-
Notifications
You must be signed in to change notification settings - Fork 84
/
Copy pathfiles_containing_passwords.dorks
395 lines (395 loc) · 17.6 KB
/
files_containing_passwords.dorks
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
intitle:index.of people.lst
inurl:passlist.txt
intitle:"index of" intext:globals.inc
filetype:reg reg +intext:"defaultusername" +intext:"defaultpassword"
filetype:url +inurl:"ftp://" +inurl:"@"
filetype:pem intext:private
inurl:"wvdial.conf" intext:"password"
inurl:"slapd.conf" intext:"credentials" -manpage -"Manual Page" -man: -sample
inurl:"slapd.conf" intext:"rootpw" -manpage -"Manual Page" -man: -sample
filetype:netrc password
ext:pwd inurl:(service | authors | administrators | users) "# -FrontPage-"
filetype:ini ServUDaemon
filetype:sql ("values * MD5" | "values * password" | "values * encrypt")
!Host=*.* intext:enc_UserPassword=* ext:pcf
inurl:server.cfg rcon password
intitle:"phpinfo()" +"mysql.default_password" +"Zend Scripting Language Engine"
ext:inc "pwd=" "UID="
intitle:rapidshare intext:login
server-dbs "intitle:index of"
ext:asa | ext:bak intext:uid intext:pwd -"uid..pwd" database | server | dsn
filetype:sql "insert into" (pass|passwd|password)
inurl:"calendarscript/users.txt"
ext:php intext:"$dbms""$dbhost""$dbuser""$dbpasswd""$table_prefix""phpbb_installed"
intitle:"Index of" .mysql_history
intitle:index.of intext:"secring.skr"|"secring.pgp"|"secring.bak"
intitle:index.of passwd passwd.bak
intitle:index.of master.passwd
intitle:"Index of" pwd.db
intitle:"Index of" ".htpasswd" htpasswd.bak
intitle:"Index of" ".htpasswd" "htgroup" -intitle:"dist" -apache -htpasswd.c
intitle:"Index of" spwd.db passwd -pam.conf
intitle:"Index of..etc" passwd
inurl:config/databases.yml -trac -trunk -"Google Code" -source -repository
filetype:ini "pdo_mysql" (pass|passwd|password|pwd)
filetype:ini "SavedPasswords" (pass|passwd|password|pwd)
filetype:ini "precurio" (pass|passwd|password|pwd)
filetype:ini "[FFFTP]" (pass|passwd|password|pwd)
filetype:sql "PostgreSQL database dump" (pass|password|passwd|pwd)
filetype:sql "MySQL dump" (pass|password|passwd|pwd)
filetype:sql "phpmyAdmin SQL Dump" (pass|password|passwd|pwd)
inurl:"/Application Data/Filezilla/*" OR inurl:"/AppData/Filezilla/*" filetype:xml
filetype:sql inurl:wp-content/backup-*
(username=* | username:* |) | ( ((password=* | password:*) | (passwd=* | passwd:*) | (credentials=* | credentials:*)) | ((hash=* | hash:*) | (md5:* | md5=*)) | (inurl:auth | inurl:passwd | inurl:pass) ) filetype:log
filetype:cfg "radius" (pass|passwd|password)
inurl:"passes" OR inurl:"passwords" OR inurl:"credentials" -search -download -techsupt -git -games -gz -bypass -exe filetype:txt @yahoo.com OR @gmail OR @hotmail OR @rediff
intext:charset_test= email= default_persistent=
"BEGIN RSA PRIVATE KEY" filetype:key -github
ext:sql intext:@gmail.com intext:password
inurl:typo3conf/localconf.php
xamppdirpasswd.txt filetype:txt
inurl:ws_ftp.ini "[WS_FTP]" filetype:ini
"automatic teller" "operator manual" "password" filetype:pdf
ext:xls intext:NAME intext:TEL intext:EMAIL intext:PASSWORD
intext:smtp | pop3 intext:login | logon intext:password | passcode filetype:xls | filetype:xlsx
inurl:"ftp" intext:"user" | "username" | "userID" | "user ID" | "logon" | "login" intext:"password" | "passcode" filetype:xls | filetype:xlsx
intext:http | https intext:login | logon intext:password | passcode filetype:xls | filetype:xlsx
intext:"GET http://" ext:txt intext:"password" inurl:log
inurl:wp-content/uploads filetype:xls | filetype:xlsx password
"Password=" inurl:web.config -intext:web.config ext:config
filetype:pcf "cisco" "GroupPwd"
site:github.com ext:csv userid | username | user -example password
"INSERT INTO phpbb_users" ext:sql
"END_FILE" inurl:"/password.log"
"# -FrontPage-" ext:pwd
"-----BEGIN RSA PRIVATE KEY-----" ext:key
inurl:"/zebra.conf" ext:conf -git
"Stealer by W33DY" ext:txt
ext:reg " [HKEY_CURRENT_USER\Software\ORL\WinVNC3]" -git
"resources.db.params.password" ext:ini -git
site:pastebin.com intext:"*@*.com:*"
intext:DB_PASSWORD || intext:"MySQL hostname" ext:txt
inurl:"sitemanager.xml" ext:xml -git
inurl:_vti_pvt/administrators.pwd
intitle:"Index Of" intext:.ftpconfig
intext:connectionString & inurl:web & ext:config
filetype:ini "FtpInBackground" (pass|passwd|password|pwd)
intitle:index.of config.php
index.of passlist
index.of.etc
filetype:xls username password email
allinurl:auth_user_file.txt
inurl:config.php dbuname dbpass
intitle:index.of trillian.ini
filetype:htpasswd htpasswd
intitle:index.of administrators.pwd
inurl:secring ext:skr | ext:pgp | ext:bak
intitle:Index.of etc shadow
allinurl: admin mdb
filetype:cfm "cfapplication name" password
eggdrop filetype:user user
intitle:"index of" intext:connect.inc
inurl:perform filetype:ini
filetype:properties inurl:db intext:password
filetype:inc intext:mysql_connect
filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS
inurl:vtund.conf intext:pass -cvs
filetype:log inurl:"password.log"
filetype:dat "password.dat"
filetype:conf slapd.conf
filetype:inc dbconn
filetype:ini ws_ftp pwd
signin filetype:url
filetype:dat wand.dat
filetype:cfg mrtg "target[*]" -sample -cvs -example
filetype:ldb admin
filetype:sql +"IDENTIFIED BY" -cvs
filetype:sql password
filetype:pwd service
inurl:zebra.conf intext:password -sample -test -tutorial -download
inurl:ospfd.conf intext:password -sample -test -tutorial -download
inurl:ccbill filetype:log
filetype:mdb inurl:users.mdb
filetype:conf inurl:psybnc.conf "USER.PASS="
"Your password is * Remember this for later use"
inurl:lilo.conf filetype:conf password -tatercounter2000 -bootpwd -man
intitle:"Index of" passwords modified
"sets mode: +k"
filetype:pwl pwl
inurl:/wwwboard
"AutoCreate=TRUE password=*"
filetype:pass pass intext:userid
inurl:nuke filetype:sql
inurl:/db/main.mdb
filetype:bak inurl:"htaccess|passwd|shadow|htusers"
"http://*:*@www" bob:bob
filetype:conf oekakibbs
LeapFTP intitle:"index.of./" sites.ini modified
filetype:ini wcx_ftp
filetype:config config intext:appSettings "User ID"
"index of/" "ws_ftp.ini" "parent directory"
filetype:mdb wwforum
"Powered By Elite Forum Version *.*"
filetype:ini inurl:flashFXP.ini
inurl:chap-secrets -cvs
inurl:pap-secrets -cvs
filetype:ini inurl:"serv-u.ini"
"liveice configuration file" ext:cfg -site:sourceforge.net
intext:"enable secret 5 $"
"powered by ducalendar" -site:duware.com
"Powered by Duclassified" -site:duware.com
"Powered by Dudirectory" -site:duware.com
"Powered by Duclassified" -site:duware.com "DUware All Rights reserved"
"powered by duclassmate" -site:duware.com
intitle:dupics inurl:(add.asp | default.asp | view.asp | voting.asp) -site:duware.com
"powered by dudownload" -site:duware.com
filetype:log "See `ipsec --copyright"
inurl:"GRC.DAT" intext:"password"
inurl:filezilla.xml -cvs
intext:"powered by Web Wiz Journal"
ext:ini eudora.ini
ext:ini Version=4.0.0.4 password
filetype:inc mysql_connect OR mysql_pconnect
"Powered by DUpaypal" -site:duware.com
"Powered by Link Department"
intitle:"Index of" sc_serv.conf sc_serv content
filetype:sql ("passwd values" | "password values" | "pass values" )
ext:txt inurl:unattend.txt
filetype:inf sysprep
wwwboard WebAdmin inurl:passwd.txt wwwboard|webadmin
intext:"powered by EZGuestbook"
inurl:perform.ini filetype:ini
filetype:dat inurl:pass.dat
inurl:cgi-bin inurl:calendar.cfg
[WFClient] Password= filetype:ica
filetype:dat inurl:Sites.dat
intext:"enable password 7"
"your password is" filetype:log
"admin account info" filetype:log
inurl:/yabb/Members/Admin.dat
inurl:"Sites.dat"+"PASS="
ext:yml database inurl:config
"parent directory" +proftpdpasswd
inurl:ventrilo_srv.ini adminpassword
filetype:bak createobject sa
inurl:"editor/list.asp" | inurl:"database_editor.asp" | inurl:"login.asa" "are set"
ext:passwd -intext:the -sample -example
enable password | secret "current configuration" -intext:the
filetype:reg reg +intext:â€ÂÂWINVNC3â€ÂÂ
"login: *" "password= *" filetype:xls
inurl:-cfg intext:"enable password"
inurl:web/frontend_dev.php -trunk
inurl:ftp "password" filetype:xls
filetype:php~ (pass|passwd|password|dbpass|db_pass|pwd)
"My RoboForm Data" "index of"
ext:xml ("mode_passive"|"mode_default")
filetype:xls "username | password"
"parent directory" proftpdpasswd intitle:"index of" -google
inurl:"/dbman/default.pass"
allinurl:"User_info/auth_user_file.txt"
ext:xml ("proto='prpl-'" | "prpl-yahoo" | "prpl-silc" | "prpl-icq")
filetype:inc OR filetype:bak OR filetype:old mysql_connect OR mysql_pconnect
filetype:config inurl:web.config inurl:ftp
ext:sql intext:@hotmail.com intext :password
filetype:sql insite:pass && user
site:github.com inurl:sftp-config.json intext:/wp-content/
site:github.com inurl:sftp-config.json
filetype:password jmxremote
inurl:/backup intitle:index of backup intext:*sql
inurl:yahoo_site_admin/credentials/
inurl:"security/xamppdirpasswd.txt"
ext:sql intext:"alter user" intext:"identified by"
ext:csv intext:"password"
intext:DB_PASSWORD ext:env
site:pastebin.com intext:Username
intext:@pwcache "parent directory"
filetype:log intext:password | pass | pw
inurl:etc -intext:etc ext:passwd
ext:sql intext:username intext:password
inurl:wp-config -intext:wp-config "'DB_PASSWORD'"
intext:"END_FILE" ext:log
site:pastebin.com intext:@gmail.com | @yahoo.com | @hotmail.com daterange:2457388-2457491
intext:"eav" filetype:txt
site:static.ow.ly/docs/ intext:@gmail.com | Password
inurl:"/wp-content/wpclone-temp/wpclone_backup/"
inurl:proftpdpasswd
inurl:github.com intitle:config intext:"/msg nickserv identify"
intitle:"index of/" CCCam.cfg
site:cloudshark.org/captures# password
"your default password is" filetype:pdf
"Index of" "logins.json" "key3.db"
inurl:"-wp13.txt"
filetype:bak inurl:php "mysql_connect"
"[main]" "enc_GroupPwd=" ext:txt
ext:fetchmailrc
"FileZilla" inurl:"recentservers.xml" -git
" End Stealer " ext:txt
"iSpy Keylogger" "Passwords Log" ext:txt
"mysqli_connect" ext:inc
inurl:"gradle.properties" intext:"proxyPassword"
site:trello.com password
"enable secret" ext:cfg -git -cisco.com
ext:inf SetupMgrTag AdminPassword
"password" + ext:conf "Modem Type = USB Modem"
ext:config + " password=" + "
intitle:"Index Of" intext:sftp-config.json
"MAIL_PASSWORD" filetype:env
"database_password" filetype:yml "config/parameters.yml"
"database_password" filetype:yml "config/parameters.yml
intext:password inurl:"/log/production" ext:log
CakePHP inurl:database.php intext:db_password
intitle:"index of /" inanchor:.kdbx
site:pastebin.com "rcon_password"
intitle:"Index Of" intext:".vscode"
inurl:/host.txt + filetype:txt + "password"
inurl:"config.xml" "password" ext:xml -stackoverflow.com -github.com
inurl:"databases.yml" ext:yml password -github
intitle:"index.of" "places.sqlite" "key3.db" -mozilla.org
intitle:"index.of" "places.sqlite" "Mail" thunderbird -mozilla.org -scan
filetype:config "" "password" "web.config" -stackoverflow -youtube.com -github
ext:ini Robust.ini filetype:ini "password"
Codeigniter filetype:sql intext:password | pwd intext:username | uname intext: Insert into users values
inurl:"servlet/ViewFormServlet?" "pwd"
intitle:"Index of" intext:"Login Data"
inurl:"/App.Config" + ext:config + "password=" -github -git
intext:"PuTTY log" ext:log "password" -supportforums -github
filetype:doc inurl:"gov" intext:"default password is"
site:trello.com intext:mysql AND intext:password -site:developers.trello.com -site:help.trello.com
site:showmyhomework.co.uk/school/homeworks/ "password"
intitle:"index.of" inurl:"cvs" login | passwd | password | access | pass -github -pub
filetype:env intext:REDIS_PASSWORD
"password.xlsx" ext:xlsx
inurl:wp-config-backup.txt
intext:define('AUTH_KEY', ' wp-config.php filetype:txt
inurl:/dbcp.properties + filetype:properties -github.com
inurl:configuration.php and intext:"var $password="
intext:"please change your" password |code | login file:pdf | doc | txt | docx -github
intext:"login" department | admin | manager | company | host filetype:xls | xlsx -community -github
intext:"rabbit_password" | "service_password" filetype:conf
"whoops! there was an error." "db_password"
inurl:wp-config.bak
"battlefield" "email" site:pastebin.com
inurl:"wp-license.php?file=../..//wp-config"
inurl:"trello.com" and intext:"username" and intext:"password"
intitle:"index of" intext:login.csv
inurl:"build.xml" intext:"tomcat.manager.password"
/_wpeprivate/config.json
inurl:"standalone.xml" intext:"password>"
filetype:reg reg HKEY_CURRENT_USER intext:password
filetype:txt $9$ JunOS
intext:jdbc:oracle filetype:java
filetype:xml config.xml passwordHash Jenkins
username | password inurl:resources/application.properties -github.com -gitlab
intitle:settings.py intext:EMAIL_HOST_PASSWORD -git -stackoverflow
intitle:settings.py intext:EMAIL_USE_TLS -git -stackoverflow
inurl:wp-config.php intext:DB_PASSWORD -stackoverflow -wpbeginner
inurl:login.txt filetype:txt
s3 site:amazonaws.com filetype:xls password
intext:"wordpress" filetype:xls login & password
inurl:users.json + "username"
intext:"aspx" filetype:txt login & password
"pass" "usuario" filetype:sql
intitle:"index of" "htpasswd.txt"
intitle:"index of" "ftp.passwd"
intext:"@gmail.com" intext:"password" inurl:/files/ ext:txt
"contrasena" filetype:sql -github.com
intitle:"Index of" password.txt
intitle:"index of" "db.conf"
intitle:"index of" share.passwd OR cloud.passwd OR ftp.passwd -public
intitle:index.of "creds.txt"
intext:"username=" AND "password=" ext:log
intext:"WPENGINE_SESSION_DB_USERNAME" || "WPENGINE_SESSION_DB_PASSWORD"
intitle:"index of" "passwords.yml"
intitle:"index of" "credentials.yml"
"enable password" ext:cfg -git -cisco.com
password console-password ext:cfg -git
intext:authentication set encrypted-password ext:cfg
intitle:"Index of" dbconnect.inc
"create account" admin ext:cfg
"configure account user encrypted" ext:cfg
"d-i passwd/root-password-crypted password" ext:cfg
intitle:"index of" "db.connection.js"
intitle:"index of" application.ini
intitle:"index of" "database.ini" OR "database.ini.old"
"admin password irreversible-cipher" ext:txt OR ext:log OR ext:cfg
"super password level 3 cipher" ext:txt OR ext:log
intitle:"index of" "db.ini"
intitle:"index of " "*.passwords.txt"
"MasterUserPassword" ext:cfg OR ext:log OR ext:txt -git
"/etc/shadow root:$" ext:cfg OR ext:log OR ext:txt OR ext:sql -git
inurl:*helpdesk* intext:"your default password is"
intitle:"index of" "passwords.xlsx"
intitle:"index of" "config.neon" OR "config.local.neon"
intext:"Index of /password"
"config.php.bak" intitle:"index of"
"index of" ".env"
filetype:env "DB_PASSWORD"
"MYSQL_ROOT_PASSWORD:" ext:env OR ext:yml -git
intitle:"index of" "/master.passwd"
inurl:logs intext:GET https:// ext:txt intext:password intext:username
allintext:password filetype:log
"Index of" "/yahoo_site_admin/credentials"
intext:"db_database" ext:env intext:"db_password"
allintext:"redis_password" ext:env
"EMAIL_HOST_PASSWORD" ext:yml | ext:env | ext:txt | ext:log
"/** MySQL database password */" ext:txt | ext:cfg | ext:env | ext:ini
"POSTGRES_PASSWORD=" ext:txt | ext:cfg | ext:env | ext:ini | ext:yml | ext:sql -git -gitlab
ext:xls intext:@gmail.com intext:password
intitle:"database.php" inurl:"database.php" intext:"db_password" -git -gitlab
ext:txt intext:@yahoo.com intext:password
"'username' =>" + "'password' =>" ext:log
filetype:log intext:password after:2015 intext:@gmail.com | @yahoo.com | @hotmail.com
"index of" "password.ini"
"admin_password" ext:txt | ext:log | ext:cfg
rootpw --iscrypted ext:cfg
"anaconda-ks.cfg" | "ks.cfg" ext:cfg -git -gitlab
"server.cfg" ext:cfg intext:"rcon_password" -git -gitlab
ext:cfg "g_password" | "sv_privatepassword" | "rcon_password" -git -gitlab
"db.username" + "db.password" ext:properties
site:pastebin.com intext:admin.password
ext:log password END_FILE
"spring.datasource.password=" + "spring.datasource.username=" ext:properties -git -gitlab
jdbc:mysql://localhost:3306/ + username + password ext:yml | ext:javascript -git -gitlab
jdbc:postgresql://localhost: + username + password ext:yml | ext:java -git -gitlab
jdbc:oracle://localhost: + username + password ext:yml | ext:java -git -gitlab
intitle:"index of" "config.exs" | "dev.exs" | "test.exs" | "prod.secret.exs"
"define('DB_USER'," + "define('DB_PASSWORD'," ext:txt
intitle:"index of" "anaconda-ks.cfg" | "anaconda-ks-new.cfg"
"define('SECURE_AUTH_KEY'" + "define('LOGGED_IN_KEY'" + "define('NONCE_KEY'" ext:txt | ext:cfg | ext:env | ext:ini
"keystorePass=" ext:xml | ext:txt -git -gitlab
intext:construct('mysql:host
"mailer_password:" + "mailer_host:" + "mailer_user:" + "secret:" ext:yml
intitle:"index of" "idx_config"
"password 7" ext:txt | ext:log | ext:cfg
"insert into users" "VALUES" ext:sql | ext:txt | ext:log | ext:env
"cpanel username" "cpanel password" ext:txt
intitle:"index of" "application-users.properties" | "mgmt-users.properties" | "*standalone.xml"
"public $user =" | "public $password = " | "public $secret =" | "public $db =" ext:txt | ext:log -git
site:*.blob.core.windows.net ext:xls | ext:xlsx (login | password | username)
"# -FrontPage-" ext:pwd inurl:(service | authors | administrators | users) "# -FrontPage-" inurl:service.pwd
inurl:/wp-content/uploads/ ext:txt "username" AND "password" | "pwd" | "pw"
allintext:"*[email protected]" OR "password" OR "username" filetype:xlsx
inurl:/wp-content/uploads/data.txt
site:pastebin.com intitle:"password" 2021
filetype:log username admin
"enable secret 5" ext:txt | ext:cfg
inurl:wp-config.php.save
Inurl: "login" Intitle:index of username and pass
intitle: "Index of ftp passwords"
"index of /" +passwd
allintext:password filetype:log after:2018
intitle:"index of" "credentials"
intitle:"index of" "passwrod*"
inurl:password site:shodan.io
site:pastebin.com intext:username | password | SECRET_KEY
inurl:/wp-content/uploads/ ext:txt "username" | "user name" | "uname" | "user" | "userid" | "user id" AND "password" | "pass word" | "pwd" | "pw"
intext:"/pfx-password.txt" "[To Parent Directory]"
intext:"index of" "uploads"
intext:"password" | "passwd" | "pwd" site:ghostbin.com
site:pastebin.com intext:password.txt
intext:"Index of" intext:"password.zip"
site:pastebin.com intext:pass.txt
site:pastebin.com "password"
site:pastebin.com "admin password"
site:controlc.com intext:"password"
site:rentry.co intext:"password"