Google Database Hackings for Sensitive Directories

Here are few Google Query which will help you to find out sensitive directories. These Google database hacking for queries will help you to find out the directories with sensitive materials.  By using these queries hackers can dig out most sensitive directories on website server and access the confidential data. If your web server has also these loop holes then try to contact your webmaster and fix this bug.

1.   Google search: inurl:/xampp

This dork looks for servers with xampp installed

2.   Google search: allintext:”WebServerX Server at”

For Quick and dirty WebserverX HTTP server google dork

3.   Google search: intitle:index.of ios -site:cisco.com

Google search for Cisco IOS images

4.   Google search: intitle:index.of cisco asa -site:cisco.com

Google search for Pix/Asa images

5.   Google search: intitle:index.of.config

These directories can give information about a web server’s configuration. This should never be viewable to the public as some files may contain clear text of encrypted passwords, depending on the level of security. It can also contain information on various ports, security permissions. etc.