0% found this document useful (0 votes)
93 views4 pages

Git Hub Dorks

The document contains a list of GitHub dorks and file names that could be used to find sensitive information like API keys, passwords, and usernames. The dorks and file names are grouped into different categories including ones for finding different programming languages, API keys, passwords, usernames, and ones using dates and file extensions.

Uploaded by

Great
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
93 views4 pages

Git Hub Dorks

The document contains a list of GitHub dorks and file names that could be used to find sensitive information like API keys, passwords, and usernames. The dorks and file names are grouped into different categories including ones for finding different programming languages, API keys, passwords, usernames, and ones using dates and file extensions.

Uploaded by

Great
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 4

filename:manifest.

xml

filename:travis.yml

filename:vim_settings.xml

filename:database

filename:prod.exs NOT prod.secret.exs

filename:prod.secret.exs

filename:.npmrc _auth

filename:.dockercfg auth

filename:WebServers.xml

filename:.bash_history <Domain name>

filename:sftp-config.json

filename:sftp.json path:.vscode

filename:secrets.yml password

filename:.esmtprc password

filename:passwd path:etc

filename:dbeaver-data-sources.xml

path:sites databases password

filename:config.php dbpasswd

filename:prod.secret.exs

filename:configuration.php JConfig password

filename:.sh_history

shodan_api_key language:python

filename:shadow path:etc

JEKYLL_GITHUB_TOKEN

filename:proftpdpasswd

filename:.pgpass

filename:idea14.key

filename:hub oauth_token

HEROKU_API_KEY language:json

HEROKU_API_KEY language:shell
SF_USERNAME salesforce

filename:.bash_profile aws

extension:json api.forecast.io

filename:.env MAIL_HOST=smtp.gmail.com

filename:wp-config.php

extension:sql mysql dump

filename:credentials aws_access_key_id

filename:id_rsa or filename:id_dsa

GitHub Dorks for Finding Languages

language:python username

language:php username

language:sql username

language:html password

language:perl password

language:shell username

language:java api

HOMEBREW_GITHUB_API_TOKEN language:shell

GiHub Dorks for Finding API Keys, Tokens and Passwords

api_key

“api keys”

authorization_bearer:

oauth

auth

authentication

client_secret

api_token:

“api token”

client_id

password
user_password

user_pass

passcode

client_secret

secret

password hash

OTP

user auth

GitHub Dorks for Finding Usernames

user:name (user:admin)

org:name (org:google type:users)

in:login (<username> in:login)

in:name (<username> in:name)

fullname:firstname lastname (fullname:<name> <surname>)

in:email (data in:email)

GitHub Dorks for Finding Information using Dates

created:<2012–04–05

created:>=2011–06–12

created:2016–02–07 location:iceland

created:2011–04–06..2013–01–14 <user> in:username

GitHub Dorks for Finding Information using Extension

extension:pem private

extension:ppk private

extension:sql mysql dump

extension:sql mysql dump password

extension:json api.forecast.io

extension:json mongolab.com

extension:yaml mongolab.com

[WFClient] Password= extension:ica

extension:avastlic “support.avast.com”
extension:json googleusercontent clien

You might also like