The scope of this activity is collecting information about a website published on the Internet, or finding a specific type of application, such as Webmin or VNC. There are tools available that can help with this technique, such as googlegath, but it is also possible to perform this operation manually using Google's web search options. This operation does not require specialized technical knowledge, and is a very good system for collecting information about a target website.
Password search: Using this dork we can see if you have stored any files in .txt format with passwords
Bash
filetype:txt site:www.sitioweb.com passwords|contraseñas|login|contraseña
site:www.sitioweb.com intitle:”index of” “Index of /” password.txtShows backup records that have been recorded on the servers.
text
site:www.sitioweb.com AND intitle:»index.of» «backup»We can check if a service is running, such as in this case a Webmin
text
site:www.sitioweb.com «Login to Webmin» inurl:10000Similar to the first command, this time we look for MySQL dump which contains passwords.
text
site:www.sitioweb.com filetype:sql “MySQL dump” (pass|password|passwd|pwd)We can also search for documents from which we can later extract the metadata
text
site:www.sitioweb.com inurl:intranet filetype:doc
site:www.sitioweb.com inurl:intranet filetype:pdfThe robots.txt file is a document that tells the search engine that indexes the page which parts we do not want to be shown to visitors to our site.
text
“robots.txt” “disallow:” filetype:txtWe can find many more dorks at: https://www.exploit-db.com/google-hacking-database/
:wq!
Comments