/AdDorks

Advanced Recon Dorks

GNU Affero General Public License v3.0AGPL-3.0

👨‍💻 Advance-Recon-Dorks

This Dork List Provides Dorks for files,vulnerabilities , cloud services & many more

open redirect Dork
site:domain.com inurl:redir | inurl:url | inurl:redirect | inurl:return | inurl:src=http | inurl:r=http
Install / Setup Files Dork
site:domain.com inurl:redir | inurl:url | inurl:redirect | inurl:return | inurl:src=http | inurl:r=http
Finding BackDoor Dork
site:domain.com  inurl:shell | inurl:backdoor | inurl:wso | inurl:cmd | shadow | passwd | boot.ini | inurl:backdoor
Apache STRUTS RCE
site:domain.com ext:action | ext:struts | ext:do
3RD Party exposure
site:http://ideone.com | site:http://codebeautify.org | site:http://codeshare.io | site:http://codepen.io | site:http://repl.it | site:http://justpaste.it | site:http://pastebin.com | site:http://jsfiddle.net | site:http://trello.com | site:*.atlassian.net | site:bitbucket.org "domain.com"
Robots.txt
domain.com/robots.txt
Domain/Host investigation tool
website :
https://domaineye.com/
LinkedIn Employee Dork
site:linkedin.com employees domain.com
.htaccess & Sensitive Files
site:domain.com inurl:"/phpinfo.php" | inurl:".htaccess"
Find Subdomains
site:*.domain.com
Find Sub-Subdomains
site:*.*.domain.com
WordPress Dork
site:domain.com inurl:wp-content | inurl:wp-includes
Search in BitBucket & Altassian
site:atlassian.net | site:bitbucket.org "domain.com"
GitHub Search
"*.domian.com"
Test Crossdomain
domain.com/crossdomain.xml
.git folder
inurl:"/.git "domain.com -github
Digital Ocean Spaces
site:digitaloceanspaces.com "domain.com"
Find .SWF file
inurl:domain.com ext:swf
FInd .SWF file (Yandex)
site:domain.com mime:swf
Traefik
intitle:traefik inurl:8080/dashboard"domain.com"
SharePoint RCE CVE-2020-0646
.sharepoint.com/_vti_bin/webpartpages/asmx -docs -msdn -mdsec site:domain.com
API End Points WSDL
site:domain.com filetype:wsdl | filetype:WSDL | ext:svc | inurl:wsdl | Filetype: ?wsdl | inurl:asmx?wsdl | inurl:jws?wsdl | intitle:_vti_bin/sites.asmx?wsdl | inurl:_vti_bin/sites.asmx?wsdl
GitHub GIST Searches
*."domain.com"
Search in crt.sh logs
https://crt.sh/?q=domain.com

Plain text Pass wordleak |

site:throwbin.io domain.com
What CMS?
What CMS?
https://whatcms.org/?s=domain.com