Subdomain enumeration:

shodan.io crt.sh dorki.attaxa.com searchdns.netcraft.com securitytrails.com vedbex.com viewdns.info *.Google *.Google.* *.*.Google hunter.how search.censys.io Bing

Technology detector:

builtwith.com webtechsurvey.com w3techs.com whatcms.org

Origin IP finding:

shodan.io(Method 1) shodan.io(cert) shodan.io(Method 3) search.censys.io viewdns.info mxtoolbox.com securitytrails.com

Port scanning:

shodan.io viewdns.info dnschecker.org web-check.xyz

URLs collecting:

web.archive.org web.archive.org(wildcard) urlscan.io otx.alienvault.com otx.alienvault.com(wildcard) virustotal.com (API)

Specific page find:

Submit pages Feedback form Submit a request Request type forms Forum pages Submit forms Contact support Contact us page Report page Support center Submit a request page Contact us form

Information disclosure:

Swagger UI .env Directory listing vulnerabilities exposed FTP Find PDF's Exposed configuration file File upload endpoints Exposed database Exposed Log Backup & Old files Publicly exposed documents Find emails Find password 1 Find password 2 Find password emails Sensitive Documents #1 Apache config Files Apache STRUTS RCE Robots.txt phpinfo Apache Server Status .htaccess sensitive files Install/Setup Files 3rd Party Exposure Finding exposed cloud service credentials Digital Ocean Spaces Firebase s3 Bucket Google APIs Google drive Azure OneDrive DropBox Google Docs Reverse IP Lookup Source Code-Public[WWW] securityheaders.com Check Website OS Login/Admin finder Finding Backdoors Employees on LinkedIn Employees on facebook Employees on twitter

All vulnerability:

SQLi Parameters (51) SQLi Parameters (68) Error SQLIs (71) Error SQLIs (16) Post Parameters (3) Open Redirects (41) Open Redirects (18) SSRF Params (24) RCE Params (23) XSS Params (27) XSS Params (22) Idor Params (12) LFI Params (24) information disclosure ext (58)

CMS dorking:

WP juicy ext (19) wp_users

GitHub normal dorking:

GitLab .git API_KEY/api_key/API_SECRET/api_secret filename:.env password/secrat/credential confidential/sensitive fatal/error/exception password/secret/credential/in:file branch.* extension:json/yml/xml/config token/access_token filename:config/settings secrets.

More dork engines

exploit-db.comdorki.attaxa.comdorksearch.com