Skip to content

Instantly share code, notes, and snippets.

@kleo
Created March 5, 2018 15:03
Show Gist options
  • Select an option

  • Save kleo/38c6bd93a58397971374ff4781b19775 to your computer and use it in GitHub Desktop.

Select an option

Save kleo/38c6bd93a58397971374ff4781b19775 to your computer and use it in GitHub Desktop.
# Directory listing vulnerabilities
site:example.com/ intitle:index.of
# Configuration files exposed
site:example.com/ ext:xml | ext:conf | ext:cnf | ext:reg | ext:inf | ext:rdp | ext:cfg | ext:txt | ext:ora | ext:ini
# Database files exposed
site:example.com/ ext:sql | ext:dbf | ext:mdb
# Log files exposed
site:example.com/ ext:log
# Backup and old files
site:example.com/ ext:bkf | ext:bkp | ext:bak | ext:old | ext:backup
# Login pages
site:example.com/ inurl:login
# SQL errors
site:example.com/ intext:"sql syntax near" | intext:"syntax error has occurred" | intext:"incorrect syntax near" | intext:"unexpected end of SQL command" | intext:"Warning: mysql_connect()" | intext:"Warning: mysql_query()" | intext:"Warning: pg_connect()"
# Publicly exposed documents
site:example.com/ ext:doc | ext:docx | ext:odt | ext:pdf | ext:rtf | ext:sxw | ext:psw | ext:ppt | ext:pptx | ext:pps | ext:csv
# phpinfo()
site:example.com/ ext:php intitle:phpinfo "published by the PHP Group"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment