Information Gathering with Google Dorks
Searching for public Sub-domains for your target domain.
Site:yoursite.com -site:www.yoursite.com
Getting Open Index or Insecure Information
intitle:index of / Parent Directory site:yoursitehere.com
You can search for admin directories
intitle:Index of /admin site:yoursitehere.com
You can search for password directories
intitle:Index of /password site:yoursitehere.com
You can search for mail directories
intitle:Index of /mail site:yoursitehere.com
You can search for files like passwd
intitle:Index of / passwd site:yoursitehere.com
You can search for password.txt files
intitle:Index of / password.txt site:yoursitehere.com
You can search for htaccess file
intitle:Index of / .htaccess site:yoursitehere.com
You can also search for diffrent extensions.
intitle:index of ftp .mdb site:yoursitehere.com
You can also try and look for admin pages or the login functionalities
Intitle: login admin site:yoursitehere.com
Using InURL we can search for diffrent functionalities within the website.
Search for Admin Login Functionality on target domain
inurl:admin site:yoursitehere.com
Search for Login Functionality on target domain
inurl:login site:yoursitehere.com
Using FileType we can search for diffrent files within the website.
Searching for text files containing passwd in URL on target domain
inurl:passwd filetype:txt site:yoursitehere.com
Searching for db files containing admin in URL on target domain
inurl:admin filetype:db site:yoursitehere.com
Searching for logs on target domain
filetype:log site:yoursitehere.com
Searching for Excel and csv files on target domain
filetype:xls csv site:yoursitehere.com
Search for other sites containing links for your target website
link:yoursite.com -site:yoursite.com
You can also use Google Translater as a proxy to access the website
http://translate.google.com/translate?hl=en&sl=ar&tl=en&u=http://www.yoursitehere.com/urlhere
