***warning start***
The information that you could find with these search terms could contain login details and/or private information/files. If you see a login/password, leave it be, as using it to log onto a website is ILLEGAL in 99.9% of use cases. Don;t download any files or hack any accounts, and use common sense.
I am NOT responsible in any way if you get in trouble with the law, that is YOUR responsibility. You have been warned.
***warning end***
What is Google Dorking?
It is, simply put, using Google search in order to find things that have been accidentally left online, such as passwords, and webcams. Yes, webcams!
Here we'll go over some really easy, yet effective ways of Google Dorking.
Get Started
Open a web browser. Oh, wait, you already do, since you're here! Just go to https://google.com and get ready to paste some text in.
Find FTP servers
FTP stands for File Transfer Protocol. You already know what you'll find if you try this.
I am *not* responsible for any legal trouble you get in. Just look through the results, but DON'T DOWNLOAD ANYTHING!
Simply search:
intitle:"index of" inurl:ftpThat's it! You'll get plenty of results:
Be careful not to download any files, since you're not meant to actually be on the websites, and thus have no permission to download the files.
Find unencrypted websites!
Now, this is a bit annoying, since it can have some false positives. To find insecure FTP servers, simply type:
intitle:"index of" inurl:http
Now, to find unsecure FORUMS, search:
intitle:"forum" inurl:http Log Files With Passwords
This will contain a log file that contains a lot of information in plaintext. For security and legal reasons, I will hide the reults from you. Type:
allintext:password filetype:logYou could also type:
filetype:env "DB_PASSWORD"this will search config files for paswords.
DO NOT LOG ON TO ANY ACCOUNTS SINCE THAT WOULD CROSS THE BORDER BETWEEN LEGAL AND ILLEGAL!
Find Exposed Webcams
Please, don't look for more than a few seconds. It's not nice to spy on people.
To those people who don't care about privacy, click this link. It will give me your IP address. Also, email me your credit card details here. Oh, wait? I thought you "didn't care about privacy because you had nothing to hide"? That settles it, then.
Type:
inurl:"lvappl.htm"Or even:
inurl:top.htm inurl:currenttimeThat concludes today's dorking guide. This isn't the ULTIMATE guide, but it is a very diverse and accurate one.
Comments