Google Dork Cheat Sheet
Operators
“”: Exact Match
“MySQL 1064 Error: You have an error in your SQL syntax”
Site: Search Only Site
site:google.com
Intitle: Search Title For String
intitle:"index of"
Inurl: Search URL For String
inurl:"*admin | login"
Intext: Search Body For String
intext:"index of"
Filetype: Search For Filetype
filetype:txt
Phonebook: Search For Phone Numbers
phonebook:Bill Gates
Examples
Domains With Directory Listings
intitle:"index of" site:gov.in
Domains With WordPress Logins
site:*.gov.au inurl:wp-admin
Domains With Apache Log Files
intitle:"index of" "apache.log" | "apache.logs"
Domains With PHP and ASP Login Pages
inurl:"*admin | login" | inurl:.php | .asp
HTDOCS Directory Listing
intitle:"index of" "htdocs"
Database Backups
intitle:"database" "backup" filetype:sql
Disclaimer – This cheat sheet was created to help people with exams. It is not for the
purposes of hacking public infrastructure.
Google Dork Cheat Sheet
Directory Listings By Directory
intext:"index of" inurl:/etc/
Pastebin Licenses
site:pastebin.com intext:license key | expiration
Top Secret
intext:"index of/" "top secret" gov
PHP Info Pages
intitle:"phpinfo()" inurl:"phpinfo.php"
Admin Backup Pages
intitle: "index of" "admin" "/backup"
SSH Directory Listing
intitle:index de sshd_config
Docker MySQL Yaml
intitle:"index of" "mysql.yaml"
Robots.txt Files
intitle:"index of" "robots.txt"
PHPMyAdmin Page
inurl:main.php phpMyAdmin
Cameras
intitle:"webcamXP" inurl:8080
inurl:/multi.html intitle:webcam
intitle:"webcamxp" "Flash JPEG Stream"
inurl:mobile.html intitle:webcamXP
intitle:"webcamxp 5" intext: "live stream"
WordPress Uploads With Sensitive Information
inurl:/wp-content/uploads/ ext:txt "username" | “user name” |
“uname” | “user” | “userid” | “user id” AND "password" | “pass word”
| "pwd" | "pw"
Disclaimer – This cheat sheet was created to help people with exams. It is not for the
purposes of hacking public infrastructure.