Find confidential PDF documents on a specific domain
site:example.com filetype:pdf confidential
Directory Listings
REC-2.1
Find open directory listings on a specific domain
intitle:"Index of" site:example.com
Find login pages on a specific domain
inurl:login site:example.com
Configuration Files
CONF-4.3
Find configuration files on a specific domain
site:example.com filetype:xml | filetype:conf | filetype:cnf | filetype:reg | filetype:inf | filetype:rdp | filetype:cfg | filetype:txt | filetype:ora | filetype:ini
Find database files on a specific domain
site:example.com filetype:sql | filetype:dbf | filetype:mdb
Exposed Environment Files
SEC-6.1
Find environment files with potential credentials
site:example.com filetype:env "DB_PASSWORD" | "API_KEY" | "SECRET"
SQL Error Messages
VUL-7.3
Find pages with SQL error messages that might indicate vulnerabilities
site:example.com intext:"sql syntax near" | intext:"syntax error has occurred" | intext:"incorrect syntax near"