Google Dorks.md

Open Redirects:

return, return_url, rUrl, cancelUrl, url, redirect, follow, goto, returnTo, returnUrl, r_url,history, goback, redirectTo, redirectUrl, redirUrl

Google Search Operators:

• site
• inurl: Inurl can search the whole URL, including port and filetype.
• filetype: Filetype can only search file extension, which may be hard to distinguish in long URLs. (https://developers.google.com/search/docs/crawling-indexing/indexable-file-types)
• intitle
• intext
• numrange

Cache: Adding &strip=1 to the end of the cached URL only shows Google’s text, not the target’s.

Special Search Characters:
• ( + ) force inclusion of something common
• ( - ) exclude a search term
• ( “ ) use quotes around search phrases
• ( . ) a single-character wildcard
• ( * ) any word
• ( | ) boolean ‘OR’
• Parenthesis group queries (“master card” | mastercard)

USEFUL PHRASES TO SEARCH:

“Access denied for user”
“using password”
“# Dumping data for table”
"SQL command not properly ended"
"Unclosed quotation mark before the character string"
"Error Occurred"
"The error occurred in"

QUERIES:

filetype:inc intext:mysql_connect
filetype:sql +"IDENTIFIED BY" -csv
filetype:sql +"IDENTIFIED BY" ("Grant * on *" | "create user")