Google Dorks

Or DDG dorks.. i know, i know... fuarrrking around with search engines is a fun way to kill time and I didn't see an existing thread, so here we go: post your favorite search queries, preferably ones that yield a handy index of pages we all probably shouldn't be looking through (or just share your go-to queries for pirating ebooks or whatever). I'll leave my contribution in the replies. For those who are unfamiliar with the term: "google dorking" refers to using a search engine's "advanced" filtering logic to find certain kinds of web content more efficiently, typically things that were probably not intended to be crawled like admin portals, database endpoints, pseudo-private file storage, etc.

https://www.google.com/search?q=site%3Aanonfile.com+password Anonfile is indexed by google. Maybe this is common knowledge and I'm just an idiot but if you didn't know now you know too. Lots of login creds up for grabs. Most are stale but I've found some newer lists that still work. Anonfile seems to get used a lot on DB trading forums so there's plenty of interesting lists to poke through, although I haven't found anything too mind-blowing. Filtering for .txt or .csv helps.

>>10079 Seriously? I didn't know you could do this. I've always wanted to get a paypal account but needed to put my credit card info into it, so this is interesting, but i'd be identify theft so no thanks.

>>10078 Are we only suppose to use "site:" or are there more commands?

>>10081 nah just site:anonfile.com . you can of course add other filters on top of that to get more specific results. unfortunately the files themselves don't seem to be consistently indexed, just the landing/download pages. however these pages do contain the full filename with extension so a simple ".txt" or whatever in your search string will get you what you want.

>>10079 to add on to this: i've been poking around for a little while and i've been finding a lot of interesting (paid) tutorial/guide pdfs for black hat seo and botnet soykaf. outside my wheelhouse so not much use to me, but i thought some lainons might be interested to know they're there. i vaguely remember there being a thread for this kind of thing? if i find it i'll dump a few.

>>10083 Please dump it, I'd appreciate it

Should be obvious, but encase someone didn't know https://www.exploit-db.com/google-hacking-database

I've read that some Google queries can be used as attacks on their own. Anybody know how to do this?

>>10143 You need a website that reads the "referrer" header, and then you'd exploit it as a SQL injection or some other vector that relies on it having errors in the parsing of the header.

>>10144 So just to make sure I understand this, you need to have the attack in your search string so it'll be part of the search results page and then click on the website from there to make it read the referrer header from the results page.

>>10083 dump!

A good way to get accounts for websites is to get stolen pornhub accounts or similar and use the email:pass combinations.

hey share some ddg dorks

When I don't feel like using potentially malware ridden Ruskie websites for ebooks I use pdf: <book name> sometimes it works, sometimes it doesn't. I should note that I've been using this only on ddg, I don't use google. >>10217 I suppose this is partly what you wanted to see

>>10217 >>10275 I've found a few good Junji Ito manga using: imgur: junji ito I suppose it might work with some other manga authors as well, but I haven't tried it.

>>10156 Don't fall for the porn trap. It's what they want you to do. Slap the rat using your imagination or pictures of me eating ice-cream MMMMMMM

>>10081 There are more "commands" (it's actually called Search Operators). Here's a short guide: https://www.bruceclay.com/blog/bing-google-advanced-search-operators/ Here's a book with a lot of detailed info: https://books.google.cz/books?id=PNkqDgAAQBAJ&lpg=PA65&ots=8Yx1D3tGnE&dq=bing%20contains%20command&hl=cs&pg=PA65#v=onepage&q=bing%20contains%20command&f=false

dork for open scan reports on internet intitle:"report" ("qualys" | "acunetix" | "nessus" | "netsparker" | "nmap") filetype:html

>>10908 Can somebody link to an actual copy of the book?

Many sites/servers have anonymous accounts created by cypherpunks. Account name:pass looks like this: cypherpunks:cypherpunks And various similar combinations: cypherpunks01:cypherpunks01 cypherpunks01:Cypherpunks01 cypherpunks01:cypherpunks01cypherpunks01 cypherpunks01:Cyp-her-pun-ks0-1 cypherpunks01:C_/Ph3rp@nks01 cypherpunks0(n):cypherpunks0(n) cypherpunk:cypherpunk cpunks:cpunks qwerty:qwerty cypherpunks:contribute for some git repositories

>>10078 Qwant

It reminds me when using tyoogle to harvest my mp3s.

>>10079 >>10078 I think there is a thing about URL malware/scanning feature of both browser giants. Most of them would index URLs that the user had used. I noticed this when I started to paste a specific file URL over every browser I had and after a while, the search term had been indexed. Now in theory, if someone were to download files on a poorly setup delivery network that doesn't have authentication in cookie or URL gibberish, it would be indexed by the search engine. This means even with private companies and such, whenever they download a file, it gets scanned by URL malware scans, and it'll be put into search index. A not-so parallel example is searching for cloudfront.net/files and you get a bunch of direct-download pdfs (because they're somewhat index-able with a offending botnet browser that may also index the pdf while it's open!) some of them are private files, from individuals or even sometimes government or financial documents. There was also a time when you could search a freshly generated IP logger address and when you use it and check logs, it would contain your own IP and the crawlers that tried to probe the said address. Creepy but true, today it won't work though, it seems they have blacklisted crawling loggers but you may make your own domain and try it yourself.

I always wondered how crackers could find new wordpress installations right away and attempt to exploit them. Like if you setup a new wordpress install you will have IPs trying to access it within a week. I guess they just scrape Google and sort by date? Also is there some kind of way to check for newly purchased domains? Because a lot of the time when someone sets up a new website, they get hounded by sales people offering them SEO and internet marketing services straight away. I thought it's an interesting technique.

/r/opendirectories has a bunch of search queries for finding open directories that often contain pirated media, pdfs, random interesting junk and such.

some github dorks im sure you could work into google https://github.com/KathanP19/HowToHunt/pull/85/files

>>12879 tada! site:*/wp-admin/install.php intitle:WordPress Installation

>>11846 idk about this one but here are line to similar books https://b-ok.cc/book/2460472/bbd34b https://b-ok.cc/book/1309060/c75a12 https://b-ok.cc/book/5275683/321b05

ftp servers: intitle:"index of" inrul:ftp email lists: filetype:xls inurl:"email" and of course, the classic webcams intitle:"webcamXP 5" inurl:top.htm inrul:currenttime inurl:"lvappl.htm"

One of my favorite is site:pastebin.com

>>10156 How do I google/ddg dork stolen pornhub accounts?

>>15765 site:pastebin.com "pornhub"

>>15774 >site:pastebin.com "pornhub" holy soykaf lol why haven't I thought of this

does anyone know how to find old facebook accounts . i need to publish somethings in it without getting doxxed

Not really google dorking but an offshoot check out grayhatwarfare for open S3 buckets and also censys.io for open systems

>>15848 Thanks, gonna freak my friends out with this.

>>15822 Why not just make a seporate email for it and a fake name?

>>15848 How...How does that work? How does a img src tag pull that...

>>15876 I really don't know. I actually saw a reddit thread about this once, it was just people saying how it is weird and sutff like that. I suppose the most likely explanation is that on "jailbait" sites, when they post the images they use that tag for whatever reason. But that is just a guess.

>>15883 Oops sorry, I meant to say stuff not "sutff"

>>15876 >>15883 From briefly scrolling it looks like there is/was a website called imgsrc (dot) ru that got associated with the search term. Then Google's image recognition model learned to associate it backwards.

>>15885 >google's *ddg's

>>15885 What was the search in question? It got deleted for some reason

>>15897 Something like IMG+SRC or "IMG SRC" iirc. Not sure why it got deleted, it's an innocuous search term that for unclear and potentially interesting reasons happens to turn up messed up things (although nothing actually illegal, from what I saw). It was clearly marked NSFL and is directly on-topic for a thread about weird things you can find with search engines.

>>15902 I remember seeing a reddit thread a while back which pointed out that searching for a similar innocuous phrase on ddg brings up cp The ddg guys apparently fixed it up but i'm not sure if they really fixed it or just blacklisted the phrase.

>>11867 This seems related. https://lists.cpunks.org It's an interesting mailing list though.

>>11867 There is special website with user-submitted public logins. Instead of using site search that requires JavaScript, you can go directly to site page on the following URL scheme: http://bugmenot.com/view/site.name So far, many logins do work.

There was a drugstore called drogaria precisa that was thankfully rebranded. I want to get information of before it was rebranded, but drogaria precisa is literally drugstore needs, and "Drogaria Precisa" give pages that contains text like "drugstore needs to work," and for some reason "Drogaria Precisa" -"Drogaria Precisa *ar" (since precisa is an auxiliary verb and plain verbs in portuguese ends with -ar) and "Drogaria Precisa" daterange:2400000-2454832 (2400000 is the date the drugstore was founded and 2454832 is an pseudo-arbitrary date that i "assumed" it is the date it got rebranded) gives the same result as "Drogaria Precisa" . What do i do? I have tried removing words that is commonly used before "drogaria" or after "precisa" but i am afraid it will reach the maximum lenght of a search and for some reason the filter -"uma drogaria precisa" does not work.

>>17009 I don't know but I hope you find the answer, Lain.

>>17009 Yandex might save me. "Drogaria Precisa" -"drogaria precisa \1ar" -"drogaria precisa \1er" -"drogaria precisa \1ir" -"drogaria precisa de" excludes results that contains a verb in the plain form after "precisa", but the quotation marks and the filter -"drogaria precisa de" does not work. I have tried "Drogaria Precisa" date:<20090101 but it returns nothing about the drugstore in the first results.

>>17023 The operator that matches the exaxt order of the words in yandex is [], but... "An exact match for "[Drogaria Precisa] -&quot;drogaria precisa \1ar&quot; -&quot;drogaria precisa \1er&quot; -&quot;drogaria precisa de&quot;" was not found. Results for the query displayed without quotation marks."

I used to look up "index of" and look at what stuff people had on unprotected Apache servers. I never really found anything interesting, but it was still fun anyway. You can't really do it as much anymore, I think the default configuration on Apache since then has changed to where you can't just look at the contents of a server anymore unless the admin specifically lets you.

>>10078 Ight then ight listen to what i gots to say toyo my man I be readin old books on Google dorking and it be like DAY UM dorking could do all that for hacking? Buit now it be like nah fam nah and none of it be interesting no more. It's an bsolte technique fam like because we let the botnet control it all. Google bots be trained now, and they is very good at what they do. Content used to be more organic in the day fam. You used to be able to find all sorta shiut with Google and u still can but it used to be more Also, DDG search directives ait the same as Google search directioves I be usin SearX and my own crawlers yo Here be hgow to use searc engies like a hackerL: Google: For corporations, that pro-homosexual media, fully legal purchasing products, large corporate websites, and publicly available info. Google track you a lot I say you man. DDG: It be like Google but a honeypot hosted on Amazon servers, but also with more hassle Id like to tell u more but i be hammerd dawgv

Music blogs [genre/artist] [file format] site:blogspot.com >>16656 That's one of, if not the oldest mailing list. I think it more refers to the term.

>>10078 Basically, dorks or whatever hacks people used to write thick books about a decade ago don't work anymore on modern search engines. Here's official google advice: https://support.google.com/websearch/answer/134479 >No matter what you're looking for, start with a simple search like where's the closest airport? >Search using your voice Refine web searches: https://support.google.com/websearch/answer/2466433 Advanced search: https://support.google.com/websearch/answer/35890 Some basic graphing calculator stuff any PDA could do 20 years ago and Wolfram Mathematica 30 years ago, why do I need Google or Internet connectivity for that: https://support.google.com/websearch/answer/3284611 Yandex seems to discriminate less against cognitive abilities of it's user: https://yandex.com/support/search/query-language/ The rest of search engines are basically LARP. Yes, you can use heckin hashbangerinos for direct site search in DuckDuckGo (list of which you otherwise should memorize or write down somewhere alongside), but what for, to feed them more metadata about yourself, Mozilla address bar already does all possible site search engines. https://duckduckgo.com/bang_lite.html Remember old 8/tech/ FAQ? https://archive.is/2015.06.24-075735/https://8ch.net/tech/ddg.html >Gabriel Weinberg, the founder of DuckDuckGo, used to run the Names Database.[1] This was a website that aimed to connect people who had lost contact by gathering lots and lots of e-mail addresses. Getting access could be done by either paying money, or submitting lots of e-mail addresses of other people. Since the service revolved around gathering personal information, it is very suspicious for Gabriel Weinberg to start a business that is privacy-oriented. Searx is just a random mashup of whatever scraps big search engines an instance proxies for are in mood responding today, a search engine centipede. I have no idea how we have come to this. I want to make my own index of some particular website, are there tutorials and software on how to?

>>18530 It's not hard conceptually. You start with a set of pages you already know about, then you recursively follow links to find more. You could populate your initial set by generating searches in other search engines.

>>17046 My advice is not to click any of the dropfile links.

>>18533 Spidering a website is easy, especially if we talk about conservative stuff that adheres to directory structure or is outright flat. But what next, how do I make this index useful to the public, should I store it compressed, what software should I run for it to become searchable? I can't even find software that does full text searches on html files on my localhost computer, let alone am I clueless about web server stuff.

>>18535 There are ready-made solutions for search out there, ElasticSearch comes to mind. Effectively you would need to strip the html tags and dump the raw text into a database. Let the database software worry about data compression and storage. You can make this all work on your local machine, after figuring that out it isn't that large a step to get it online, but getting it optimized and running smoothly is another story.

>>18535 YaCY might be an interesting candidate. Apache SOLR, Lucerne.

>>18535 yacy works for this handily, its a single system with a crawler, indexer, seach system, and a webfrontend. Xapian is also a handy dandy searchengine that you can work with through a few languages, but you'll need to spider yourself

>>10078 Youtube has search operators and dorks too: https://seosly.com/youtube-search-operators/ Disregard the cancerous layout and images, it's the fullest list I could find. https://github.com/C4T4P1LL4/youtube-dorks Some default camera file naming scheme examples. All works through Invidious proxies.

finding gitea servers: intext:"Gitea - Git with a cup of tea" inurl:"/explore/repos" finding invidious instances: intext:"Invidious" inurl:"/feed/popular"

>>10078 true classic intitle:"Index of" inurl:"sql"