├── .github └── FUNDING.yml └── README.md /.github/FUNDING.yml: -------------------------------------------------------------------------------- 1 | github: spekulatius 2 | custom: https://www.buymeacoffee.com/spekulatius -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # A Personal Collection of InfoSec Dorks 2 | 3 | ## Surface Discovery 4 | 5 | ### Config files 6 | 7 | - `site:[TARGET] ext:xml | ext:conf | ext:cnf | ext:reg | ext:inf | ext:rdp | ext:cfg | ext:txt | ext:ora | ext:env | ext:ini` 8 | 9 | This dork searches for configuration files on the specified target site. Configuration files often contain sensitive information such as database credentials, API keys, and server configurations. 10 | 11 | ### Database files 12 | 13 | - `site:[TARGET] ext:sql | ext:db | ext:dbf | ext:mdb | ext:sql.gz | ext:sql.gz | ext:db.gz | ext:db.gz` 14 | 15 | This dork helps to find database files on the specified target site. Database files may contain valuable data and their exposure can lead to unauthorized access or data breaches. 16 | 17 | ### Backup files 18 | 19 | - `site:[TARGET] ext:bkf | ext:bkp | ext:bak | ext:old | ext:backup` 20 | 21 | This dork is useful for discovering backup files on the specified target site. Backup files are often created to store previous versions of files or data, but if they are exposed, they may contain sensitive or outdated information. 22 | 23 | ### .git folder 24 | 25 | - `inurl:"/.git" [TARGET] -site:github.com` 26 | 27 | This dork searches for instances of the ".git" folder on the specified target site, excluding results from GitHub. The .git folder contains version control information and can potentially expose sensitive source code and configuration details, leading to unauthorized access or code leaks. 28 | 29 | ### Exposed documents 30 | 31 | - `site:[TARGET] ext:doc | ext:docx | ext:odt | ext:pdf | ext:rtf | ext:sxw | ext:psw | ext:ppt | ext:pptx | ext:pps | ext:csv` 32 | 33 | This dork helps to find various document file types on the specified target site. Exposed documents may contain sensitive information such as passwords, intellectual property, or confidential data. 34 | 35 | ### SQL errors 36 | 37 | - `site:[TARGET] AND (intext:"sql syntax near" | intext:"syntax error has occurred" | intext:"incorrect syntax near" | intext:"unexpected end of SQL command" | intext:"Warning: mysql_connect()" | intext:"Warning: mysql_query()" | intext:"Warning: pg_connect()")` 38 | 39 | This dork searches for SQL errors on the specified target site. The presence of these errors in web pages may indicate vulnerabilities that can be exploited by attackers to gain unauthorized access to databases or execute malicious SQL queries. 40 | 41 | ### PHP errors 42 | 43 | - `site:[TARGET] AND ("PHP Parse error" | "PHP Warning" | "PHP Error")` 44 | - `site:[TARGET] "Index of" inurl:phpmyadmin` 45 | 46 | ### Login pages 47 | 48 | - `site:[TARGET] AND (inurl:signup | inurl:login | inurl:register | intitle:Signup)` 49 | 50 | ### Open redirects 51 | 52 | - `site:[TARGET] AND (inurl:redir | inurl:url | inurl:redirect | inurl:return | inurl:location | inurl:next | inurl:dest | inurl:src=http | inurl:r=http)` 53 | 54 | ### Apache Struts RCE 55 | 56 | - `site:[TARGET] AND (ext:action | ext:struts | ext:do)` 57 | 58 | ### Wordpress files 59 | 60 | - `site:[TARGET] AND (inurl:wp-content | inurl:wp-includes)` 61 | - `site:[TARGET] inurl:wp-config.php intext:DB_PASSWORD` 62 | - `site:[TARGET] intitle:"Index of" wp-admin` 63 | 64 | ### Other files 65 | 66 | - `site:[TARGET] AND (intitle:index.of | ext:log | ext:php intitle:phpinfo "published by the PHP Group" | inurl:shell | inurl:backdoor | inurl:wso | inurl:cmd | shadow | passwd | boot.ini | inurl:backdoor | inurl:readme | inurl:license | inurl:install | inurl:setup | inurl:config | inurl:"/phpinfo.php" | inurl:".htaccess" | ext:swf)` 67 | 68 | - `site:[TARGET] AND (ext:env | ext:log | ext:sql | ext:yml | ext:pem | ext:ini | ext:logs | ext:ibd | ext:txt | ext:php.txt | ext:old | ext:key | ext:frm | ext:bak | ext:zip | ext:swp | ext:conf | ext:db | ext:config | ext:ovpn | ext:svn | ext:git | ext:cfg | ext:exs | ext:dbf | ext:mdb | ext:pem | ext:pub | ext:yaml | ext:zip | ext:asc | ext:xls | ext:xlsx")` 69 | 70 | 71 | ### Various Single Dorks 72 | 73 | - `site:[TARGET] inurl:_cpanel/forgotpwd` 74 | - `site:[TARGET] inurl:/proc/self/cwd` 75 | - `site:[TARGET] inurl:/etc/` 76 | - `site:[TARGET] filename:constants` 77 | - `site:[TARGET] filename:settings` 78 | - `site:[TARGET] filename:database` 79 | - `site:[TARGET] filename:config` 80 | - `site:[TARGET] filename:environment` 81 | - `site:[TARGET] filename:spec` 82 | - `site:[TARGET] filename:zhrc` 83 | - `site:[TARGET] filename:bash` 84 | - `site:[TARGET] filename:npmrc` 85 | - `site:[TARGET] filename:dockercfg` 86 | - `site:[TARGET] filename:pass` 87 | - `site:[TARGET] filename:global` 88 | - `site:[TARGET] filename:credentials` 89 | - `site:[TARGET] filename:connections` 90 | - `site:[TARGET] filename:s3cfg` 91 | - `site:[TARGET] filename:wp-config` 92 | - `site:[TARGET] filename:htpasswd` 93 | - `site:[TARGET] filename:git-credentials` 94 | - `site:[TARGET] filename:id_dsa` 95 | - `site:[TARGET] filename:id_rsa` 96 | - `site:[TARGET] extension:env` 97 | - `site:[TARGET] extension:cfg` 98 | - `site:[TARGET] extension:ini` 99 | - `site:[TARGET] language:yaml -filename:travis` 100 | - `site:[TARGET] extension:properties` 101 | - `site:[TARGET] extension:bat` 102 | - `site:[TARGET] extension:sh` 103 | - `site:[TARGET] extension:zsh` 104 | - `site:[TARGET] extension:pem` 105 | - `site:[TARGET] extension:ppk` 106 | - `site:[TARGET] extension:sql` 107 | - `site:[TARGET] extension:json` 108 | - `site:[TARGET] extension:xml` 109 | - `site:[TARGET] filename:bash_history` 110 | - `site:[TARGET] filename:bash_profile` 111 | - `site:[TARGET] filename:bashrc` 112 | - `site:[TARGET] filename:cshrc` 113 | - `site:[TARGET] filename:history` 114 | - `site:[TARGET] filename:netrc` 115 | - `site:[TARGET] filename:pgpass` 116 | - `site:[TARGET] filename:tugboat` 117 | - `site:[TARGET] filename:dhcpd.conf` 118 | - `site:[TARGET] filename:express.conf` 119 | - `site:[TARGET] filename:filezilla.xml` 120 | - `site:[TARGET] filename:idea14.key` 121 | - `site:[TARGET] filename:makefile` 122 | - `site:[TARGET] filename:gitconfig` 123 | - `site:[TARGET] filename:prod.exs` 124 | - `site:[TARGET] filename:prod.secret.exs` 125 | - `site:[TARGET] filename:proftpdpasswd` 126 | - `site:[TARGET] filename:recentservers.xml` 127 | - `site:[TARGET] filename:robomongo.json` 128 | - `site:[TARGET] filename:server.cfg` 129 | - `site:[TARGET] filename:shadow` 130 | - `site:[TARGET] filename:sshd_config` 131 | - `site:[TARGET] filename:known_hosts` 132 | - `site:[TARGET] filename:wp-config.php` 133 | - `site:[TARGET] filename:.env` 134 | - `site:[TARGET] filename:hub` 135 | - `site:[TARGET] filename:.netrc` 136 | - `site:[TARGET] filename:_netrc` 137 | - `site:[TARGET] filename:ventrilo_srv.ini` 138 | - `site:[TARGET] filename:dbeaver-data-sources.xml` 139 | - `site:[TARGET] filename:sftp-config.json` 140 | - `site:[TARGET] filename:.esmtprc password` 141 | - `site:[TARGET] filename:.remote-sync.json` 142 | - `site:[TARGET] filename:WebServers.xml` 143 | - `site:[TARGET] staging` 144 | - `site:[TARGET] stg` 145 | - `site:[TARGET] prod` 146 | - `site:[TARGET] preprod` 147 | - `site:[TARGET] swagger` 148 | - `site:[TARGET] internal` 149 | - `site:[TARGET] dotfiles` 150 | - `site:[TARGET] dot-files` 151 | - `site:[TARGET] mydotfiles` 152 | - `site:[TARGET] config` 153 | - `site:[TARGET] dbpasswd` 154 | - `site:[TARGET] db_password` 155 | - `site:[TARGET] db_username` 156 | - `site:[TARGET] dbuser` 157 | - `site:[TARGET] testuser` 158 | - `site:[TARGET] dbpassword` 159 | - `site:[TARGET] keyPassword` 160 | - `site:[TARGET] storePassword` 161 | - `site:[TARGET] passwords` 162 | - `site:[TARGET] password` 163 | - `site:[TARGET] secret.password` 164 | - `site:[TARGET] database_password` 165 | - `site:[TARGET] sql_password` 166 | - `site:[TARGET] passwd` 167 | - `site:[TARGET] pass` 168 | - `site:[TARGET] pwd` 169 | - `site:[TARGET] pwds` 170 | - `site:[TARGET] root_password` 171 | - `site:[TARGET] credentials` 172 | - `site:[TARGET] security_credentials` 173 | - `site:[TARGET] connectionstring` 174 | - `site:[TARGET] private -language:java` 175 | - `site:[TARGET] private_key` 176 | - `site:[TARGET] master_key` 177 | - `site:[TARGET] token` 178 | - `site:[TARGET] access_token` 179 | - `site:[TARGET] auth_token` 180 | - `site:[TARGET] oauth_token` 181 | - `site:[TARGET] authorizationToken` 182 | - `site:[TARGET] secret` 183 | - `site:[TARGET] secrets` 184 | - `site:[TARGET] secret_key` 185 | - `site:[TARGET] secret_token` 186 | - `site:[TARGET] api_secret` 187 | - `site:[TARGET] app_secret` 188 | - `site:[TARGET] appsecret` 189 | - `site:[TARGET] client_secret` 190 | - `site:[TARGET] key` 191 | - `site:[TARGET] send_keys` 192 | - `site:[TARGET] send.keys` 193 | - `site:[TARGET] sendkeys` 194 | - `site:[TARGET] apikey` 195 | - `site:[TARGET] api_key` 196 | - `site:[TARGET] app_key` 197 | - `site:[TARGET] application_key` 198 | - `site:[TARGET] appkey` 199 | - `site:[TARGET] appkeysecret` 200 | - `site:[TARGET] access_key` 201 | - `site:[TARGET] apiSecret` 202 | - `site:[TARGET] x-api-key` 203 | - `site:[TARGET] apidocs` 204 | - `site:[TARGET] secret_access_key` 205 | - `site:[TARGET] encryption_key` 206 | - `site:[TARGET] consumer_key` 207 | - `site:[TARGET] auth` 208 | - `site:[TARGET] secure` 209 | - `site:[TARGET] login` 210 | - `site:[TARGET] conn.login` 211 | - `site:[TARGET] sshpass` 212 | - `site:[TARGET] ssh2_auth_password` 213 | - `site:[TARGET] irc_pass` 214 | - `site:[TARGET] fb_secret` 215 | - `site:[TARGET] sf_username` 216 | - `site:[TARGET] node_env` 217 | - `site:[TARGET] aws_key` 218 | - `site:[TARGET] aws_token` 219 | - `site:[TARGET] aws_secret` 220 | - `site:[TARGET] aws_access` 221 | - `site:[TARGET] AWSSecretKey` 222 | - `site:[TARGET] github_key` 223 | - `site:[TARGET] github_token` 224 | - `site:[TARGET] gh_token` 225 | - `site:[TARGET] slack_api` 226 | - `site:[TARGET] slack_token` 227 | - `site:[TARGET] bucket_password` 228 | - `site:[TARGET] redis_password` 229 | - `site:[TARGET] ldap_username` 230 | - `site:[TARGET] ldap_password` 231 | - `site:[TARGET] gmail_username` 232 | - `site:[TARGET] gmail_password` 233 | - `site:[TARGET] codecov_token` 234 | - `site:[TARGET] fabricApiSecret` 235 | - `site:[TARGET] mailgun` 236 | - `site:[TARGET] mailchimp` 237 | - `site:[TARGET] appspot` 238 | - `site:[TARGET] firebase` 239 | - `site:[TARGET] gitlab` 240 | - `site:[TARGET] stripe` 241 | - `site:[TARGET] herokuapp` 242 | - `site:[TARGET] cloudfront` 243 | - `site:[TARGET] amazonaws` 244 | - `site:[TARGET] npmrc _auth` 245 | - `site:[TARGET] pem private` 246 | - `site:[TARGET] aws_access_key_id` 247 | - `site:[TARGET] bashrc password` 248 | - `site:[TARGET] xoxp OR xoxb OR xoxa` 249 | - `site:[TARGET] FTP` 250 | - `site:[TARGET] s3.yml` 251 | - `site:[TARGET] .exs` 252 | - `site:[TARGET] beanstalkd.yml` 253 | - `site:[TARGET] deploy.rake` 254 | - `site:[TARGET] mysql` 255 | - `site:[TARGET] .bash_history` 256 | - `site:[TARGET] .sls` 257 | - `site:[TARGET] composer.jsonfilename:.npmrc _auth` 258 | - `site:[TARGET] filename:.dockercfg auth` 259 | - `site:[TARGET] extension:pem private` 260 | - `site:[TARGET] extension:ppk private` 261 | - `site:[TARGET] filename:id_rsa or filename:id_dsa` 262 | - `site:[TARGET] extension:sql mysql dump` 263 | - `site:[TARGET] extension:sql mysql dump password` 264 | - `site:[TARGET] filename:credentials aws_access_key_id` 265 | - `site:[TARGET] filename:.s3cfg` 266 | - `site:[TARGET] filename:.htpasswd` 267 | - `site:[TARGET] filename:.env DB_USERNAME NOT homestead` 268 | - `site:[TARGET] filename:.env MAIL_HOST=smtp.gmail.com` 269 | - `site:[TARGET] filename:.git-credentials` 270 | - `site:[TARGET] PT_TOKEN language:bash` 271 | - `site:[TARGET] filename:.bashrc password` 272 | - `site:[TARGET] filename:.bashrc mailchimp` 273 | - `site:[TARGET] filename:.bash_profile aws` 274 | - `site:[TARGET] rds.amazonaws.com password` 275 | - `site:[TARGET] extension:json api.forecast.io` 276 | - `site:[TARGET] extension:json mongolab.com` 277 | - `site:[TARGET] extension:yaml mongolab.com` 278 | - `site:[TARGET] jsforce extension:js conn.login` 279 | - `site:[TARGET] SF_USERNAME salesforce` 280 | - `site:[TARGET] filename:.tugboat NOT _tugboat` 281 | - `site:[TARGET] HEROKU_API_KEY language:shell` 282 | - `site:[TARGET] HEROKU_API_KEY language:json` 283 | - `site:[TARGET] filename:.netrc password` 284 | - `site:[TARGET] filename:_netrc password` 285 | - `site:[TARGET] filename:hub oauth_token` 286 | - `site:[TARGET] filename:filezilla.xml Pass` 287 | - `site:[TARGET] filename:recentservers.xml Pass` 288 | - `site:[TARGET] filename:config.json auths` 289 | - `site:[TARGET] filename:config irc_pass` 290 | - `site:[TARGET] filename:connections.xml` 291 | - `site:[TARGET] filename:express.conf path:.openshift` 292 | - `site:[TARGET] filename:.pgpass` 293 | - `site:[TARGET] [WFClient] Password= extension:ica` 294 | - `site:[TARGET] filename:server.cfg rcon password` 295 | - `site:[TARGET] JEKYLL_GITHUB_TOKEN` 296 | - `site:[TARGET] filename:.bash_history` 297 | - `site:[TARGET] filename:.cshrc` 298 | - `site:[TARGET] filename:.history` 299 | - `site:[TARGET] filename:.sh_history` 300 | - `site:[TARGET] filename:prod.exs NOT prod.secret.exs` 301 | - `site:[TARGET] filename:configuration.php JConfig password` 302 | - `site:[TARGET] filename:config.php dbpasswd` 303 | - `site:[TARGET] filename:config.php pass` 304 | - `site:[TARGET] path:sites databases password` 305 | - `site:[TARGET] shodan_api_key language:python` 306 | - `site:[TARGET] shodan_api_key language:shell` 307 | - `site:[TARGET] shodan_api_key language:json` 308 | - `site:[TARGET] shodan_api_key language:ruby` 309 | - `site:[TARGET] filename:shadow path:etc` 310 | - `site:[TARGET] filename:passwd path:etc` 311 | - `site:[TARGET] extension:avastlic "support.avast.com"` 312 | - `site:[TARGET] extension:json googleusercontent client_secret` 313 | - `site:[TARGET] HOMEBREW_GITHUB_API_TOKEN language:shell` 314 | - `site:[TARGET] xoxp OR xoxb` 315 | - `site:[TARGET] .mlab.com password` 316 | - `site:[TARGET] filename:logins.json` 317 | - `site:[TARGET] filename:CCCam.cfg` 318 | - `site:[TARGET] msg nickserv identify filename:config` 319 | - `site:[TARGET] filename:settings.py SECRET_KEY` 320 | - `site:[TARGET] filename:secrets.yml password` 321 | - `site:[TARGET] filename:master.key path:config` 322 | - `site:[TARGET] filename:deployment-config.json` 323 | - `site:[TARGET] filename:.ftpconfig` 324 | - `site:[TARGET] filename:sftp.json path:.vscode` 325 | - `site:[TARGET] filename:jupyter_notebook_config.json` 326 | - `site:[TARGET] "api_hash" "api_id"` 327 | - `site:[TARGET] "https://hooks.slack.com/services/"` 328 | - `site:[TARGET] filename:github-recovery-codes.txt` 329 | - `site:[TARGET] filename:gitlab-recovery-codes.txt` 330 | - `site:[TARGET] filename:discord_backup_codes.txt` 331 | - `site:[TARGET] extension:yaml cloud.redislabs.com` 332 | - `site:[TARGET] extension:json cloud.redislabs.com` 333 | - `site:[TARGET] stage` 334 | - `site:[TARGET] _key` 335 | - `site:[TARGET] _token` 336 | - `site:[TARGET] _secret` 337 | - `site:[TARGET] TODO` 338 | - `site:[TARGET] signup` 339 | - `site:[TARGET] register` 340 | - `site:[TARGET] admin` 341 | - `site:[TARGET] administrator` 342 | - `site:[TARGET] testing` 343 | - `site:[TARGET] extension:exs` 344 | - `site:[TARGET] extension:sls` 345 | - `site:[TARGET] filename:beanstalkd.yml` 346 | - `site:[TARGET] filename:deploy.rake` 347 | - `site:[TARGET] filename:composer.json` 348 | - `site:[TARGET] filename:composer.lock` 349 | - `site:[TARGET] ftp` 350 | - `site:[TARGET] ssh` 351 | 352 | ## Services 353 | 354 | ### Credentials in Trello 355 | 356 | - `inurl:trello.com AND intext:[TARGET]` 357 | 358 | If there are numerous results, narrow it further down with: 359 | 360 | - `inurl:trello.com AND intext:username AND intext:[TARGET]` 361 | - `inurl:trello.com AND intext:password AND intext:[TARGET]` 362 | - `inurl:trello.com AND intext:apikey AND intext:[TARGET]` 363 | 364 | ### Zoom 365 | 366 | - `inurl:http://zoom.us/j [TARGET]` 367 | - `inurl:http://zoom.us/j intext:password [TARGET]` 368 | - `inurl:http://zoom.us/j intext:id# [TARGET]` 369 | 370 | ### Ciphermail Login 371 | 372 | - `site:*.target.com intext:"CipherMail Email Encryption Gateway login"` 373 | 374 | ### Various Services 375 | 376 | - `site:sharepoint.com [TARGET]` 377 | - `site:box.com/s [TARGET]` 378 | - `site:dropbox.com/s [TARGET]` 379 | - `site:onedrive.live.com [TARGET]` 380 | - `site:docs.google.com inurl:"/d/" [TARGET]` 381 | - `site:[TARGET] inurl:Dashboard.jspa intext:"Atlassian Jira Project Management Software"` 382 | 383 | ### Linkedin employees 384 | 385 | - `site:linkedin.com employees [TARGET]` 386 | 387 | ## Cloud Services & Online Dev Tools 388 | 389 | ### AWS S3 Buckets 390 | 391 | - `intext:[TARGET] AND (site:"s3-external-1.amazonaws.com" | site:"s3.amazonaws.com")` 392 | 393 | Make sure to check the various regions: 394 | 395 | - `intext:[TARGET] AND (site:s3.af-south-1.amazonaws.com | site:s3.ap-east-1.amazonaws.com | site:s3.ap-northeast-1.amazonaws.com | site:s3.ap-northeast-2.amazonaws.com | site:s3.ap-northeast-3.amazonaws.com | site:s3.ap-south-1.amazonaws.com | site:s3.ap-south-2.amazonaws.com | site:s3.ap-southeast-1.amazonaws.com | site:s3.ap-southeast-2.amazonaws.com | site:s3.ap-southeast-3.amazonaws.com | site:s3.ap-southeast-4.amazonaws.com | site:s3.ca-central-1.amazonaws.com | site:s3.eu-central-1.amazonaws.com | site:s3.eu-central-2.amazonaws.com | site:s3.eu-north-1.amazonaws.com | site:s3.eu-south-1.amazonaws.com | site:s3.eu-south-2.amazonaws.com | site:s3.eu-west-1.amazonaws.com | site:s3.eu-west-2.amazonaws.com | site:s3.eu-west-3.amazonaws.com | site:s3.me-central-1.amazonaws.com | site:s3.me-south-1.amazonaws.com | site:s3.sa-east-1.amazonaws.com | site:s3.us-east-1.amazonaws.com | site:s3.us-east-2.amazonaws.com | site:s3.us-gov-east-1.amazonaws.com | site:s3.us-gov-west-1.amazonaws.com | site:s3.us-west-1.amazonaws.com | site:s3.us-west-2.amazonaws.com)` 396 | - `intext:[TARGET] AND (site:s3.dualstack.af-south-1.amazonaws.com | site:s3.dualstack.ap-east-1.amazonaws.com | site:s3.dualstack.ap-northeast-1.amazonaws.com | site:s3.dualstack.ap-northeast-2.amazonaws.com | site:s3.dualstack.ap-northeast-3.amazonaws.com | site:s3.dualstack.ap-south-1.amazonaws.com | site:s3.dualstack.ap-south-2.amazonaws.com | site:s3.dualstack.ap-southeast-1.amazonaws.com | site:s3.dualstack.ap-southeast-2.amazonaws.com | site:s3.dualstack.ap-southeast-3.amazonaws.com | site:s3.dualstack.ap-southeast-4.amazonaws.com | site:s3.dualstack.ca-central-1.amazonaws.com | site:s3.dualstack.eu-central-1.amazonaws.com | site:s3.dualstack.eu-central-2.amazonaws.com | site:s3.dualstack.eu-north-1.amazonaws.com | site:s3.dualstack.eu-south-1.amazonaws.com | site:s3.dualstack.eu-south-2.amazonaws.com | site:s3.dualstack.eu-west-1.amazonaws.com | site:s3.dualstack.eu-west-2.amazonaws.com | site:s3.dualstack.eu-west-3.amazonaws.com | site:s3.dualstack.me-central-1.amazonaws.com | site:s3.dualstack.me-south-1.amazonaws.com | site:s3.dualstack.sa-east-1.amazonaws.com | site:s3.dualstack.us-east-1.amazonaws.com | site:s3.dualstack.us-east-2.amazonaws.com | site:s3.dualstack.us-gov-east-1.amazonaws.com | site:s3.dualstack.us-gov-west-1.amazonaws.com | site:s3.dualstack.us-west-1.amazonaws.com | site:s3.dualstack.us-west-2.amazonaws.com)` 397 | 398 | ### Azure 399 | 400 | - `site:"blob.core.windows.net" AND intext:[TARGET]` 401 | 402 | ### Google Cloud 403 | 404 | - `site:"storage.googleapis.com" AND intext:[TARGET]` 405 | 406 | ### Digitalocean Spaces 407 | 408 | - `site:"digitaloceanspaces.com" [TARGET]` 409 | 410 | ### Git Providers 411 | 412 | - `site:github.com | site:gitlab.com | site:bitbucket.org [TARGET]` 413 | 414 | ### Secrets in Microsoft Devops 415 | 416 | - `site:"dev.azure.com" AND intext:secret` 417 | - `site:"dev.azure.com" AND intext:password` 418 | - `site:"dev.azure.com" AND intext:apikey` 419 | 420 | GitHub, GitLab, BB online dev enviroments? 421 | 422 | ### Various Services 423 | 424 | - `site:stackoverflow.com AND intext:"[TARGET]"` 425 | - `site:jfrog.io AND intext:"[TARGET]"` 426 | - ` [TARGET]` 427 | - `intitle:traefik inurl:8080/dashboard [TARGET]` 428 | - `intitle:"Dashboard [Jenkins]" [TARGET]` 429 | - `(site:bitpaste.app | site:codebeautify.org | site:codepad.co | site:codepad.co |site:ideone.com | site:codepad.org | site:codepen.io | site:codeshare.io | site:coggle.it | site:controlc.com | site:dotnetfiddle.net | site:dpaste.com | site:dpaste.org | site:gitter.im | site:hastebin.com | site:heypasteit.com | site:ide.geeksforgeeks.org | site:ideone.com | site:jsdelivr.com | site:jsdelivr.net | site:jsfiddle.net) AND "[TARGET]"` 430 | - `(site:justpaste.it | site:libraries.io | site:npmjs.com | site:npm.runit.com | site:npm.runkit.com | site:papaly.com | site:paste2.org | site:pastebin.com | site:paste.debian.net | site:pastehtml.com | site:paste.org | site:phpfiddle.org | site:prezi.com | site:productforums.google.com | site:repl.it | site:replt.it | site:scribd.com | site:sharecode.io | site:snipplr.com | site:trello.com | site:ycombinator.com) AND "[TARGET]"` 431 | --------------------------------------------------------------------------------