google-dorks-bug-bounty

KO | EN

gitlite — search

#javascript #python #ai #llm #golang #deep-learning #nodejs #macos #cli #vue #pytorch #mcp #ios #open-source

google-dorks-bug-bounty

(★ 1,889)

A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

파일 탐색기

최종 버전 다운로드 (.zip)

- index.html
LICENSE
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Google Dorks for Bug Bounty

A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

[Live Tool](https://taksec.github.io/google-dorks-bug-bounty/)

[![tool screenshot](https://github.com/TakSec/google-dorks-bug-bounty/assets/27094033/3ff009d7-f402-4eb2-8321-ce22eeeb5605)](https://taksec.github.io/google-dorks-bug-bounty/)

[![Twitter URL](https://img.shields.io/twitter/url/https/twitter.com/TakSec.svg?style=social&label=Follow%20%40TakSec)](https://twitter.com/TakSec)
</p>

---

### Broad domain search w/ negative search

```
site:example.com -www -shop -share -ir -mfa
```

### PHP extension w/ parameters

```
site:example.com ext:php inurl:?
```

### API Endpoints

```
site:example[.]com inurl:api | site:*/rest | site:*/v1 | site:*/v2 | site:*/v3
```

### Juicy Extensions

### High % inurl keywords

### Server Errors

### XSS prone parameters

### Open Redirect prone parameters

### SQLi Prone Parameters

### SSRF Prone Parameters

### LFI Prone Parameters

### RCE Prone Parameters

### File upload endpoints

```
site:example.com intext:”choose file” | intext:"select file" | intext:"upload PDF"
```

### API Docs

### Login Pages

```
inurl:login | inurl:signin | intitle:login | intitle:signin | inurl:secure site:example[.]com
```

### Test Environments

### Sensitive Documents

### Sensitive Parameters

```
inurl:email= | inurl:phone= | inurl:name= | inurl:user= inurl:& site:example[.]com
```

### Adobe Experience Manager (AEM)

### Disclosed XSS and Open Redirects

```
site:openbugbounty.org inurl:reports intext:"example.com"
```

### Google Groups

```
site:groups.google.com "example.com"
```

### Code Leaks

```
site:pastebin.com "example.com"
```

```
site:jsfiddle.net "example.com"
```

```
site:codebeautify.org "example.com"
```

```
site:codepen.io "example.com"
```

### Cloud Storage

```
site:s3.amazonaws.com "example.com"
```

```
site:blob.core.windows.net "example.com"
```

```
site:googleapis.com "example.com"
```

```
site:drive.google.com "example.com"
```

```
site:dev.azure.com "example[.]com"
```

```
site:onedrive.live.com "example[.]com"
```

```
site:digitaloceanspaces.com "example[.]com"
```

```
site:sharepoint.com "example[.]com"
```

```
site:s3-external-1.amazonaws.com "example[.]com"
```

```
site:s3.dualstack.us-east-1.amazonaws.com "example[.]com"
```

```
site:dropbox.com/s "example[.]com"
```

```
site:docs.google.com inurl:"/d/" "example[.]com"
```

### JFrog Artifactory

```
site:jfrog.io "example[.]com"
```

### Firebase

```
site:firebaseio.com "example[.]com"
```

## Dorks that work better w/o domain

### Bug Bounty programs and Vulnerability Disclosure Programs

```
"submit vulnerability report" | "powered by bugcrowd" | "powered by hackerone"
```

```
site:*/security.txt "bounty"
```

### Apache Server Status Exposed

```
site:*/server-status apache
```

### WordPress

```
inurl:/wp-admin/admin-ajax.php
```

### Drupal

```
intext:"Powered by" & intext:Drupal & inurl:user
```

### Joomla

```
site:*/joomla/login
```

---

Medium articles for more dorks:

https://thegrayarea.tech/5-google-dorks-every-hacker-needs-to-know-fed21022a906

https://infosecwriteups.com/uncover-hidden-gems-in-the-cloud-with-google-dorks-8621e56a329d

https://infosecwriteups.com/10-google-dorks-for-sensitive-data-9454b09edc12

Top Parameters:

https://github.com/lutfumertceylan/top25-parameter

Proviesec dorks:

https://github.com/Proviesec/google-dorks

google-dorks-bug-bounty

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

google-dorks-bug-bounty

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README