Google Dork - Dorking Code

Bunch Collection of Google Dork You Might Know

Reset Search
No	Dork
1	intext:"Powered by Abyss Web Server" Category: Web Server Detection
2	intitle: "Welcome to nginx!" + "Thank you for using nginx." Category: Web Server Detection
3	intitle:livezilla "Server Time" Category: Web Server Detection
4	intitle:"Sucuri WebSite Firewall - Access Denied" Category: Web Server Detection
5	intext:"Powered by phpSQLiteCMS" | intitle:"phpSQLiteCMS - A simple & lightweight CMS" Category: Web Server Detection
6	"This server is operated by OpenX." Category: Web Server Detection
7	inurl:"/uddiexplorer/searchpublicregistries.jsp" Category: Page containing log in portal & Web Server Detection Description: This dork allows user to access default page of Oracle Weblogic Server - UDDI Explorer. Some of scanner tools would detect SSRF vulnerability for weblogic uddi explorer. Moreover, there is a flaw regarding the weblogic server version which vulnerables to XSS. Reference: https://blog.gdssecurity.com/labs/2015/3/30/weblogic-ssrf-and-xss-cve-2014-4241-cve-2014-4210-cve-2014-4.html Author: Zulfikar Azhari Category: Advisories and Vulnerabilities
8	inurl="/uddiexplorer/SetupUDDIExplorer.jsp" Category: Page containing log in portal & Web Server Detection Description: This dork allows user to access default page of Oracle Weblogic Server - UDDI Explorer. Some of scanner tools would detect SSRF vulnerability for weblogic uddi explorer. Moreover, there is a flaw regarding the weblogic server version which vulnerables to XSS. Reference: https://blog.gdssecurity.com/labs/2015/3/30/weblogic-ssrf-and-xss-cve-2014-4241-cve-2014-4210-cve-2014-4.html Author: Zulfikar Azhari Category: Advisories and Vulnerabilities
9	intext:"Powered by Nesta" Nesta, a Ruby CMS Bruno Schmid https://ch.linkedin.com/in/schmidbruno Category: Web Server Detection
10	Coldbox | contentbox | commandbox "Powered by ContentBox" ContentBox content management tools and CMS. Bruno Schmid https://ch.linkedin.com/in/schmidbruno Category: Web Server Detection
11	intext:"Powered by Typesetter" Typesetter CMS dorks Bruno Schmid https://ch.linkedin.com/in/schmidbruno Category: Web Server Detection
12	intext:"Powered by (Quantum | Quantum CMS | CMS) Sites using Quantum CMS builder Bruno Schmid https://ch.linkedin.com/in/schmidbruno Category: Web Server Detection
13	intext:"Powered by Sentora" -github.com Sites using Sentora CMS. Bruno Schmid https://ch.linkedin.com/in/schmidbruno Category: Web Server Detection
14	inurl:/_hcms/ Google dork *description: * Get all sites using Hubspot's Content Mangement System (CMS) *Google Search: *inurl:/_hcms/ Submitted by: Alfie Website: (https://the-infosec.com) -- Regards, Alfie. the-infosec.com Category: Web Server Detection
15	Apache online documentation When you install the Apache web server, you get a nice set of online documentation. When you learn how to use Apache, your supposed to delete these online Apache manuals. These sites didn't. If they're in such a hurry with Apache installs, I wonder what else they rushed through? Category: Web Server Detection
16	Windows 2000 Internet Services Category: Web Server Detection
17	IIS 4.0 Category: Web Server Detection
18	OpenBSD running Apache Category: Web Server Detection
19	inurl:tech-support inurl:show Cisco Category: Web Server Detection
20	index_i.shtml Ready (Xerox printers on the web!) Category: Web Server Detection
21	aboutprinter.shtml (More Xerox printers on the web!) Category: Web Server Detection
22	"seeing this instead" intitle:"test page for apache" Category: Web Server Detection
23	intitle:"Test Page for Apache" "It Worked!" Category: Web Server Detection
24	intitle:"Test Page for Apache" "It Worked!" "on this web" Category: Web Server Detection
25	allintitle:Netscape FastTrack Server Home Page Category: Web Server Detection
26	intitle:"Test Page for Apache" Category: Web Server Detection
27	intitle:Snap.Server inurl:Func= Category: Web Server Detection
28	intitle:"300 multiple choices" Category: Web Server Detection
29	inurl:domcfg.nsf Category: Web Server Detection
30	allinurl:".nsconfig" -sample -howto -tutorial Category: Web Server Detection
31	Environment vars Category: Web Server Detection
32	Red Hat Unix Administration Category: Web Server Detection
33	"AnWeb/1.42h" intitle:index.of Category: Web Server Detection
34	"CERN httpd 3.0B (VAX VMS)" The version of a particular web server can be detected with a simple query like this one. Although the same thing can be accomplished by browsing the web site, this method offers another layer of anonymity. Armed with this information an attacker can plan an attack with more precision. Category: Web Server Detection
35	"JRun Web Server" intitle:index.of Category: Web Server Detection
36	"MaXX/3.1" intitle:index.of Category: Web Server Detection
37	"Microsoft-IIS/* server at" intitle:index.of The version of a particular web server can be detected with a simple query like this one. Although the same thing can be accomplished by browsing the web site, this method offers another layer of anonymity. Armed with this information an attacker can plan an attack with more precision. Category: Web Server Detection
38	"Microsoft-IIS/4.0" intitle:index.of Category: Web Server Detection
39	"Microsoft-IIS/5.0 server at" The version of a particular web server can be detected with a simple query like this one. Although the same thing can be accomplished by browsing the web site, this method offers another layer of anonymity. Armed with this information an attacker can plan an attack with more precision. Category: Web Server Detection
40	"Microsoft-IIS/6.0" intitle:index.of Category: Web Server Detection
41	"OmniHTTPd/2.10" intitle:index.of Category: Web Server Detection
42	"OpenSA/1.0.4" intitle:index.of Category: Web Server Detection
43	"Red Hat Secure/2.0" Category: Web Server Detection
44	"Red Hat Secure/3.0 server at" Category: Web Server Detection
45	sEDWebserver * server +at intitle:index.of Category: Web Server Detection
46	fitweb-wwws * server at intitle:index.of Category: Web Server Detection
47	"httpd+ssl/kttd" * server at intitle:index.of Category: Web Server Detection
48	"Novell, Inc" WEBACCESS Username Password "Version *.*" Copyright -inurl:help -guides|guide Category: Web Server Detection
49	"powered by" "shoutstats" hourly daily Category: Web Server Detection
50	intitle:"Shoutcast Administrator" Category: Web Server Detection