diff --git a/README.md b/README.md index 9e90631..7006bc7 100644 --- a/README.md +++ b/README.md @@ -731,296 +731,8 @@ Dorking is a wonderful thing, you can use this technique to search for anything 15. (-) Minus operator avoids showing results that contain certain words, e.g. security -trails will show pages that use "security" in their text, but not those that have the word "trails" Example -``` -".mlab.com password" -"access_key" -"access_token" -"amazonaws" -"api.googlemaps AIza" -"api_key" -"api_secret" -"apidocs" -"apikey" -"apiSecret" -"app_key" -"app_secret" -"appkey" -"appkeysecret" -"application_key" -"appsecret" -"appspot" -"auth" -"auth_token" -"authorizationToken" -"aws_access" -"aws_access_key_id" -"aws_key" -"aws_secret" -"aws_token" -"AWSSecretKey" -"bashrc password" -"bucket_password" -"client_secret" -"cloudfront" -"codecov_token" -"config" -"conn.login" -"connectionstring" -"consumer_key" -"credentials" -"database_password" -"db_password" -"db_username" -"dbpasswd" -"dbpassword" -"dbuser" -"dot-files" -"dotfiles" -"encryption_key" -"fabricApiSecret" -"fb_secret" -"firebase" -"ftp" -"gh_token" -"github_key" -"github_token" -"gitlab" -"gmail_password" -"gmail_username" -"herokuapp" -"internal" -"irc_pass" -"JEKYLL_GITHUB_TOKEN" -"key" -"keyPassword" -"ldap_password" -"ldap_username" -"login" -"mailchimp" -"mailgun" -"master_key" -"mydotfiles" -"mysql" -"node_env" -"npmrc _auth" -"oauth_token" -"pass" -"passwd" -"password" -"passwords" -"pem private" -"preprod" -"private_key" -"prod" -"pwd" -"pwds" -"rds.amazonaws.com password" -"redis_password" -"root_password" -"secret" -"secret.password" -"secret_access_key" -"secret_key" -"secret_token" -"secrets" -"secure" -"security_credentials" -"send.keys" -"send_keys" -"sendkeys" -"SF_USERNAME salesforce" -"sf_username" -"site.com" FIREBASE_API_JSON= -"site.com" vim_settings.xml -"slack_api" -"slack_token" -"sql_password" -"ssh" -"ssh2_auth_password" -"sshpass" -"staging" -"stg" -"storePassword" -"stripe" -"swagger" -"testuser" -"token" -"x-api-key" -"xoxb " -"xoxp" -[WFClient] Password= extension:ica -access_key -bucket_password -dbpassword -dbuser -extension:avastlic "support.avast.com" -extension:bat -extension:cfg -extension:env -extension:exs -extension:ini -extension:json api.forecast.io -extension:json googleusercontent client_secret -extension:json mongolab.com -extension:pem -extension:pem private -extension:ppk -extension:ppk private -extension:properties -extension:sh -extension:sls -extension:sql -extension:sql mysql dump -extension:sql mysql dump password -extension:yaml mongolab.com -extension:zsh -filename:.bash_history -filename:.bash_history DOMAIN-NAME -filename:.bash_profile aws -filename:.bashrc mailchimp -filename:.bashrc password -filename:.cshrc -filename:.dockercfg auth -filename:.env DB_USERNAME NOT homestead -filename:.env MAIL_HOST=smtp.gmail.com -filename:.esmtprc password -filename:.ftpconfig -filename:.git-credentials -filename:.history -filename:.htpasswd -filename:.netrc password -filename:.npmrc _auth -filename:.pgpass -filename:.remote-sync.json -filename:.s3cfg -filename:.sh_history -filename:.tugboat NOT _tugboat -filename:_netrc password -filename:apikey -filename:bash -filename:bash_history -filename:bash_profile -filename:bashrc -filename:beanstalkd.yml -filename:CCCam.cfg -filename:composer.json -filename:config -filename:config irc_pass -filename:config.json auths -filename:config.php dbpasswd -filename:configuration.php JConfig password -filename:connections -filename:connections.xml -filename:constants -filename:credentials -filename:credentials aws_access_key_id -filename:cshrc -filename:database -filename:dbeaver-data-sources.xml -filename:deployment-config.json -filename:dhcpd.conf -filename:dockercfg -filename:environment -filename:express.conf -filename:express.conf path:.openshift -filename:filezilla.xml -filename:filezilla.xml Pass -filename:git-credentials -filename:gitconfig -filename:global -filename:history -filename:htpasswd -filename:hub oauth_token -filename:id_dsa -filename:id_rsa -filename:id_rsa or filename:id_dsa -filename:idea14.key -filename:known_hosts -filename:logins.json -filename:makefile -filename:master.key path:config -filename:netrc -filename:npmrc -filename:pass -filename:passwd path:etc -filename:pgpass -filename:prod.exs -filename:prod.exs NOT prod.secret.exs -filename:prod.secret.exs -filename:proftpdpasswd -filename:recentservers.xml -filename:recentservers.xml Pass -filename:robomongo.json -filename:s3cfg -filename:secrets.yml password -filename:server.cfg -filename:server.cfg rcon password -filename:settings -filename:settings.py SECRET_KEY -filename:sftp-config.json -filename:sftp-config.json password -filename:sftp.json path:.vscode -filename:shadow -filename:shadow path:etc -filename:spec -filename:sshd_config -filename:token -filename:tugboat -filename:ventrilo_srv.ini -filename:WebServers.xml -filename:wp-config -filename:wp-config.php -filename:zhrc -HEROKU_API_KEY language:json -HEROKU_API_KEY language:shell -HOMEBREW_GITHUB_API_TOKEN language:shell -jsforce extension:js conn.login -language:yaml -filename:travis -msg nickserv identify filename:config -org:Target "AWS_ACCESS_KEY_ID" -org:Target "list_aws_accounts" -org:Target "aws_access_key" -org:Target "aws_secret_key" -org:Target "bucket_name" -org:Target "S3_ACCESS_KEY_ID" -org:Target "S3_BUCKET" -org:Target "S3_ENDPOINT" -org:Target "S3_SECRET_ACCESS_KEY" -password -path:sites databases password -private -language:java -PT_TOKEN language:bash -redis_password -root_password -secret_access_key -SECRET_KEY_BASE= -shodan_api_key language:python -WORDPRESS_DB_PASSWORD= -xoxp OR xoxb OR xoxa -s3.yml -.exs -beanstalkd.yml -deploy.rake -.sls -AWS_SECRET_ACCESS_KEY -API KEY -API SECRET -API TOKEN -ROOT PASSWORD -ADMIN PASSWORD -GCP SECRET -AWS SECRET -"private" extension:pgp -``` -> intext:"hacking" site:seccodeid.com -> -> inurl:login site:seccodeid.com -> -> intext:username filetype:log -> -> site:www.github.com ext:doc | ext:docx | ext:odt | ext:rtf | ext:sxw | ext:psw | ext:ppt | ext:pptx | ext:pps | ext:csv -> +[Dorking list](Script/Google-Dork/README.md) # Dorking Other Search Engine @@ -1030,43 +742,9 @@ AWS SECRET # Bash Dorking Script -PRO TIPS! +Example -You can add other headers, regex and search engine endpoints for refinement and to encode queries - -- BING SEARCH - -WEB - -```WEB -for ((i=1;i<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" "https://www.bing.com/search?pglt=2081&q=.php?id=" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep ".php?id" | sort -u ;done -``` - -Hunt Username - -```USERNAME -for ((i=1;1<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0;Accept: */*;Accept-Language: id,en-US;q-0.7,en;q-0.3;Accept-Encoding: gzip, deflate, br;Referer: https: //www.bing.com/;DNT: 1;Connection: keep-alive;Cookie: 1P_JAR=2023-11-05-19;Sec-Fetch-Dest:empty;Sec-Fetch-Mode:cors;Sec-Fetch-Site: same-origin;TE: trailers" "https://www.bing.com/search?pglt=2081&q=Jieyab89" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep -E "Jieyab89|github" | sort -u ;done -``` - -Hunt Username - -```USERNAME -for ((i=1;1<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0;Accept: */*;Accept-Language: id,en-US;q-0.7,en;q-0.3;Accept-Encoding: gzip, deflate, br;Referer: https: //www.bing.com/;DNT: 1;Connection: keep-alive;Cookie: 1P_JAR=2023-11-05-19;Sec-Fetch-Dest:empty;Sec-Fetch-Mode:cors;Sec-Fetch-Site: same-origin;TE: trailers" "Your Bing Request URL Header" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep -E "Jieyab89|github" | sort -u ;done -``` - -- GOOGLE SEARCH - -Hunt Username - -```USERNAME -for ((i=1;1<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0;Accept: */*;Accept-Language: id,en-US;q-0.7,en;q-0.3;Accept-Encoding: gzip, deflate, br;Referer: https: //www.google.com/;DNT: 1;Connection: keep-alive;Cookie: 1P_JAR=2023-11-05-19;Sec-Fetch-Dest:empty;Sec-Fetch-Mode:cors;Sec-Fetch-Site: same-origin;TE: trailers" "https://www.google.com/search?sourceid=chrome-psyapi2&ion=1&espv=2&ie=UTF-8&start=${i}0&q=Jieyab89" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep -E "Jieyab89|github" | sort -u ;done -``` - -WEB - -```WEB -for ((i=1;i<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" "https://www.google.com/search?sourceid=chrome-psyapi2&ion=1&espv=2&ie=UTF-8&start=${i}0&q=.php?id=" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep ".php?id" | sort -u ;done -``` +[Bash Dorking Script](Script/Google-Dork/README.md) # Google Advanced Search Tools @@ -2094,6 +1772,7 @@ Search channel, username anymore - [geospy](https://geospy.ai/) - [sogou](https://pic.sogou.com/) - [geospy](https://geospy.web.app/) +- [alamy](https://www.alamy.com/) # Image Analysis @@ -2377,6 +2056,7 @@ Browser plugin that allows you to watch YouTube videos frame by frame. - [virtualglobetrotting](https://virtualglobetrotting.com/) - [Population Count](https://landscan.ornl.gov/) - [grid Area mapping](https://grid.bellingcat.com/) +- [Maritim world lightphotos](https://www.lightphotos.net/photos/map_all.php) Conveter tool @@ -2408,6 +2088,7 @@ Geojson viewer - [Blender 3D maker](https://www.blender.org/) - [3D Maker by OSM](https://osmbuildings.org/documentation/leaflet/) - [Microsoft GlobalMLBuildingFootprints](https://github.com/microsoft/GlobalMLBuildingFootprints) +- [Microsoft flightsimulator](https://www.flightsimulator.com/) # Nearby Map From Geospatial @@ -3326,6 +3007,7 @@ VIN Checker - [CMA CGM vesel finder](https://www.cma-cgm.com/ebusiness/schedules/voyage) - [marinevesseltraffic](https://www.marinevesseltraffic.com/2013/02/military-ship-track.html) - [globalmaritimetraffic](https://www.globalmaritimetraffic.org/gmtds.html) +- [Maritim world lightphotos](https://www.lightphotos.net/photos/map_all.php) NOOA Incident MAP diff --git a/Script/Google-Dork/README.md b/Script/Google-Dork/README.md new file mode 100644 index 0000000..0490fe4 --- /dev/null +++ b/Script/Google-Dork/README.md @@ -0,0 +1,333 @@ +# List Google Dork + +Example +``` +".mlab.com password" +"access_key" +"access_token" +"amazonaws" +"api.googlemaps AIza" +"api_key" +"api_secret" +"apidocs" +"apikey" +"apiSecret" +"app_key" +"app_secret" +"appkey" +"appkeysecret" +"application_key" +"appsecret" +"appspot" +"auth" +"auth_token" +"authorizationToken" +"aws_access" +"aws_access_key_id" +"aws_key" +"aws_secret" +"aws_token" +"AWSSecretKey" +"bashrc password" +"bucket_password" +"client_secret" +"cloudfront" +"codecov_token" +"config" +"conn.login" +"connectionstring" +"consumer_key" +"credentials" +"database_password" +"db_password" +"db_username" +"dbpasswd" +"dbpassword" +"dbuser" +"dot-files" +"dotfiles" +"encryption_key" +"fabricApiSecret" +"fb_secret" +"firebase" +"ftp" +"gh_token" +"github_key" +"github_token" +"gitlab" +"gmail_password" +"gmail_username" +"herokuapp" +"internal" +"irc_pass" +"JEKYLL_GITHUB_TOKEN" +"key" +"keyPassword" +"ldap_password" +"ldap_username" +"login" +"mailchimp" +"mailgun" +"master_key" +"mydotfiles" +"mysql" +"node_env" +"npmrc _auth" +"oauth_token" +"pass" +"passwd" +"password" +"passwords" +"pem private" +"preprod" +"private_key" +"prod" +"pwd" +"pwds" +"rds.amazonaws.com password" +"redis_password" +"root_password" +"secret" +"secret.password" +"secret_access_key" +"secret_key" +"secret_token" +"secrets" +"secure" +"security_credentials" +"send.keys" +"send_keys" +"sendkeys" +"SF_USERNAME salesforce" +"sf_username" +"site.com" FIREBASE_API_JSON= +"site.com" vim_settings.xml +"slack_api" +"slack_token" +"sql_password" +"ssh" +"ssh2_auth_password" +"sshpass" +"staging" +"stg" +"storePassword" +"stripe" +"swagger" +"testuser" +"token" +"x-api-key" +"xoxb " +"xoxp" +[WFClient] Password= extension:ica +access_key +bucket_password +dbpassword +dbuser +extension:avastlic "support.avast.com" +extension:bat +extension:cfg +extension:env +extension:exs +extension:ini +extension:json api.forecast.io +extension:json googleusercontent client_secret +extension:json mongolab.com +extension:pem +extension:pem private +extension:ppk +extension:ppk private +extension:properties +extension:sh +extension:sls +extension:sql +extension:sql mysql dump +extension:sql mysql dump password +extension:yaml mongolab.com +extension:zsh +filename:.bash_history +filename:.bash_history DOMAIN-NAME +filename:.bash_profile aws +filename:.bashrc mailchimp +filename:.bashrc password +filename:.cshrc +filename:.dockercfg auth +filename:.env DB_USERNAME NOT homestead +filename:.env MAIL_HOST=smtp.gmail.com +filename:.esmtprc password +filename:.ftpconfig +filename:.git-credentials +filename:.history +filename:.htpasswd +filename:.netrc password +filename:.npmrc _auth +filename:.pgpass +filename:.remote-sync.json +filename:.s3cfg +filename:.sh_history +filename:.tugboat NOT _tugboat +filename:_netrc password +filename:apikey +filename:bash +filename:bash_history +filename:bash_profile +filename:bashrc +filename:beanstalkd.yml +filename:CCCam.cfg +filename:composer.json +filename:config +filename:config irc_pass +filename:config.json auths +filename:config.php dbpasswd +filename:configuration.php JConfig password +filename:connections +filename:connections.xml +filename:constants +filename:credentials +filename:credentials aws_access_key_id +filename:cshrc +filename:database +filename:dbeaver-data-sources.xml +filename:deployment-config.json +filename:dhcpd.conf +filename:dockercfg +filename:environment +filename:express.conf +filename:express.conf path:.openshift +filename:filezilla.xml +filename:filezilla.xml Pass +filename:git-credentials +filename:gitconfig +filename:global +filename:history +filename:htpasswd +filename:hub oauth_token +filename:id_dsa +filename:id_rsa +filename:id_rsa or filename:id_dsa +filename:idea14.key +filename:known_hosts +filename:logins.json +filename:makefile +filename:master.key path:config +filename:netrc +filename:npmrc +filename:pass +filename:passwd path:etc +filename:pgpass +filename:prod.exs +filename:prod.exs NOT prod.secret.exs +filename:prod.secret.exs +filename:proftpdpasswd +filename:recentservers.xml +filename:recentservers.xml Pass +filename:robomongo.json +filename:s3cfg +filename:secrets.yml password +filename:server.cfg +filename:server.cfg rcon password +filename:settings +filename:settings.py SECRET_KEY +filename:sftp-config.json +filename:sftp-config.json password +filename:sftp.json path:.vscode +filename:shadow +filename:shadow path:etc +filename:spec +filename:sshd_config +filename:token +filename:tugboat +filename:ventrilo_srv.ini +filename:WebServers.xml +filename:wp-config +filename:wp-config.php +filename:zhrc +HEROKU_API_KEY language:json +HEROKU_API_KEY language:shell +HOMEBREW_GITHUB_API_TOKEN language:shell +jsforce extension:js conn.login +language:yaml -filename:travis +msg nickserv identify filename:config +org:Target "AWS_ACCESS_KEY_ID" +org:Target "list_aws_accounts" +org:Target "aws_access_key" +org:Target "aws_secret_key" +org:Target "bucket_name" +org:Target "S3_ACCESS_KEY_ID" +org:Target "S3_BUCKET" +org:Target "S3_ENDPOINT" +org:Target "S3_SECRET_ACCESS_KEY" +password +path:sites databases password +private -language:java +PT_TOKEN language:bash +redis_password +root_password +secret_access_key +SECRET_KEY_BASE= +shodan_api_key language:python +WORDPRESS_DB_PASSWORD= +xoxp OR xoxb OR xoxa +s3.yml +.exs +beanstalkd.yml +deploy.rake +.sls +AWS_SECRET_ACCESS_KEY +API KEY +API SECRET +API TOKEN +ROOT PASSWORD +ADMIN PASSWORD +GCP SECRET +AWS SECRET +"private" extension:pgp +``` + +> intext:"hacking" site:seccodeid.com +> +> inurl:login site:seccodeid.com +> +> intext:username filetype:log +> +> site:www.github.com ext:doc | ext:docx | ext:odt | ext:rtf | ext:sxw | ext:psw | ext:ppt | ext:pptx | ext:pps | ext:csv +> + +# Bash Dorking Script + +PRO TIPS! + +You can add other headers, regex and search engine endpoints for refinement and to encode queries + +- BING SEARCH + +WEB + +```WEB +for ((i=1;i<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" "https://www.bing.com/search?pglt=2081&q=.php?id=" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep ".php?id" | sort -u ;done +``` + +Hunt Username + +```USERNAME +for ((i=1;1<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0;Accept: */*;Accept-Language: id,en-US;q-0.7,en;q-0.3;Accept-Encoding: gzip, deflate, br;Referer: https: //www.bing.com/;DNT: 1;Connection: keep-alive;Cookie: 1P_JAR=2023-11-05-19;Sec-Fetch-Dest:empty;Sec-Fetch-Mode:cors;Sec-Fetch-Site: same-origin;TE: trailers" "https://www.bing.com/search?pglt=2081&q=Jieyab89" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep -E "Jieyab89|github" | sort -u ;done +``` + +Hunt Username + +```USERNAME +for ((i=1;1<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0;Accept: */*;Accept-Language: id,en-US;q-0.7,en;q-0.3;Accept-Encoding: gzip, deflate, br;Referer: https: //www.bing.com/;DNT: 1;Connection: keep-alive;Cookie: 1P_JAR=2023-11-05-19;Sec-Fetch-Dest:empty;Sec-Fetch-Mode:cors;Sec-Fetch-Site: same-origin;TE: trailers" "Your Bing Request URL Header" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep -E "Jieyab89|github" | sort -u ;done +``` + +- GOOGLE SEARCH + +Hunt Username + +```USERNAME +for ((i=1;1<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0;Accept: */*;Accept-Language: id,en-US;q-0.7,en;q-0.3;Accept-Encoding: gzip, deflate, br;Referer: https: //www.google.com/;DNT: 1;Connection: keep-alive;Cookie: 1P_JAR=2023-11-05-19;Sec-Fetch-Dest:empty;Sec-Fetch-Mode:cors;Sec-Fetch-Site: same-origin;TE: trailers" "https://www.google.com/search?sourceid=chrome-psyapi2&ion=1&espv=2&ie=UTF-8&start=${i}0&q=Jieyab89" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep -E "Jieyab89|github" | sort -u ;done +``` + +WEB + +```WEB +for ((i=1;i<=10;i++));do curl -i -s -k -L -X GET -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" "https://www.google.com/search?sourceid=chrome-psyapi2&ion=1&espv=2&ie=UTF-8&start=${i}0&q=.php?id=" | grep -Eo 'href="[^\"]+"' | grep -Po "(http|https)://[a-zA-Z0-9./?=_%:-]*" | grep ".php?id" | sort -u ;done +``` \ No newline at end of file