Oh Look, Your Secrets Are on Google (Again)

Below are categories of useful dorks, each with examples you can drop into Google as-is.
Just replace example.com with your own target domain if you’d like.

I used these a lot for OSINT and BugBounty Purposes and also if you haven’t checked out our first part check that

If you can’t read further there a free link Brother 🤑

Developers sometimes leave .git/ folders accessible on web servers.
These can reveal source code, commit history, and credential

inurl:"/.git" example.com -github

What’s happening here?
We’re asking Google to find URLs on example.com that include .git, but excluding results from GitHub.