BLackLine Dork Hunter

v1.0 | UNDERGROUND EDITION

General Information Gathering

Find Directory Listing
intitle:"index of"= "parent directory" site:example.com
Find configuration files
ext:xml OR ext:conf OR ext:cnf OR ext:ini OR ext:ini OR ext:env "DB_PASSWORD" site:example.com
Discover database backups
ext:sql "password" OR "username" OR "backup" site:example.com
Expose sensitive server info files
ext:php inurl:info.php OR inurl:phpinfo.php site:example.com
Identify WordPress login pages
inurl:wp-login.php OR inurl:wp-admin site:example.com
Search for exposed Laravel .env files
ext:env "DB_PASSWORD" OR "DB_USERNAME" "APP_KEY" site:example.com
Find Git repositories or sensitive files
inurl:.git OR inurl:.svn OR inurl:.hg -github site:example.com
Explore cloud storage links
site:drive.google.com OR site:dropbox.com OR site:onedrive.com intext:example.com
Find outdated software or CMS
"powered by WordPress" "Version 4." OR "powered by Joomla" "Version 3." site:example.com
Find Secret Key
"filetype:yaml "secret_key" site:example.com
Find outdated software or CMS
"powered by WordPress" "Version 4." OR "powered by Joomla" "Version 3." site:example.com
Find private keys
filetype:key "PRIVATE KEY" site:example.com
Find PEM keys
filetype:pem "PRIVATE KEY" site:example.com
Find debug logs
filetype:log "debug" "error" site:example.com
Find stack traces
filetype:log "Stack trace" site:example.com
Find connection issues
filetype:log "unable to connect" site:example.com
Find authentication failures
filetype:log "authentication failed" site:example.com
Find DB passwords
filetype:json "db_password" -github site:example.com

Credentials

Discover company email addresses
"@example.com" ext:txt OR ext:csv
Find lists of email IDs
ext:xls OR ext:csv "email" "password" site:example.com -github
Combine multiple terms for complex queries
(ext:php OR ext:asp OR ext:jsp) "password" OR "credentials" -github.com site:example.com
Password Search
filetype:ini "password" site:example.com

Error Logs and Debug Data

Expose Apache or Nginx logs
"Apache Status" intitle:"Apache Server Information" site:example.com -site:apache.org
Search for debugging logs
ext:log "error" OR "debug" "username" OR "password" site:example.com

Vulnerable Endpoints

Find Error Based SQLI
site:example.com intext:"sql syntax near" OR intext:"syntax error" OR intext:"unexpected end of SQL" OR intext:"Warning: mysql_" OR intext:"pg_connect()" OR intext:"error in your SQL syntax" OR intext:"OLE DB Provider for SQL Server"
Find open cameras
inurl:"/view/viewer_index.shtml" "Live View / - AXIS" site:example.com
Exposed Jenkins servers
intitle:"Dashboard [Jenkins]" OR intitle:"Jenkins" inurl:/login site:example.com -site:apache.org
Publicly accessible webcams
intitle:"Live View / - AXIS" | "Network Camera" | "Sony Network Camera SNC" inurl:live site:example.com
Exposed Jenkins servers
intitle:"Dashboard [Jenkins]" OR intitle:"Jenkins" inurl:/login site:example.com -site:apache.org

API Keys and Secrets

Search for exposed API keys
ext:env OR ext:json OR ext:yaml "AWS_SECRET_ACCESS_KEY" OR "API_KEY" -github site:example.com
Google Maps API keys
ext:js "AIzaSy" -github site:example.com
Search for exposed API keys
ext:env OR ext:json OR ext:yaml "AWS_SECRET_ACCESS_KEY" OR "API_KEY" -github site:example.com
Search for exposed API keys
ext:env OR ext:json OR ext:yaml "AWS_SECRET_ACCESS_KEY" OR "API_KEY" -github site:example.com
Search for exposed API keys
ext:env OR ext:json OR ext:yaml "AWS_SECRET_ACCESS_KEY" OR "API_KEY" -github site:example.com