OSINT Bible 29. Advanced Google Dorks
2025 Dorks (specific):
# Sensitive information leaks
site:pastebin.com "password" "@company.com"
site:github.com "api_key" OR "api_secret" "company"
site:trello.com intext:"password" OR intext:"passwd"
# Exposed corporate documents
site:*.s3.amazonaws.com ext:xls | ext:xlsx "confidential"
filetype:pdf intext:"internal use only" site:gov
# IP cameras and IoT devices
inurl:/view/view.shtml
intitle:"webcamXP 5"
# Exposed admin panels
intitle:"index of" "admin"
intitle:"Dashboard" inurl:login
inurl:wp-admin intitle:"Dashboard"
# Exposed databases
intitle:"phpMyAdmin" "Welcome to phpMyAdmin"
inurl:"/phpmyadmin/index.php"
"#mysql dump" filetype:sql
# Employee information
site:linkedin.com "company name" "CEO" | "CTO" | "CISO"
site:*.linkedin.com "@companymail.com"
# Subdomains (combine with crt.sh)
site:*.target.com -www
site:*.*.target.com
Sections
29. Advanced Google Dorks
open-source intelligence