high
Admin panels
site:{target} (inurl:admin OR inurl:administrator OR inurl:backend OR inurl:dashboard)
medium
Login pages
site:{target} (inurl:login OR inurl:signin OR inurl:auth OR intitle:"login")
high
Open directory listings
site:{target} intitle:"index of"
critical
phpinfo() exposure
site:{target} ext:php intitle:phpinfo "PHP Version"
high
Apache server-status / server-info
site:{target} (inurl:server-status OR inurl:server-info)
critical
Version control leaks (.git/.svn/.env)
site:{target} (inurl:".git" OR inurl:".svn" OR inurl:".env")
medium
Swagger / API docs exposed
site:{target} (inurl:swagger OR inurl:api-docs OR inurl:redoc OR inurl:graphql)
high
Verbose error messages
site:{target} (intext:"SQL syntax" OR intext:"fatal error" OR intext:"stack trace" OR intext:"warning: include")
critical
Config files
site:{target} (ext:htaccess OR ext:conf OR ext:config OR ext:ini OR ext:yaml OR ext:yml)
critical
Exposed DB admin interfaces
site:{target} (inurl:phpmyadmin OR inurl:adminer OR inurl:pgadmin)
medium
WordPress wp-admin / wp-config
site:{target} (inurl:wp-admin OR inurl:wp-config OR inurl:wp-content/uploads)
high
Jenkins / CI dashboards
site:{target} (inurl:jenkins OR inurl:jobs/build OR intitle:"Dashboard [Jenkins]")
high
Monitoring stacks (Grafana/Kibana/Prometheus)
site:{target} (inurl:grafana OR inurl:kibana OR inurl:prometheus OR inurl:9090 OR intitle:"Grafana")
high
Webcam / IoT panels
site:{target} (inurl:axis-cgi OR intitle:"camera" OR intitle:"webcam" OR inurl:viewerframe)
medium
Webmail interfaces (Roundcube/Zimbra/OWA)
site:{target} (inurl:roundcube OR inurl:webmail OR inurl:owa OR inurl:zimbra)
critical
Open Elasticsearch / cluster endpoints
site:{target} (inurl:_cluster OR inurl:_cat OR inurl:9200)
critical
Date of birth in documents
site:{target} (filetype:pdf OR filetype:xlsx OR filetype:docx) (intext:"date of birth" OR intext:"date de naissance" OR intext:"DOB" OR intext:"ne le" OR intext:"née le")
critical
ID / passport numbers in documents
site:{target} (filetype:pdf OR filetype:xlsx) (intext:"passport" OR intext:"passeport" OR intext:"carte d'identite" OR intext:"national ID" OR intext:"CNI")
critical
Social security / NIR / SSN exposure
site:{target} (filetype:pdf OR filetype:xlsx) (intext:"SSN" OR intext:"social security" OR intext:"numero de securite sociale" OR intext:"NIR")
critical
Banking info (IBAN / RIB / SWIFT)
site:{target} (filetype:pdf OR filetype:xlsx) (intext:"IBAN" OR intext:"BIC" OR intext:"RIB" OR intext:"SWIFT")
high
Customer records (invoices / orders / clients)
site:{target} (filetype:pdf OR filetype:xlsx) (intext:"facture" OR intext:"invoice" OR intext:"n° client" OR intext:"customer ID" OR intext:"order #")
critical
Medical / health data exposure
site:{target} (filetype:pdf OR filetype:xlsx) (intext:"diagnostic" OR intext:"patient" OR intext:"prescription" OR intext:"ordonnance")
high
Sequential download endpoints (IDOR-prone)
site:{target} inurl:download (inurl:"id=" OR inurl:"file=" OR inurl:"doc=")
high
Documents served by path ID (IDOR-prone)
site:{target} (inurl:"/files/" OR inurl:"/documents/" OR inurl:"/uploads/" OR inurl:"/getfile/") filetype:pdf
high
Object IDs in query strings
site:{target} (inurl:"customer_id=" OR inurl:"invoice_id=" OR inurl:"order_id=" OR inurl:"user_id=" OR inurl:"client_id=")
high
FTP servers / endpoints exposed
site:{target} (inurl:ftp OR inurl:"/ftp/" OR inurl:":21")
medium
Default webserver welcome pages (fresh/abandoned installs)
site:{target} (intitle:"Apache2 Ubuntu Default Page" OR intitle:"Welcome to nginx" OR intitle:"IIS Windows Server" OR intitle:"Test Page for the Apache HTTP Server")
medium
PHP IDOR pattern (?id=)
site:{target} inurl:".php?id="