Arsenly_OSINTby XowiaLabs

Dork Generators

Advanced search operators, ready to fire. Enter a domain, org, or username and every query below resolves instantly, click to run it on Google, GitHub, or Shodan.

1. Enter your target

Queries update live. Leave a field blank to skip dorks that need it.

2. Pick & run:
GoogleGovernment PDFsInternet Search
site:gov filetype:pdf "contract"
GoogleExposureInternet Search
intitle:"index of" passwords.txt
GoogleIP CamerasInternet Search
inurl:viewer/live/index.html
GoogleEmailsInternet Search
site:linkedin.com "@{domain}"
needs domain
GoogleSubdomainsInternet Search
site:*.{domain} -www
needs domain
GitHubSocial Networks
{org} filename:.env AWS_SECRET_ACCESS_KEY
needs org
GitHubSocial Networks
{org} filename:.env MAIL_PASSWORD
needs org
GitHubSocial Networks
{org} filename:.npmrc _auth
needs org
GitHubSocial Networks
{org} filename:.dockercfg
needs org
GitHubSocial Networks
{org} filename:config.rb password
needs org
GitHubSocial Networks
{org} filename:id_rsa BEGIN OPENSSH PRIVATE KEY
needs org
GitHubSocial Networks
{org} filename:id_dsa BEGIN DSA PRIVATE KEY
needs org
GitHubSocial Networks
{org} extension:pem PRIVATE KEY
needs org
GitHubSocial Networks
{org} filename:.git-credentials
needs org
GitHubSocial Networks
{org} filename:settings.py SECRET_KEY
needs org
GitHubSocial Networks
{org} filename:wp-config.php DB_PASSWORD
needs org
GitHubSocial Networks
{org} filename:database.yml password
needs org
GitHubSocial Networks
{org} extension:sh AWS_ACCESS_KEY_ID
needs org
GitHubSocial Networks
{org} filename:terraform.tfvars
needs org
GoogleDomain / IP / DNS
site:*.{domain} filetype:pdf
needs domain
GoogleDomain / IP / DNS
site:*.{domain} intitle:"dashboard"
needs domain
GoogleDomain / IP / DNS
site:*.{domain} intext:"confidential"
needs domain
GoogleAdvanced Google Dorks
site:pastebin.com "password" "@{domain}"
needs domain
GoogleAdvanced Google Dorks
site:github.com "api_key" OR "api_secret" "company"
GoogleAdvanced Google Dorks
site:trello.com intext:"password" OR intext:"passwd"
GoogleAdvanced Google Dorks
site:*.s3.amazonaws.com ext:xls | ext:xlsx "confidential"
GoogleAdvanced Google Dorks
filetype:pdf intext:"internal use only" site:gov
GoogleAdvanced Google Dorks
inurl:/view/view.shtml
GoogleAdvanced Google Dorks
intitle:"webcamXP 5"
GoogleAdvanced Google Dorks
intitle:"index of" "admin"
GoogleAdvanced Google Dorks
intitle:"Dashboard" inurl:login
GoogleAdvanced Google Dorks
inurl:wp-admin intitle:"Dashboard"
GoogleAdvanced Google Dorks
intitle:"phpMyAdmin" "Welcome to phpMyAdmin"
GoogleAdvanced Google Dorks
inurl:"/phpmyadmin/index.php"
GoogleAdvanced Google Dorks
"#mysql dump" filetype:sql
GoogleAdvanced Google Dorks
site:linkedin.com "company name" "CEO" | "CTO" | "CISO"
GoogleAdvanced Google Dorks
site:*.linkedin.com "@companymail.com"
GoogleAdvanced Google Dorks
site:*.*.{domain}
needs domain
ShodanICS/OT & Critical-Infrastructure OSINT
port:502 country:DE # Modbus
ShodanICS/OT & Critical-Infrastructure OSINT
port:102 country:ES # S7Comm
ShodanICS/OT & Critical-Infrastructure OSINT
port:20000 # DNP3
ShodanICS/OT & Critical-Infrastructure OSINT
port:47808 # BACnet
ShodanICS/OT & Critical-Infrastructure OSINT
port:4840 # OPC UA
ShodanICS/OT & Critical-Infrastructure OSINT
"Siemens" port:102 # S7 devices
GoogleCloud Storage OSINT
site:s3.amazonaws.com "target"
GoogleCloud Storage OSINT
site:blob.core.windows.net "target"
GoogleCloud Storage OSINT
site:storage.googleapis.com "target"
GoogleCloud Storage OSINT
site:amazonaws.com filetype:pdf "confidential"

Use responsibly. Dorks surface content that is already public but often unintentionally exposed. Finding a secret does not authorise using it, see our ethics guidance. Practice responsible disclosure.