Hack Website Forum: Juli 2019

Daftar Google Dorks "Google Hacking" pada dasarnya diindikasikan untuk menarik data sensitif Google yang menerapkan istilah pencarian lanjutan yang mendorong pengguna untuk menjelajahi indeks situs web tertentu, tipe data khusus, dan beberapa informasi menarik dari Situs Web tanpa jaminan.

Google Dorks dapat mengungkapkan beberapa informasi yang tidak terbayangkan seperti alamat email dan akun, kredensial masuk, data sensitif, kerentanan situs web, dan bahkan informasi bisnis (mis. Data kartu pembayaran).

Di sini dapat melihat contoh untuk mengetahui bagaimana Google Darks diterapkan oleh peretas untuk mencapai data sensitif dari situs web tertentu.

“inurl: domain/” “dorks tambahan

Seorang hacker akan dengan mudah berlatih dalam parameter yang diinginkan sebagai berikut:

inurl = URL situs yang ingin Anda tanyakan
domain = domain untuk situs tersebut
dorks = sub-bidang dan parameter yang ingin dipindai oleh peretas

Cara terbaik untuk menggunakan Google dorks secara profesional adalah dengan menemukan kerentanan di situs web pribadi Anda.

Kami juga dapat mempraktekkan pencarian lain yang diajukan selain URL yang akan berfungsi untuk mengungkapkan banyak data mengenai suatu situs web.

intitle:
inurl:
intext:
define:
site:
phonebook:
maps:
book:
info:
movie:
weather:
related:
link:

Beberapa Contoh:

info: Permintaan [info:] akan memberikan beberapa informasi yang Google miliki tentang halaman web itu. Misalnya, [info: www.google.com] akan menampilkan informasi tentang beranda Google. Perhatikan bahwa tidak ada tempat di antara "info:" dan URL halaman web.

link: Permintaan [tautan:] akan mencantumkan laman web yang berisi tautan ke laman web khusus. Misalnya, [link: www.google.com] akan mencantumkan laman web yang memiliki tautan yang mengarah ke beranda Google. Perhatikan bahwa tidak ada tempat di antara "link:" dan URL halaman web.

site: Jika Anda menambahkan [site:] dalam permintaan Anda, Google akan membatasi hasilnya ke situs web di domain yang disediakan. Misalnya, [situs bantuan: www.google.com] akan menemukan halaman bantuan di dalam www.google.com. [situs bantuan: com] akan mendapatkan halaman tentang bantuan dalam URL .com. Perhatikan bahwa tidak ada ruang antara "site:" dan domain.

inurl : Jika Anda menambahkan [inurl:] di kueri Anda, Google akan membatasi hasil pada catatan termasuk kata itu di URL. Misalnya, [inurl: pencarian google] akan mengirimkan dokumen yang menyebutkan istilah "google" di URL mereka, juga menyebutkan kata "search" di mana saja di kertas (URL atau tidak).

" Daftar Dorks Google Lanjutan dan Terbaru 2019 "

1.intitle:index.of "cacert.pem"
2.intitle:"Welcome to JBoss"
3.inurl:concrete/config/
4.intitle:"index of" "*php.swp"
5.intitle:"index of" "htdocs.zip"
6.intitle:"index of" "env.bak"
7.intitle:"index of" "smtp.log"
8.inurl:ReportViewer.aspx
9.inurl:/swagger/index.html
10.intitle: index of "*db.tar.gz"
11.intext:"username=" AND "password=" ext:log
12.intitle:"index of/" "db.sql"
13.intitle:index.of "awsconfig.json"
14.intitle:index.of "db.zip"
15.intitle:VMware intext:"VMware, Inc. All rights reserved." AND "Powered by VMware Studio"
16.site:bamboo.*.* ext:action build
17.intext:"SECRET_KEY" ext|py inurl:mysite -site:stackoverflow.com -site:github.com
18.intitle:index.of "backwpup"
19.intitle:index.of "keys.txt"
20.intitle:"index.of" intext:"access.txt"
21.intitle:"index.of" intext:"api.txt"
22.intitle:index.of "creds.txt"
23.intext:"Security is Off" intitle:"Namenode information"
24.intitle:VMware inurl:5480
25.inurl:"saw.dll" AND intitle:"Sign In"
26.intitle:"RabbitMQ Management" inurl:15672
27.intext:"Rubicon Communications, LLC (Netgate)" intitle:"Login"
28.intitle:"Welcome to nginx!" intext:"Welcome to nginx on Debian!" intext:"Thank you for"
29.intitle:"index of" share.passwd OR cloud.passwd OR ftp.passwd -public
30.krb.conf OR krb.realms intitle:"index of" -public -archive -packages -pub
31.accdb OR accde intitle:"index of" -pub -google -books
32.filetype:env intext:APP_NAME
33.Firmware Version intitle:"iLO" ProLiant Login -hpe.com -update
34.-pub -pool intitle:"index of" db.key OR server.key OR ftp.key OR exchange.key OR host.key OR mail.key
35.intitle:"index of" "/Cloudflare-CPanel-7.0.1"
36.intitle:"index of" "Served by Sun-ONE"
37.intitle:"index of" "ftp.log"
38.intitle:"index of" "sms.log"
39.-pool intitle:"index of" wget-log -pub
40.inurl:check_mk/login.py
41.intitle:Check_MK Multisite Login
42.intitle:"index of" lesshsQ/ OR .lesshst/ -pool -pub
43.intitle:"index of" .zshrc~ OR .zshrc OR .zshenv OR .zshenv~ -pool -public
44.intitle:"index of" .oracle_jre_usage/
45.intitle:"index of" crontab.conf
46.intitle:"index of" ticket.conf
47.-pub -pool intitle:"index of" squirrelmail/
48.-pub -pool intitle:"index of" vagrantfile -"How to"
49.intitle:"index of" api_key OR "api key" OR apiKey -pool
50.intitle:"index of" domain.key -public
51.-pub -pool intitle:"index of" "Served by" "Web Server"
52.site:*/AdminPanel.php
53.inurl:memberlogin.php
54.intitle:"Sign in" site:*/idaas/
55.key OR key.jar intitle:"index of" webstart
56.intitle:"index of" "server at"
57.fetchmailrc intitle:"index of" -linux
58.intitle:rsview32 ext:asp
59.intext:"Please enable JavaScript in your browser before using Citrix Receiver." AND intext:www.citrix.com
60.intitle:"kentico database setup"
61.inurl:/cmsinstall/install ext:aspx
62.inurl:"_notes/dwsync.xml"
63.intitle:"WSO2 Management Console"
64.intitle:"webview login" alcatel lucent
65.intitle:"LABVANTAGE Logon"
66.site:*/cgi/domadmin.cgi
67.inurl:":8080/login.jsp?os_destination="
68.intitle:"index of" "wp-security-audit-log"
69.intext:"powered by codoforum" inurl:"/user/login"
70.inurl:"/index.php?enter=guest"
71.intitle:"Zabbix" intext:"username" intext:"password" inurl:"/zabbix/index.php"
72.inurl:"/index.php?reconnect=1"
73.inurl:"8080/dashboard/" intitle:"Dashboard"
74.inurl:":8080/login"
75.intitle:"Home - Mongo Express"
76.intitle:"Check Point - Login"
77.inurl:"/webis/webis_login.html"
78.MailChimp API error: ext:log
79.index of /storage/logs/
80.intitle:"Pfsense - Login"
81.intitle:"WHMCS - Login" inurl:/admin/login.php
82.intitle:"WebSite X5 Manager" inurl:/admin/login.php
83.inurl:admin/login.php?login= intitle:"CMS"
84.inurl:/login.aspx site:com.tr intitle:yönetim
85.intext:"Service provided by Horos."
86.inurl:"/fmi/webd" intitle:"FileMaker WebDirect"
87.[ipn] ext:log
88.site:*/siteminderagent/forms/login.fcc
89.inurl:"web.config" & intext:"Data Source" & "User ID" & "Password" & "connectionString" & ext:config -git
90.Navicat MySQL Data Transfer filetype:sql
91.intext:"civicplus" "Login"
92.intitle:"TMSoft MyAuth Gateway 3" -DOWNLOAD
93.intitle:MK-AUTH :: CONTEUDO RESTRITO -site:mk-auth.com.br
94.inurl:10443/remote/login
95.ext:sql intext:@gmail.com intext:e10adc3949ba59abbe56e057f20f883e
96.site:*/my.policy
97.inurl:"index of" wso
98.filetype:"xls | xlsx | doc | docx | ppt | pptx | pdf" site:gov "FOUO" | "NOFORN" | "Confidential"
99.inurl:login.jsp intitle:login
100.intext:"@outlook.com" ext:log
101.inurl:CGI/Java/Serviceability?adapter=device.statistics.device
102.intitle:"index of" "mail.log"
103.intitle:index.of "chroot.conf"
104.intitle:odoo inurl:login "powered by odoo" "manage databases"
105.intitle:index of "uploads"
106.intext:"@gmail.com" ext:log
107.intitle:"freedom is real - 1945"
108.intitle:index.of "access.conf"
109.intitle:"index of" "ssh.yml"
110.intitle:index.of "htaccess.txt"
111.intitle:"index of" "ws_ftp.log"
112.inurl:"/index.php?title=Special:Userlogin"
113.inurl:"/index.php?content=login"
114.inurl:"/index.php?p=login"
115.inurl:"/index.php?pageID=login"
116.inurl:"/index.php/main/login"
117.intitle:"index of" "databases.yml"
118.intitle:"index of" "db.conf"
119.inurl:elmah.axd ext:axd
120.intitle:"Error log for /LM/"
121.site:*/cgi-bin/luci intext:"Authorization Required"
122.site:*/auth_index.htm?lang=kr&loginvalue=0&port=0
123.inurl:"/Admin/Forget.php"
124.site:*/admin/password/reset
125.site:*/account/reset
126.intext:"index of" intext:..bak intext:config
127.inurl:"/password.php" intitle:"Forgot your password"
128.site:* index.of: /android/manifest.xml
129.inurl:/webconsole/webpages/login.jsp
130.db_password filetype:env -site:github.com -git
131.intitle:"index of" inurl:ftp intext:logs
132.intitle:index.of "private-key.pem"
133.inurl:.elasticbeanstalk.com/admin
134.intitle:Metabase inurl:/dash
135.accounts.xlsx ext:xlsx
136.site:*/cb-forgot-login
137.intitle:"Marshall VS Server"
138.intitle:index.of "userpass.txt"
139.intitle:index.of "credential.txt"
140.intitle:index.of "key.txt"
141.intitle:index.of "system.db"
142.inurl:"index.cfm?action=" intext:"Exception in onError"
143.redash inurl:/org_slug
144.inurl:"/errors/report.php" intext:"There has been an error processing your request"
145.inurl:"/wp-login.php?action=lostpassword"
146.intitle:index.of "database.db"
147.intitle:"Pandora FMS mobile"
148.site:*/account/lost_password
149.site:*/logs/default.htm
150.site:mypublicinbox.com intitle:email
151.intitle:"Index of" wp-upload
152.intitle:"Index of" password.txt
153.intitle:"API Publisher- Login"
154.site:passport.*.*/login
155.intitle:"Cacti" AND inurl:"/monitor/monitor.php"
156.intitle:"netdata dashboard" AND intext:"Costa Tsaousis"
157.site:*/Dashboard/ intitle:"login"
158.site:watch.*.*/login
159.intitle:"Dashboards" AND inurl:"/zabbix/zabbix.php?action=dashboard.list"
160.site:*.freshservice.com/support/solutions
161.site:* index of: /config
162.site:*/loginportal/ intitle:"login"
163.inurl:"/index.php?action=login"
164.site:*/password/remind
165.inurl:"BasicAuthenticator:LOCAL"
166.inurl:"/showLogin.cc?isMobile=false"
167.inurl:"apex/f?p="
168.site:* index of: *.exe
169.intitle:"Index of" secret
170.site:*/oauth/authenticate
171.inurl:"/index.php?route=account/login"
172.inurl:"/index.php?gt=member/login"
173.inurl:"/index.php?r=site/login"
174.inurl:"/index.php/site/login"
175.inurl:"/.vscode/sftp.json"
176.inurl:"/.vscode/ftp-sync.json"
177.intitle:"Index Of" intext:sftp-config.json
178.inurl:/userlogin
179.inurl:/customerlogin
180.inurl:/clientlogin
181.inurl:/studentlogin
182.inurl:/stafflogin
183.site:*/usercp.php
184.inurl:"/index.php?page=login"
185.intitle:"index of" "/etc/mysql/"
186.intext:{{szErrorTip}} inurl:/doc/page/login.asp
187.inurl:/wp-content/uploads/ninja-forms/ intitle:"index of"
188.intitle:"index of" "web.config.txt"
189.site:*/wp-admin/maint/repair.php intext:"define(WP_ALLOW_REPAIR,true);"
190.site:*/wp-includes/Requests/php_errorlog
191.site:*/account/preferences
192.Powered by vBulletin Version 5.5.4
193.site:*/request-password-reset
194.site:*/cgi-sys/defaultwebpage.cgi intext:"SORRY!"
195.site:*/wp-settings.php
196.inurl:/dana-na/ filetype:cgi
197.site:*/wp-admin/user-edit.php
198.site:*/wp-admin/install.php intitle:WordPress Installation
199.intext:Powered By vBulletin 5.5.4 inurl:forum.
200.site:*/cgi-sys/suspendedpage.cgi intitle:"Account Suspended"
201.site:*/logs/error.log
202.site:*/server-status intext:"Apache server status for"
203.site:*/*/conf/httpd.conf
204.intitle:index.of "users.db"
205.site:*/pwdform.htm
206.inurl:credentials.txt -github -git -gitlab
207.site:*/oauth2/authorize
208.intitle:index.of "admin.db"
209.intitle:index.of "admin" filetype:sql
210.indexof:backup/web.config
211.site:* intitle:"reset password"
212.site:ftp.*.* index of: manifest.xml
213.indexof:backup/mysql
214.inurl:webmail/src/login.php
215.inurl:"/prweb/prwebLDAP1/"
216.index.of "crossdomain.xml"
217.intitle:"login" site:welcome.*.*
218.site:*/Shibboleth.sso/SAML2/POST
219.site:*/casAuthn/login.php
220.site:*/authzssl/forget_password
221.indexof:.htaccess
222.contrasena filetype:sql -github.com
223.intitle:"index of" inurl:/*sql* filetype:log
224.inurl:"index.php?db="
225.intitle:"index of" "debian.conf"
226.inurl:/application/config/database.php*
227.intitle:"index of" "/mysql.log"
228.site:*/404/404.html intitle:"404"
229.site:*/index_signin.php
230.site:*/authUpdate intitle:"Account Access Help"
231.inurl:"/usp-core/app/authUpdate"
232.site:*:8443/login_up.php
233.intext:"Please log on to use the mikrotik hotspot service" intitle:"mikrotik hotspot >login" -github -site:mikrotik.com
234.intitle:index.of./.htaccess
235.site:cpanel.*.* intitle:"login" -site:forums.cpanel.net
236.intitle:"openshift web console" inurl:console inurl:/console
237.site:*/sitemap/sitemap.xml
238.site:*/nms/login intitle:"UNMS"
239.inurl:"/phpmyadmin/user_password.php" -inurl:git
240.inurl:/wp-admin/includes/plugin-install.php

Label: Daftar Dorks Google 2019 Untuk injeksi SQL, Kumpulan WEB DORK VULN 2019 Terbaru