BLackLine Dork Hunter

v1.0 | UNDERGROUND EDITION

General Information Gathering

Find Directory Listing Medium Risk
intitle:"index of"= "parent directory" site:example.com
Find configuration files high Risk
ext:xml OR ext:conf OR ext:cnf OR ext:ini OR ext:ini OR ext:env "DB_PASSWORD" site:example.com
Discover database backups critical
ext:sql "password" OR "username" OR "backup" site:example.com
Expose sensitive server info files Medium Risk
ext:php inurl:info.php OR inurl:phpinfo.php site:example.com
Identify WordPress login pages Low
inurl:wp-login.php OR inurl:wp-admin site:example.com
Search for exposed Laravel .env files critical
ext:env "DB_PASSWORD" OR "DB_USERNAME" "APP_KEY" site:example.com
Find Git repositories or sensitive files critical
inurl:.git OR inurl:.svn OR inurl:.hg -github site:example.com
Explore cloud storage links Medium Risk
site:drive.google.com OR site:dropbox.com OR site:onedrive.com intext:example.com
Find outdated software or CMS High Risk
"powered by WordPress" "Version 4." OR "powered by Joomla" "Version 3." site:example.com
Find Secret Key Medium Risk
"filetype:yaml "secret_key" site:example.com
Find outdated software or CMS Medium
"powered by WordPress" "Version 4." OR "powered by Joomla" "Version 3." site:example.com
Find private keys High Risk
filetype:key "PRIVATE KEY" site:example.com
Find PEM keys High Risk
filetype:pem "PRIVATE KEY" site:example.com
Find debug logs Medium
filetype:log "debug" "error" site:example.com
Find stack traces Medium Risk
filetype:log "Stack trace" site:example.com
Find connection issues Low Risk
filetype:log "unable to connect" site:example.com
Find authentication failures Medium Risk
filetype:log "authentication failed" site:example.com
Find DB passwords Critical
filetype:json "db_password" -github site:example.com

Credentials

Discover company email addresses low Risk
"@example.com" ext:txt OR ext:csv
Find lists of email IDs High
ext:xls OR ext:csv "email" "password" site:example.com -github
Combine multiple terms for complex queries High Risk
(ext:php OR ext:asp OR ext:jsp) "password" OR "credentials" -github.com site:example.com
Password Search High Risk
filetype:ini "password" site:example.com

Error Logs and Debug Data

Expose Apache or Nginx logs High
"Apache Status" intitle:"Apache Server Information" site:example.com -site:apache.org
Search for debugging logs Medium Risk
ext:log "error" OR "debug" "username" OR "password" site:example.com

Vulnerable Endpoints

Find Error Based SQLI Critical
site:example.com intext:"sql syntax near" OR intext:"syntax error" OR intext:"unexpected end of SQL" OR intext:"Warning: mysql_" OR intext:"pg_connect()" OR intext:"error in your SQL syntax" OR intext:"OLE DB Provider for SQL Server"
Find XSS Param High Risk
inurl:q= | inurl:s= | inurl:search= | inurl:query= | inurl:keyword= | inurl:lang= inurl:& site:example.com
Find SQL Param High Risk
inurl:id= | inurl:pid= | inurl:category= | inurl:cat= | inurl:action= | inurl:sid= | inurl:dir= inurl:& site:example.com
Find open cameras High
inurl:"/view/viewer_index.shtml" "Live View / - AXIS" site:example.com
Find Open Redirect Param Low Risk
inurl:redirectURL=http site:example.com:inurl:redir | inurl:url | inurl:redirect | inurl:return | inurl:src=http | inurl:r=http
Find LFI Param High Risk
inurl:include | inurl:dir | inurl:detail= | inurl:file= | inurl:folder= | inurl:inc= | inurl:locate= | inurl:doc= | inurl:conf= inurl:& site:example.com
File upload endpoints High
site:example.com "choose file"
Exposed Jenkins servers Medium Risk
intitle:"Dashboard [Jenkins]" OR intitle:"Jenkins" inurl:/login site:example.com -site:apache.org
Publicly accessible webcams High Risk
intitle:"Live View / - AXIS" | "Network Camera" | "Sony Network Camera SNC" inurl:live site:example.com
Exposed Jenkins servers Medium Risk
intitle:"Dashboard [Jenkins]" OR intitle:"Jenkins" inurl:/login site:example.com -site:apache.org

API Keys and Secrets

Search for exposed API keys high
ext:env OR ext:json OR ext:yaml "AWS_SECRET_ACCESS_KEY" OR "API_KEY" -github site:example.com
Google Maps API keys Medium
ext:js "AIzaSy" -github site:example.com
Search for exposed API keys High Risk
ext:env OR ext:json OR ext:yaml "AWS_SECRET_ACCESS_KEY" OR "API_KEY" -github site:example.com
Search for exposed API keys High Risk
ext:env OR ext:json OR ext:yaml "AWS_SECRET_ACCESS_KEY" OR "API_KEY" -github site:example.com

Support BlackLine