Let me start by saying the title might be a little off, as the files are not technically hidden as much as they are obscure.
While most of us would consider ourselves pretty good Googler searchers these days but the truth is, there is so much more to Google searching than meets the eye.
Introducing… “Google Dorking”
Yes, I said it Google Dorking and it’s not what you might think. Sounds dirty, right? It’s not just me. LOL
Google Dorking also known as Google hacking is about searching Google in a way that filters and brings all sorts or OSINT and InfoSec goodies floating to the top.
Think Before You Dork!!!
Although the information my be available on Google, it does not mean you can use that information to try and hack or gain unauthorized access to a system or individual computer.
Hacking is illegal, don’t do it, don’t talk about it.
With that being said, please be careful, be responsible and please enjoy these Google Dorking Examples for educational purposes.
Searching Google for user names and password in log files
allintext:username filetype:log
Searching Google for Open FTP Servers
intitle:"index of" inurl:ftp
Searching Google for Open Web Cams
Intitle:"webcamXP 5"
inurl:view/index.shtml
Searching Goolge for Database Passwords
db_password filetype:env
Searching Google for Git-hub Resources
filetype:inc php -site:github.com -site:sourceforge.net
Searching Google for PHP Variables
filetype:php "Notice: Undefined variable: data in" -forum
Search Google for Server Configuration Files
intitle:"WAMPSERVER homepage" "Server Configuration" "Apache Version"
Search Google for Nessus Scan Reports
intitle:"report" ("qualys"|"acunetix"|"nessus"|"netsparker"|"nmap") filetype:pdf
Search Google for Networking Xls Files
ext:xls netoworking
Search Google for FrontPage Servers w/ Admin Info
"#-Frontpage-" inurl:administrators.pwd
Search Google for Unprotected Cameras
inurl:view/index.shtml
Search Google for Hidden Login Pages
Username password site:com filetype:txt DomainName.com
Google Dorking Video by Null Byte
Hope this helps somebody!
~Cyber Abyss