(GHDB stopped posting since January 2022)
| Dork | Details |
|---|---|
| site:notion.so + keyword | Juicy Information |
| site:notes.io + keyword | Juicy Information |
| site:hackmd.io + keyword | Juicy Information |
| inurl:orgId=1 | Exposed Grafana Dashboards |
| site:s3.amazonaws.com + keyword | Exposed Files on Amazon S3 buckets |
| site:blob.core.windows.net + keyword | Exposed Files on Azure Storage blobs |
| inurl:app.powerbi.com | Exposed PowerBi Panels |
| intitle:iDRAC* inurl:login.html | Dell iDRAC Login pages |
| inurl:node_modules/ua-parser-js | Vulnerable ua-parser-js search (bower.json shows the version) |
| inurl:protocol/openid-connect | OpenID SSO Login Portals |
| inurl:smb/web/view | Plesk Login pages |
| inurl:auth/realms | SSO Login pages |
| inurl:nav_to.do | Service Now Login Pages |
| inurl:nwa/sysinfo | SAP Login Pages |
| intitle:"Smart Network Application" | Cisco RECON |
| inurl:SAAS/auth/login | VMware Workspace ONE Access RCE by SSTI - CVE-2022-22954 |
| site:snapshot.raintank.io | Grafana Public Snapshots |
| inurl:administrator/manifests | CMS Files and Directory Listings |
| intitle:"Carestream Vue Motion" | Health Systems Login pages (x) |
| intitle:"VM VIRTUAL FILM HTML5" | Health Systems Login pages (x) |
| inurl:wp-includes/sodium_compat/src | Wordpress Dir listing |
| inurl:memoqweb | Memoqweb Login Pages |
Author: Javier Bernardo
(x) Presented at Ekoparty 2021
| Dork | Details |
|---|---|
| site:scribd.com + keyword | Juicy Information |
Author: Gabriel Tarsia