includes/db.php"
     
     

140. intitle:"index of" "phpinfo"
     
     

141. inurl:"/docs/configuration"
     
     

142. inurl:"/login.php?redir="
     
     

143. intitle:"index of" "phpmyadmin"
     
     

144. inurl:"/admin/index.php?content="
     
     

145. inurl:"/test.php?file="
     
     

146. intitle:"index of" "php.ini"
     
     

147. inurl:"/login.php?redirect="
     
     

148. inurl:"/admin/index.php?redirect="
     
     

149. inurl:"/config/config.php"
     
     

150. inurl:"/site/admin/config.php"
     
     

Cross-Site Scripting (XSS) Dorks

Cross-site scripting (XSS) is a common vulnerability that allows attackers to inject malicious scripts into webpages. These dorks help find web pages vulnerable to XSS attacks.

151. inurl:"<script>"
     
     

152. inurl:"javascript:void(0)"
     
     

153. inurl:"alert('XSS')"
     
     

154. inurl:"<img src=" onerror="alert(1)">"
     
     

155. inurl:"<iframe src="
     
     

156. inurl:"<body onload="alert()"
     
     

157. inurl:"<script>alert"
     
     

158. inurl:"<script src="
     
     

159. inurl:"<a href="javascript:"
     
     

160. inurl:"<marquee behavior="alternate"
     
     

161. inurl:"<img src=" x=" onerror="alert()"
     
     

162. inurl:"<input type="button" value="button" onclick="alert()"
     
     

163. inurl:"<script type="text/javascript">alert()
     
     

164. intitle:"search results" inurl:"<script>
     
     

165. inurl:"javascript: alert("
     
     

166. inurl:"<script>alert('XSS')</script>
     
     

167. inurl:"<input type="text" onfocus="alert()"
     
     

168. inurl:"<a href="javascript:void(0)"
     
     

Remote File Disclosure Dorks

These dorks are designed to locate file inclusion vulnerabilities that can lead to remote file disclosure, exposing sensitive files.

169. inurl:"/etc/passwd"
     
     

170. inurl:"/etc/shadow"
     
     

171. intitle:"index of" "passwd"
     
     

172. inurl:"/var/log/"
     
     

173. intitle:"index of" "mysql"
     
     

174. inurl:"/config.php"
     
     

175. intitle:"index of" "wp-config.php"
     
     

176. inurl:"/admin/config"
     
     

177. inurl:"/config.yaml"
     
     

178. inurl:"/config.php?file="
     
     

179. inurl:"/etc/nginx/"
     
     

180. inurl:"/var/www/html/"
     
     

181. inurl:"/opt/lampp/etc/"
     
     

182. inurl:"/etc/apache2/"
     
     

183. inurl:"/etc/httpd/"
     
     

184. intitle:"index of" "cgi-bin"
     
     

185. inurl:"/cgi-bin/"
     
     

186. inurl:"/uploads/" filetype:sql
     
     

187. intitle:"index of" "backup"
     
     

188. inurl:"/uploads/" filetype:csv
     
     

189. inurl:"/backups/config.php"
     
     

190. intitle:"index of" "config.php"
     
     

Error Message Dorks

Error messages can leak valuable information about a system or application, helping attackers identify potential weaknesses. These dorks help uncover error messages that reveal sensitive details.

191. inurl:"/error.php"
     
     

192. inurl:"/index.php?error="
     
     

193. inurl:"/404.php"
     
     

194. intitle:"error" inurl:"404"
     
     

195. intitle:"error" inurl:"404 not found"
     
     

196. intitle:"error" inurl:"not found"
     
     

197. intitle:"error" inurl:"server error"
     
     

198. inurl:"/500.php"
     
     

199. inurl:"/error_log"
     
     

200. inurl:"/logs/error_log"
     
     

201. intitle:"index of" "error_log"
     
     

202. inurl:"/err/"
     
     

203. intitle:"index of" "debug"
     
     

204. intitle:"index of" "errors"
     
     

205. inurl:"/database_error"
     
     

206. inurl:"/sql_error"
     
     

207. inurl:"/config_error"
     
     

208. inurl:"/app_error"
     
     

209. inurl:"/server_error"
     
     

210. inurl:"/cgi-bin/error"
     
     

Subdomain Enumeration Dorks

Subdomain enumeration can help identify additional attack surfaces within a target domain. These dorks locate subdomains that might be vulnerable.

211. inurl:"http://www."
     
     

212. inurl:"http://subdomain."
     
     

213. intitle:"index of" "subdomains"
     
     

214. site:subdomain.example.com
     
     

215. inurl:"www.example.com"
     
     

216. intitle:"index of" "test"
     
     

217. intitle:"index of" "subdomain"
     
     

218. inurl:"subdomain.example.com"
     
     

219. inurl:"example.com"
     
     

220. inurl:"/subdomains"
     
     

Miscellaneous Dorks

Here are a few miscellaneous dorks that can help identify various vulnerabilities, misconfigurations, or exposed data.

221. filetype:pdf inurl:"confidential"
     
     

222. filetype:txt inurl:"password"
     
     

223. filetype:log inurl:"error"
     
     

224. filetype:csv inurl:"passwords"
     
     

225. inurl:"/ajax"
     
     

226. filetype:jpg inurl:"admin"
     
     

227. filetype:json "admin"
     
     

228. intitle:"index of" "ftp"
     
     

229. inurl:"/uploads"
     
     

230. inurl:"/docs"
     
     

231. filetype:txt inurl:"creds"
     
     

232. intitle:"index of" "sensitive"
     
     

233. filetype:db inurl:"database"
     
     

234. inurl:"/data"
     
     

235. intitle:"index of" "settings"
     
     

236. inurl:"/admin/settings"
     
     

237. filetype:json inurl:"keys"
     
     

238. inurl:"/email"
     
     

239. filetype:log inurl:"login"
     
     

240. inurl:"/admin/configurations"
     
     

Content Management System (CMS) Vulnerability Dorks

Content Management Systems like WordPress, Joomla, and Drupal are often targeted by attackers. These dorks help identify vulnerabilities specific to CMS platforms.

241. inurl:"/wp-content/plugins"
     
     

242. inurl:"/wp-login.php"
     
     

243. inurl:"/wp-admin"
     
     

244. intitle:"Joomla" inurl:"/administrator"
     
     

245. inurl:"/joomla/administrator"
     
     

246. intitle:"index of" "wp-content/uploads"
     
     

247. inurl:"/cms/admin"
     
     

248. inurl:"/joomla/configuration.php"
     
     

249. inurl:"/drupal/admin"
     
     

250. inurl:"/wordpress/wp-admin"
     
     

251. inurl:"/wp-content/themes"
     
     

252. inurl:"/drupal/modules"
     
     

253. inurl:"/joomla/components"
     
     

254. inurl:"/wordpress/wp-includes"
     
     

255. inurl:"/drupal/sites"
     
     

256. inurl:"/cms/images"
     
     

257. inurl:"/wp-json"
     
     

258. inurl:"/wp-content/themes" filetype:php
     
     

259. inurl:"/drupal/js"
     
     

260. inurl:"/joomla/plugins"
     
     

Email Enumeration Dorks

Email enumeration helps attackers gather valid email addresses from exposed directories or unprotected web pages.

261. inurl:"@example.com"
     
     

262. intitle:"index of" "emails"
     
     

263. filetype:txt inurl:"email"
     
     

264. filetype:csv inurl:"emails"
     
     

265. intitle:"contact" inurl:"email"
     
     

266. inurl:"/mail/" filetype:txt
     
     

267. intitle:"index of" "emails"
     
     

268. inurl:"email" filetype:xls
     
     

269. inurl:"contact" filetype:csv
     
     

270. intitle:"email addresses" inurl:"list"
     
     

271. filetype:pdf "contact email"
     
     

272. inurl:"/mailing_list"
     
     

273. inurl:"/subscribe" inurl:"list"
     
     

274. inurl:"/contact_us" filetype:html
     
     

275. inurl:"@company.com"
     
     

276. intitle:"directory" inurl:"email"
     
     

277. filetype:xml "email" inurl:"contact"
     
     

278. inurl:"/staff_list"
     
     

279. inurl:"/email_list"
     
     

280. intitle:"directory" inurl:"email addresses"
     
     

SQL Injection Dorks

SQL injection is one of the most common and dangerous web vulnerabilities. These dorks help find SQL injection points in web applications.

281. inurl:"id="
     
     

282. inurl:"product_id="
     
     

283. inurl:"cat_id="
     
     

284. inurl:"?page="
     
     

285. inurl:"?id="
     
     

286. inurl:"?cat="
     
     

287. inurl:"?category="
     
     

288. intitle:"error" inurl:"mysql"
     
     

289. intitle:"error" inurl:"sql"
     
     

290. inurl:"?search="
     
     

291. inurl:"?user="
     
     

292. inurl:"&amp;id="
     
     

293. inurl:"&amp;page="
     
     

294. inurl:"&amp;category="
     
     

295. inurl:"?q="
     
     

296. intitle:"index of" "login"
     
     

297. inurl:"/list.php?id="
     
     

298. inurl:"/product.php?id="
     
     

299. inurl:"/catalogue.php?id="
     
     

300. intitle:"index of" "home" inurl:"id="
     
     

Open Directory Dorks

These dorks are useful for finding open directories or file listings that are not secured, exposing sensitive information that could be exploited.

301. intitle:"index of" "admin"
     
     

302. intitle:"index of" "files"
     
     

303. intitle:"index of" "database"
     
     

304. intitle:"index of" "backup"
     
     

305. intitle:"index of" "uploads"
     
     

306. intitle:"index of" "log"
     
     

307. intitle:"index of" "config"
     
     

308. intitle:"index of" "public"
     
     

309. intitle:"index of" "images"
     
     

310. intitle:"index of" "documents"
     
     

311. intitle:"index of" "test"
     
     

312. intitle:"index of" "html"
     
     

313. intitle:"index of" "video"
     
     

314. intitle:"index of" "scripts"
     
     

315. intitle:"index of" "archives"
     
     

316. intitle:"index of" "files"
     
     

317. intitle:"index of" "projects"
     
     

318. intitle:"index of" "secrets"
     
     

319. intitle:"index of" "configs"
     
     

320. intitle:"index of" "backups"
     
     

Vulnerable Scripts and Files Dorks

The following dorks are used to find misconfigured or vulnerable scripts and files that could lead to security breaches.

321. inurl:"/cgi-bin/phpinfo.php"
     
     

322. intitle:"index of" "cgi-bin"
     
     

323. inurl:"/cgi-bin/index.php"
     
     

324. inurl:"/adminer.php"
     
     

325. inurl:"/phpmyadmin/"
     
     

326. inurl:"/admin/config.php"
     
     

327. inurl:"/wp-admin/install.php"
     
     

328. intitle:"phpMyAdmin" inurl:"/index.php"
     
     

329. inurl:"/admin/configurations"
     
     

330. inurl:"/setup.php"
     
     

331. inurl:"/admin/install.php"
     
     

332. inurl:"/admin" inurl:"index.php"
     
     

333. inurl:"/setup/install.php"
     
     

334. inurl:"/admin/cron.php"
     
     

335. intitle:"index of" "admin.php"
     
     

336. inurl:"/admin/configuration.php"
     
     

337. inurl:"/install/index.php"
     
     

338. intitle:"index of" "admin/index.php"
     
     

339. intitle:"index of" "admin/config.php"
     
     

340. inurl:"/adminpanel"
     
     

Directory Traversal Dorks

Directory traversal vulnerabilities allow attackers to access restricted files on a server. These dorks help identify potential directory traversal weaknesses.

341. inurl:"../../../../etc/passwd"
     
     

342. inurl:"../../../etc/passwd"
     
     

343. inurl:"..//..//..//etc/passwd"
     
     

344. inurl:"/../"
     
     

345. inurl:"../../"
     
     

346. intitle:"index of" ".."
     
     

347. inurl:"../../../../../"
     
     

348. intitle:"index of" "../../../"
     
     

349. inurl:"../"
     
     

350. inurl:"/..//"
     
     

351. inurl:"/../..//"
     
     

352. inurl:"..%2F..%2F..%2Fetc%2Fpasswd"
     
     

353. inurl:"..%2F..%2F..%2Fetc%2Fshadow"
     
     

354. inurl:"..//..//etc/"
     
     

355. inurl:"/etc/passwd"
     
     

356. inurl:"../../../../"
     
     

357. intitle:"index of" "../"
     
     

358. inurl:"/admin/../../etc/passwd"
     
     

359. intitle:"index of" "..//..//"
     
     

360. inurl:"..//..//etc/passwd"
     
     

WebCam Dorks

These dorks are designed to locate unsecured webcams and surveillance devices that are accessible through the internet.

361. intitle:"Live View / - AXIS" inurl:"/axis-cgi"
     
     

362. intitle:"IP Camera" inurl:"/view.shtml"
     
     

363. inurl:"/view/index.shtml"
     
     

364. intitle:"webcamXP 5" inurl:"/view.shtml"
     
     

365. inurl:"/webcam" filetype:mp4
     
     

366. inurl:"/live-view.cgi"
     
     

367. intitle:"webcam" inurl:"/stream"
     
     

368. intitle:"camera live feed" inurl:"/view"
     
     

369. inurl:"/axis-cgi/mjpg" filetype:mpg
     
     

370. intitle:"network camera" inurl:"/snapshot.jpg"
     
     

WordPress Vulnerabilities Dorks

WordPress is the most commonly targeted content management system, and these dorks help identify vulnerable WordPress sites or misconfigurations.

371. inurl:"/wp-content/uploads"
     
     

372. inurl:"/wp-content/plugins"
     
     

373. inurl:"/wp-content/themes"
     
     

374. inurl:"/wp-includes/"
     
     

375. inurl:"wp-admin/install.php"
     
     

376. inurl:"wp-config.php"
     
     

377. inurl:"/wp-json"
     
     

378. inurl:"wp-login.php"
     
     

379. inurl:"wp-admin"
     
     

380. intitle:"index of" "wp-content"
     
     

381. intitle:"index of" "wp-config.php"
     
     

382. inurl:"/wp-admin/options.php"
     
     

383. inurl:"/wp-content/themes"
     
     

384. inurl:"/wp-includes/images"
     
     

385. inurl:"/wp-admin/css"
     
     

386. inurl:"/wp-admin/js"
     
     

387. inurl:"/wp-content/plugins/file-manager/"
     
     

388. inurl:"/wp-content/uploads/"
     
     

389. inurl:"/wp-includes/functions.php"
     
     

390. intitle:"index of" "wp-includes"
     
     

Backup File Dorks

Backup files can expose critical data, making them a target for attackers. The following dorks help find these exposed files.

391. inurl:"backup"
     
     

392. intitle:"index of" "backup"
     
     

393. inurl:"/backup/db"
     
     

394. inurl:"/backup/"
     
     

395. inurl:"/backups/"
     
     

396. filetype:sql inurl:"backup"
     
     

397. inurl:"/backup.zip"
     
     

398. filetype:tar inurl:"backup"
     
     

399. inurl:"/backups/config"
     
     

400. inurl:"/backup/wordpress"
     
     

Security Misconfiguration Dorks

Security misconfigurations in a web application can expose sensitive data. These dorks help locate these misconfigurations.

401. intitle:"index of" "admin"
     
     

402. intitle:"index of" "db"
     
     

403. inurl:"/etc/passwd"
     
     

404. inurl:"/config.json"
     
     

405. inurl:"/config.php"
     
     

406. inurl:"/admin/"
     
     

407. inurl:"/backup/"
     
     

408. intitle:"index of" "config"
     
     

409. inurl:"/wp-admin/config"
     
     

410. inurl:"/wp-content/uploads"
     
     

File Permissions Dorks

Incorrect file permissions are a common vulnerability that attackers can exploit to gain unauthorized access. These dorks help identify potential weaknesses related to file permissions.

411. intitle:"index of" "backup"
     
     

412. inurl:"/etc/passwd"
     
     

413. inurl:"/etc/shadow"
     
     

414. inurl:"/tmp/"
     
     

415. inurl:"/root/"
     
     

416. intitle:"index of" "config"
     
     

417. inurl:"/var/www"
     
     

418. intitle:"index of" "logs"
     
     

419. inurl:"/backups/config"
     
     

420. inurl:"/usr/share"
     
     

Exploit Database Dorks

Exploit-db contains various exploits and vulnerabilities. These dorks are designed to search and access relevant vulnerabilities.

421. site:exploit-db.com "CVE"
     
     

422. site:exploit-db.com "vulnerability"
     
     

423. site:exploit-db.com "exploit"
     
     

424. inurl:"exploit-db" "CVE"
     
     

425. inurl:"exploit-db" "remote code execution"
     
     

426. inurl:"exploit-db" "SQL injection"
     
     

427. site:exploit-db.com "RCE"
     
     

428. inurl:"exploit-db" "XSS"
     
     

429. site:exploit-db.com "CVE-"
     
     

430. inurl:"exploit-db" "file inclusion"

Directory Traversal & File Inclusion Dorks

These dorks help identify vulnerable web applications that might be susceptible to directory traversal or local file inclusion (LFI).

431. inurl:"/../../../../etc/passwd"
     
     

432. inurl:"/../../../../../etc/shadow"
     
     

433. inurl:"../../../../../etc/passwd"
     
     

434. inurl:"../../../../../etc/shadow"
     
     

435. inurl:"/index.php?page=../../"
     
     

436. intitle:"Error: 404 Not Found" inurl:"index.php?"
     
     

437. inurl:"/vulnerabilities/exec"
     
     

438. intitle:"file not found" inurl:"/var/log"
     
     

439. inurl:"/../../../etc/"
     
     

440. inurl:"/..//..//etc/passwd"
     
     

441. intitle:"phpinfo" inurl:"/var/www"
     
     

442. inurl:"../../etc/hosts"
     
     

443. inurl:"/index.php?file=../../"
     
     

444. inurl:"/fileserver/../../../etc/passwd"
     
     

445. inurl:"../etc/passwd"
     
     

446. inurl:"/uploads/../../../../etc/passwd"
     
     

447. inurl:"/admin?file=../../"
     
     

448. inurl:"/etc/passwd"
     
     

449. inurl:"/etc/shadow"
     
     

450. inurl:"/etc/hosts"
     
     

Backup Files and Sensitive Information Dorks

Backup files often contain sensitive data, and these dorks help identify exposed backup files on web servers.

451. inurl:"/backup/"
     
     

452. inurl:"/backup.zip"
     
     

453. intitle:"Index of /backups"
     
     

454. intitle:"Index of /backup"
     
     

455. inurl:"/dbbackup/"
     
     

456. inurl:"/database-backup/"
     
     

457. inurl:"/backup.tar.gz"
     
     

458. inurl:"/backup/backup.sql"
     
     

459. inurl:"/database_backups/"
     
     

460. intitle:"Index of /backups" filetype:sql
     
     

461. inurl:"/backups/.git"
     
     

462. inurl:"/admin/backup/"
     
     

463. inurl:"/wp-content/backups/"
     
     

464. inurl:"/backup/*.sql"
     
     

465. intitle:"Index of /" "backup" "zip"
     
     

466. inurl:"/backup/*.tar"
     
     

467. intitle:"backup files" inurl:"list"
     
     

468. inurl:"/backup/old/"
     
     

469. inurl:"/site-backup/"
     
     

470. intitle:"Index of /" "backup" "tar.gz"
     
     

Admin Panel Dorks

Web application administration panels, if not secured, can be vulnerable to unauthorized access. These dorks help locate these sensitive areas.

471. inurl:"admin.php"
     
     

472. inurl:"/admin" inurl:"login"
     
     

473. inurl:"/admin/dashboard"
     
     

474. inurl:"admin/config.php"
     
     

475. intitle:"login - admin"
     
     

476. inurl:"/admin/login"
     
     

477. inurl:"/admin/controlpanel"
     
     

478. intitle:"admin panel" inurl:"login"
     
     

479. intitle:"admin" inurl:"panel"
     
     

480. inurl:"/admin/login.php"
     
     

481. intitle:"admin panel" inurl:"control"
     
     

482. inurl:"/admin/settings"
     
     

483. intitle:"admin login" inurl:"admin"
     
     

484. inurl:"/panel/admin/"
     
     

485. inurl:"/admin-dashboard"
     
     

486. inurl:"/admin_area"
     
     

487. intitle:"admin area" inurl:"index.php"
     
     

488. inurl:"/administrator/"
     
     

489. inurl:"/admin/cp"
     
     

490. inurl:"admin_controlpanel"
     
     

User Enumeration Dorks

These dorks help identify user enumeration vulnerabilities in applications that reveal usernames or accounts.

491. inurl:"username="
     
     

492. intitle:"error" inurl:"user"
     
     

493. intitle:"admin" inurl:"password"
     
     

494. intitle:"user list" inurl:"users"
     
     

495. inurl:"/login?username="
     
     

496. intitle:"user login" inurl:"username"
     
     

497. intitle:"user login" inurl:"account"
     
     

498. inurl:"?user_id="
     
     

499. inurl:"user/login"
     
     

500. intitle:"index of" "users"
     
     

501. inurl:"/members/"
     
     

502. inurl:"/profile/"
     
     

503. inurl:"/users/"
     
     

504. intitle:"user details" inurl:"account"
     
     

505. inurl:"/user_profiles/"
     
     

506. inurl:"/account/" filetype:xml
     
     

507. inurl:"?id=" inurl:"user"
     
     

508. inurl:"/userinfo/"
     
     

509. inurl:"/user_profile"
     
     

510. inurl:"?username="
     
     

Sensitive Directory Listings Dorks

Some websites expose sensitive information through unprotected directory listings. These dorks help find such exposed directories.

511. intitle:"index of" "logs"
     
     

512. intitle:"index of" "admin"
     
     

513. intitle:"index of" "config"
     
     

514. intitle:"index of" "files"
     
     

515. intitle:"index of" "secrets"
     
     

516. intitle:"index of" "database"
     
     

517. intitle:"index of" "backup"
     
     

518. intitle:"index of" "uploads"
     
     

519. intitle:"index of" "scripts"
     
     

520. intitle:"index of" "php"
     
     

521. intitle:"index of" "admin/config"
     
     

522. intitle:"index of" "assets"
     
     

523. intitle:"index of" "document"
     
     

524. intitle:"index of" "admin/data"
     
     

525. intitle:"index of" "settings"
     
     

526. intitle:"index of" "source"
     
     

527. intitle:"index of" "public"
     
     

528. intitle:"index of" "archive"
     
     

529. intitle:"index of" "scripts"
     
     

530. intitle:"index of" "media"
     
     

PHP Vulnerabilities Dorks

PHP vulnerabilities can often lead to serious security breaches. These dorks identify various exposed PHP files or vulnerabilities.

531. inurl:"/phpmyadmin/"
     
     

532. inurl:"/phpinfo.php"
     
     

533. inurl:"/index.php?id="
     
     

534. intitle:"phpinfo" inurl:"/phpinfo.php"
     
     

535. intitle:"phpMyAdmin" inurl:"/index.php"
     
     

536. inurl:"/phpMyAdmin/config.inc.php"
     
     

537. intitle:"phpMyAdmin" inurl:"setup/index.php"
     
     

538. inurl:"/upload.php?file="
     
     

539. intitle:"PHP Info"
     
     

540. inurl:"/phpinfo" filetype:php
     
     

541. inurl:"/public/index.php"
     
     

542. inurl:"/phpmyadmin/scripts/setup.php"
     
     

543. intitle:"index of" "php"
     
     

544. intitle:"phpMyAdmin" inurl:"/db_structure.php"
     
     

545. inurl:"/phpMyAdmin/db_copy.php"
     
     

546. inurl:"/phpmyadmin/config.php"
     
     

547. inurl:"/phpMyAdmin/db_create.php"
     
     

548. inurl:"/phpMyAdmin/export.php"
     
     

549. inurl:"/phpmyadmin/db_select.php"
     
     

550. intitle:"phpMyAdmin" inurl:"/index.php"
     
     

File Disclosure Dorks

These dorks are useful for finding exposed files that should be protected, such as configuration files or backup files.

551. inurl:"/config.php"
     
     

552. intitle:"index of" "config"
     
     

553. inurl:"/wp-config.php"
     
     

554. intitle:"index of" "config.php"
     
     

555. inurl:"/config/config.php"
     
     

556. inurl:"/config/setting.ini"
     
     

557. inurl:"/config/config.yaml"
     
     

558. inurl:"/config/.htaccess"
     
     

559. inurl:"/web.config"
     
     

560. inurl:"/settings.ini"
     
     

561. inurl:"/config/.env"
     
     

562. inurl:"/db_config.php"
     
     

563. inurl:"/admin/settings.php"
     
     

564. intitle:"index of" "admin.php"
     
     

565. inurl:"/admin/backup"
     
     

566. inurl:"/config/db_config.php"
     
     

567. inurl:"/public/config.php"
     
     

568. intitle:"index of" "secret"
     
     

569. inurl:"/admin/.git"
     
     

570. inurl:"/config.php" "password"
     
     

Content Management System (CMS) Exploitation Dorks

CMS platforms like WordPress, Joomla, and Drupal can be vulnerable to various exploits. These dorks can help identify vulnerable installations.

571. inurl:"/wp-admin/"
     
     

572. inurl:"/wp-content/uploads"
     
     

573. inurl:"/wp-content/plugins"
     
     

574. inurl:"/wp-content/themes"
     
     

575. intitle:"index of" "wp-content"
     
     

576. inurl:"/wp-includes/"
     
     

577. inurl:"/wp-login.php"
     
     

578. inurl:"/wp-admin/install.php"
     
     

579. intitle:"Joomla!" inurl:"/administrator"
     
     

580. inurl:"/joomla/administrator"
     
     

581. inurl:"/drupal/admin"
     
     

582. inurl:"/adminer.php"
     
     

583. inurl:"/drupal/modules"
     
     

584. inurl:"/cms/admin"
     
     

585. inurl:"/cms/login"
     
     

586. inurl:"/wordpress/wp-admin"
     
     

587. inurl:"/drupal/sites"
     
     

588. intitle:"index of" "drupal"
     
     

589. inurl:"/joomla/configuration.php"
     
     

590. inurl:"/wordpress/wp-includes"
     
     

Cross-Site Scripting (XSS) Dorks

Cross-Site Scripting (XSS) vulnerabilities allow attackers to inject malicious scripts. These dorks help in finding XSS vulnerabilities.

591. inurl:"<script>"
     
     

592. inurl:"javascript:void(0)"
     
     

593. intitle:"error" inurl:"XSS"
     
     

594. intitle:"index of" "xss"
     
     

595. inurl:"/search?q="
     
     

596. inurl:"?search="
     
     

597. inurl:"?id=" inurl:"name="
     
     

598. inurl:"<script src="
     
     

599. inurl:"/search?query="
     
     

600. inurl:"?page=search"
     
     

601. inurl:"<img src="
     
     

602. inurl:"<script>alert"
     
     

603. inurl:"/search" filetype:php
     
     

604. inurl:"<script src="http"
     
     

605. intitle:"error" inurl:"/search?q="
     
     

606. inurl:"?name="
     
     

607. inurl:"<img src=javascript"
     
     

608. inurl:"<a href="
     
     

609. inurl:"/js/search"
     
     

610. inurl:"search?query="
     
     

Sensitive File Locations Dorks

These dorks target directories or files that should never be exposed to the internet, like configuration files and database backups.

611. intitle:"index of" "database"
     
     

612. inurl:"/config/"
     
     

613. inurl:"/private/"
     
     

614. inurl:"/uploads/"
     
     

615. intitle:"index of" "configurations"
     
     

616. inurl:"/admin/.git"
     
     

617. inurl:"/uploads/backup"
     
     

618. inurl:"/root/"
     
     

619. inurl:"/data/"
     
     

620. inurl:"/private/db"
     
     

621. intitle:"index of" "documents"
     
     

622. inurl:"/config/config.ini"
     
     

623. intitle:"index of" "admin"
     
     

624. inurl:"/root/backup"
     
     

625. inurl:"/uploads/config"
     
     

626. inurl:"/db_backups/"
     
     

Error Message Dorks

Error messages can sometimes reveal sensitive information about web applications, such as database structure or application stack.

627. intitle:"error" inurl:"SQL"
     
     

628. intitle:"error" inurl:"mysql"
     
     

629. inurl:"error_message"
     
     

630. intitle:"error" inurl:"file not found"
     
     

631. inurl:"error" filetype:log
     
     

632. inurl:"error" inurl:"database"
     
     

633. intitle:"error" inurl:"missing"
     
     

634. inurl:"error" inurl:"unauthorized"
     
     

635. inurl:"error" inurl:"403"
     
     

636. inurl:"error" inurl:"not found"
     
     

637. intitle:"error" inurl:"permission"
     
     

638. inurl:"error" inurl:"denied"
     
     

639. inurl:"error" inurl:"server"
     
     

640. intitle:"error" inurl:"503"

Sensitive File Exposure Dorks

These dorks help to find files that should not be publicly accessible but may have been exposed due to misconfigurations.

641. inurl:"/db_config.php"
     
     

642. inurl:"/wp-config.php"
     
     

643. intitle:"index of" "database"
     
     

644. intitle:"index of" "wp-config"
     
     

645. inurl:"/config.php"
     
     

646. intitle:"index of" "config.php"
     
     

647. inurl:"/admin/.git"
     
     

648. intitle:"index of" "logs"
     
     

649. inurl:"/files/.git"
     
     

650. intitle:"index of" "htaccess"
     
     

651. inurl:"/wp-config.php"
     
     

652. intitle:"index of" ".git"
     
     

653. inurl:"/etc/passwd"
     
     

654. inurl:"/etc/shadow"
     
     

655. intitle:"index of" ".env"
     
     

656. inurl:"/admin/.env"
     
     

657. intitle:"index of" "config.yaml"
     
     

658. inurl:"/private/.git"
     
     

659. inurl:"/config/.env"
     
     

660. inurl:"/uploads/backup.zip"
     
     

Insecure Direct Object References (IDOR) Dorks

IDOR vulnerabilities occur when an application exposes references to internal objects (files, database records) to unauthorized users. These dorks help find such vulnerabilities.

661. inurl:"id=" inurl:"view"
     
     

662. inurl:"user_id=" inurl:"profile"
     
     

663. inurl:"product_id=" inurl:"details"
     
     

664. inurl:"file_id=" inurl:"download"
     
     

665. inurl:"/image_id=" inurl:"image"
     
     

666. inurl:"/document_id=" inurl:"view"
     
     

667. inurl:"/users/id="
     
     

668. inurl:"/media/file.php?id="
     
     

669. inurl:"/doc/?id="
     
     

670. inurl:"/user?id="
     
     

671. inurl:"/admin/user?id="
     
     

672. inurl:"/profile.php?uid="
     
     

673. inurl:"/settings?userid="
     
     

674. inurl:"/users.php?id="
     
     

675. inurl:"/products.php?prod_id="
     
     

676. inurl:"/video.php?id="
     
     

Cross-Site Request Forgery (CSRF) Dorks

These dorks identify potential vulnerabilities where a user could be tricked into performing unwanted actions by submitting a request on their behalf.

677. inurl:"action=delete"
     
     

678. inurl:"action=change_password"
     
     

679. inurl:"action=reset_password"
     
     

680. inurl:"action=update_profile"
     
     

681. inurl:"action=post_comment"
     
     

682. inurl:"action=make_purchase"
     
     

683. inurl:"action=add_to_cart"
     
     

684. inurl:"action=submit_payment"
     
     

685. inurl:"action=upload_file"
     
     

686. inurl:"action=upload_image"
     
     

687. inurl:"action=update_settings"
     
     

688. inurl:"action=login"
     
     

689. inurl:"action=logout"
     
     

690. inurl:"action=delete_account"
     
     

691. inurl:"action=send_message"
     
     

Unsecured API Dorks

Unsecured APIs can expose sensitive information. These dorks help identify vulnerable API endpoints.

692. inurl:"/api/v1/"
     
     

693. inurl:"/api/v2/"
     
     

694. inurl:"/api/login"
     
     

695. inurl:"/api/register"
     
     

696. inurl:"/api/users"
     
     

697. inurl:"/api/products"
     
     

698. inurl:"/api/get_info"
     
     

699. inurl:"/api/data"
     
     

700. inurl:"/api/upload"
     
     

Conclusion

With this final entry, we now have a complete list of 700 Google Dorks that can be used in penetration testing, cybersecurity research, vulnerability scanning, and more. These dorks provide a valuable resource for ethical hackers and cybersecurity professionals who need to identify exposed sensitive information, vulnerabilities in web applications, and other security risks.

It's essential to emphasize the ethical responsibility involved in using these dorks. They should only be used with proper authorization and in compliance with applicable laws. Unauthorized scanning or probing of websites without permission can lead to legal consequences.

Related Search Queries:

• Google Dorks for penetration testing
  
  

• SQL Injection Google Dorks
  
  

• XSS Google Dorks
  
  

• CMS vulnerability Dorks
  
  

• File Inclusion vulnerabilities
  
  

• Google hacking techniques
  
  

• Subdomain enumeration dorks
  
  

• How to use Google Dorks in penetration testing
  
  

Author: Gerard King