Find Vulnerable Services & Hidden Info Using Google Dorks [Tutorial]

[@meh5812]

you should do a tutorial of how to not blink

[@root317]

Loool

[@rusirumunasinghe7354]

Imagine walking into a staring contest and this guy walks in

[@meh5812]

@@rusirumunasinghe7354 yeah

[@rickmonarch4552]

He has invisible eyelids.

[@mikemcdonald5147]

@@rusirumunasinghe7354 you're doomed doomed I say LOL

[@Mazda1080]

The fact that Google’s product KZbin recommended me of this video must be an unsolved mystery

[@Me-eb3wv]

Frfr

[@SednaFTW]

Same they must have made a major mistake I would have no need for this knowledge

[@robomods6793]

1:24

[@bigboibean7837]

Same

[@trickzclipz5910]

@@SednaFTW I do

[@MixingSneaX]

Imagine finding your password

[@Seltaeb_]

Plot twist: it was a password you forgot and figured was lost to time.

[@LucyWings]

@@vanshajrai6089 yup

[@kazutokirigaya2777]

@@vanshajrai6089 found my Netflix account and about 300 others Edit:paswords were included

[@k5y]

kazuto kirigaya link?

[@olbluelips]

I've found some of my very old passwords in huge plaintext databases. it's kind of a nice feeling somehow, as long as you don't still use that password anywhere

[@benbebop]

Trees: exist This man: Flying bushes

[@kyouutube8648]

Tree: Exists 4 Creepy Human: # 9 2 Hide behind: Tending Human 5, 6, ,7,... ..: Backyard. Flying Bushes: Exist ײ Cause / Effect: From Abuse & Neglect In Backyards belonging to Creepy Human #9 .... .... ... All Creepy Human equivalents like.

[@altypotato2459]

I'll be honest with you. I thought you just making nonsense... When I got to that part I laughed hard. lol well played

[@kyouutube8648]

@@altypotato2459 It would sound Nonsensical to to those who have not walked in my shoes for the past 2 1/2 years of my life. Thank you for finding it humorous either way. 💜God Bless💙 & 🎇Happy Holidays🎆

[@HITARIX]

"This place is crazy!" - I don't think he goes out so much.

[@kyouutube8648]

@@HITARIX I don go out much. I hide in a forest... Away from Humans.

[@MrIAmHighDef]

Nailed the video length lolll

[@christiansoto410]

Off by 1, he should have made it 13:37!

[@jimothyus]

Christian Soto it is 13:37 for me

[@jotardothegreat]

*Leet*

[@glocksantana853]

Anonymouse hax0r xD

[@that.03gt]

@@jimothyus same.

[@basilo9923]

i feel like clicking on this video just put me on a watchlist..

[@s000sdas]

Nope

[@st20332]

Don’t listen to yoka hes MI5 n wants you to keep doing your normal so he can catch you

[@joshuakuehn]

Ok zoomer

[@st20332]

Joshua Kuehn who

[@sehidnamirinifbypguypj5822]

@@joshuakuehn who the hell is zoomer? Is it a code name for a cyber spook

[@Luke-we6id]

shows us how to get usernames and passwords and tells us to not login.

[@aldxbaran]

Do it

[@luiginotcool]

How do you actually log in I have no idea how you would actually do that. You get a username and password for a database but idk how you would access the database

[@eloualiissam3501]

@ugur but how?

[@TrainsnStuff22]

@@luiginotcool If you can't figure out how to actually login then you should not be doing any of this stuff like looking for login credentials

[@rumplstiltztinkerstein]

There's no marketing in cybersecurity. Any vulnerability is both an oportunity to protect as it is to do harm. Some people will try to do harm with this information. But the more people know about these things, the more chances there are of people protecting themselves from these threats. If there were other ways to get people more secure we would gladly go for it. But we all know that keeping too much knowledge for just a handful of people is even more dangerous than everyone knowing about a threat.

[@Kliamframe]

I've been looking everywhere for a Vigor 2950 manual in chinese! Thank you!

[@mpanobertin4955]

hi can we chat inbox

[@Crunchiest]

Khall Himines yes

[@t-pain7889]

1:04 he blinks

[@andzelasgvazdauskas5504]

Glitch in the matrix

[@derayend6939]

Half blink, unfortunately

[@ashis-biswas]

Lol impossible

[@anagraphical_angel]

Oh my god This can't be!

[@susanwojci]

it was a half blink

[@WillZ0111]

Thank you, oh KZbin algorithm, for showing this to me instead of making it go viral first.

[@zeg0noidpils26]

I got it today as youtube recommendation, great one!

[@that.03gt]

I can't thumbs up bcuz the #111 is too good.

[@littlebit11124]

The information you give out, people would normally charge us so much money to learn! That makes you a great person and relives my migraine on where to look! Thank you!!

[@leoncampa]

Just keep in mind that whatever tools listed here are actually well known by law enforcement, which occasionally plant such files on purpose with the intention to incite people to access them. This then leads them to track you down, and is cause for arrest. Unlike entrapment (where someone pressures you to do something illegal), incitement (leaving open an easy target) is not a valid defense in court, and you are likely to face serious consequences if caught; regardless of your motive.

[@ComasGhost]

Like for example?

[@king_miles0259]

This cap how can you go to jail for looking at things that are on google. now it’s what you do with the things you look at that might get you in trouble

[@Eddie_Winter]

Or use the alternative "bing nerds"

[@juderadford1865]

How about no

[@lucaskeyworth]

What about yahoo geeks?

[@mayankraj2294]

.

[@kopuz.co.uk.]

question

[@just_a_rock]

AskJeeves knowitalls

[@lawsne0nx-dg4mingletspl4y2]

“Dont log in to accounts with passwords” Literally everyone who watched this video : ok boomer

[@sjoorsieportie7962]

ggDefault no shit boomer

[@him6008]

@ggDefault Ok boomer

[@aldrick3340]

@ggDefault ok boomer

[@ImDannn]

@ggDefault Boomer

[@goldensoldier2093]

@ggDefault Ok boomer

[@yeep123]

The fact that this video is 13:37 long makes it 100000 times better

[@mintydevil7982]

fr:3

[@I.D.M.]

"Flying bushes" We generally call those trees.

[@79mjm79]

LMFAOOO

[@gosth81]

Lol

[@yafethtb]

I was only tried to find about OSINT a few times, and KZbin suggested I need to see this. No complaints.

[@dropshotking1212]

So how do companies “accidentally” leave these logs visible like this? Like it’s not making sense to me... this kinda feels like someone did it on purpose what am I missing here??

[@ricky4761]

Exactly

[@SahraClayton]

I don't know if you notice it doesn't actually give many results

[@maimamkay1947]

robots.txt many people don't use it.

[@JosueRodriguez08]

Stupid people. That's it

[@BenderdickCumbersnatch]

Mostly misconfiguration. Like if a web app is meant to run on Apache web server and has a bunch of Apache ".htaccess" configuration files which forbid access to password files. But they decide to run the web app on another web server such as Nginx, which means the Apache-based access restrictions aren't active and all files are exposed. 😂

[@100Jim]

who else went looking through random web cams around the world

[@im_cool_lol]

didn't worked for me

[@Procrastinator12]

@@im_cool_lol work**

[@oru]

@@Procrastinator12 that guy's name is "gfjhsgdfjh dashgfjhasbfjha". Do you really grammar police on them?

[@bleedthebeat]

i got into some sort of marine biology site found out from a word document that they have plans to have some sort of cruse ship doing research in the us. not like that means anything to me but i thought it was cool

[@Alexander-jm1oi]

Yep, me too.

[@MatthewA1106]

You should do a tutorial on how to TAP YOUR KEYBOARD LOUDER

[@teerich2011]

It's such a popular sound that they still sell mechanical keyboards. Beats the typewriter sound by a smidge.

[@mpanobertin4955]

hi can we chat inbox

[@MatthewA1106]

@@mpanobertin4955 huh?

[@mpanobertin4955]

@@MatthewA1106 came inbox

[@MatthewA1106]

@@mpanobertin4955 what inbox

[@1LEETLAND]

you should warn people that by watching this video they gonna get backstabbed with knowledge at some point... Awesome video, thanks

[@Fortyfester]

The webcam service you looked up seems to be for intentional listings - it's advertised as a way for you to check on your belongings from anywhere. So basically any webcam on that service should be intentionally on that service, you aren't gaining any sort of undesired access to a hidden item.

[@christianbarry5484]

Slyvester is no Scam, I’m sure💯✅

[@christianbarry5484]

Slyvester is no Scam, I’m sure💯✅

[@MrrSakal]

13:37 nice cut ;-)

[@glutenfreegam3r177]

came here for this!

[@KocsonyasKarcsi]

Yesss

[@Mizzy154]

Bruh

[@Mizzy154]

Haven't got done by one of those in ages GG

[@imhulki463]

I don't get it, what's awesome about it? Am I missing something?

[@vickyjohnson6383]

Fascinating stuff, however I'm just getting started with this. Would be nice to have updated info as this video is nearly 2-1/2 years old. LUXURYHACKS🟢NET saved me

[@pest5547]

I second that request...

[@zvit]

What was more interesting than the video were some of your bookmarks... especially the "The VPN service provider for the truly paranoid" :D

[@TegridyMadeGames]

Google is going to delete this video faster than they fix vulnerabilities

[@simonf9158]

When i tried the methods google opend a captcha because of "possibly botted searches" .

[@79mjm79]

Actually they can't fix this. Anything uploaded to the Internet in any shape or form using WiFi can be accessed. Basically your Gmail, Instagram etc can all be accessed using Google dorks if you go through hundreds of pages you may find your own password.

[@mihaiioc.3809]

yeah, about that

[@mpanobertin4955]

hi can we chat inbox

[@severinsepp6520]

still up

[@auspicioustoot]

“These dorks are extremely powerful” 😂

[@TheWizard45134]

...."i feel like i say that a lot"

[@mr_mr]

@@TheWizard45134 dying lol

[@mr_mr]

New Null Byte tee shirt? All black with gray text "these dorks are extremely powerful"

[@musicalneptunian]

Meditate. Realize the power of your inner dork. May it serve everyone.

[@marcthompson647]

I read this comment as he said it

[@caffeine-0__0]

the fact he didnt blinked give me chills for his existence

[@MykaFowler]

You should do a tutorial on how to make sure your own information wont come up in any of these searches!! Please!

[@MarlenaDawn]

Your commnets about this brilliant, skilled expert, who generously shares his knowledge, says more ABOUT YOU - the people who sadly cut this man down so you could 'measure up.' It is very sad that some of us feel better after we highlight another's weakness or after we insult, degrade, expose, malign, or gossip about another person. Some of us harm ourselves and feel better for it- and we've all done it at some time. Don't beat yourself up over it, just try to do better- AND THERE IS A BETTER WAY- If you want elevate yourself in your own eyes and through the eyes of others, TAKE THE COMPASSIONATE ROUTE. Be that stand-up person who preserves another's dignity, supports, encourages or or finds the positive amid criticism or poor performance. Thanks for reading this

[@JessicaFEREM]

my dude, there's a resize thing between the awesome bar and the extensions, and you can hide most of your non-active extensions in the menu. You can also just remove or turn off the ones you're not gonna use often. having that many extensions is going to slow down your chrome. Not to mention you are opening yourself to risk to any of the extensions being compromised.

[@NullByteWHT]

Thanks for the tip JessicaFEREM!

[@drewfus5037]

Every time I see your intro, I want to grab a Pi3 case cover from my spares and mail it to you.

[@alexandermorper2207]

Me: I think I’ll go to sleep now Also me 4 hours later: watching KZbin video on how to hack

[@tammymoerman6112]

Hahaha ikr

[@dannayy8052]

I love that the video length is 13:37

[@NullByteWHT]

;p

[@caffeinati]

I'm so glad this video ends at 13:37

[@IsaiahGamers]

Just looking at this dude you can tell he visits the dark web daily

[@rensaito9009]

idk how to :(

[@mayankraj2294]

.

[@spoopymayers2224]

@@rensaito9009 tor browser... (.onion links)

[@chrisakaschulbus4903]

"Just looking at this dude you can tell he visits the dark web daily" ... whats that? a new combination between deep web and darknet? :D

[@user-kv6dz2ez1u]

It's easy to visit the dark web lol

[@efenty6235]

all throughout the intro i was questioning wether or not he's missing his right hand

[@JebemTiZivot]

*Sees trees* “Woah, they’ve got flying bushes”

[@drippinwet774]

go ez on him; he's probably rarely outside of his house

[@JebemTiZivot]

drippin wet Your proper use of the semicolon is a disgrace to its god given purpose of being used wrong...

[@nonasuomynona1734]

Predivno ime

[@JebemTiZivot]

Andrej Ivanovic da😂😂😂

[@blorkflorkernorp9773]

Reminds me of a time that I had to tell a friend that what she just saw was not in fact a "giant fucking minivan".

[@kaiserwaffen6818]

Imagine having a staring contest with this guy.

[@GigiKohlerVEVO]

2jzSupra lol

[@blorkflorkernorp9773]

I would rather have a roundhouse contest with Chuck Norris.

[@mariahamilton3005]

After series of being scammed, finally I got my cashout from a reliable vendor name Cardlegit on telegram. High balance cc with high PayPal deposit

[@that1nonja888]

Is intitle:”admin”db_password filetype:env a dork or do I have errors in this code

[@FdPros]

why is this recommended to me thanks

[@josemembreno4170]

Hey Kody, how come you haven’t made the null byte article into an app on Android and iOS in the App Store or google store?

[@Haze1434]

Proving, as always, that the main vulnerability to any system is, and always will be, people's stupidity.

[@gabecargo7693]

Bro, I swear, the amount of vulnerable public schools via username teacher password student is saddening

[@alakey98]

Gabe Cargo and how could one find them?

[@alakey98]

I’m asking for a friend

[@Vfwxnjtz]

@@alakey98 are you somali

[@alakey98]

Ace yes

[@gamingraptor1765]

You r just aweso....i was litterly noob in tNice tutorials...u explained it very simply...thanks i will surely go for next parts of tNice tutorials video.. thanks

[@TheDodge1996]

I've been watching that kind of videos and surprisingly most of them are leading to you. One or another way everything brings me to your channel. No choice but to subscribe! Thank you Null Byte!

[@ggmaxx66]

thank you for this concise explanation of google dorks! 😎

[@BigSStudios]

I found a list with usernames and passwords of Facebook, youtube, emails, and other stuff. What should I do?

[@trinity_null]

Nothing. These powers can be used for non-malicious activities.

[@blu2717]

Post it here

[@SheIITear]

Sell it for good amount of money

[@JusChannel]

dont get fucked by the fbi

[@nateblack972]

Great video. Love that intro music!

[@foulpark]

I got this in my recommended. I have no idea what you’re talking about but im interested.

[@johnblankenship215]

Daryl is really good at what he does.

[@jeranrai645]

But my question is how the information gets leaked in internet unless somebody post it online !

[@NullByteWHT]

There are always people that mess with setting that don't know what they are doing or don't realize anyone on the internet can see it. Also some devices just setup that way by default.

[@cinnamonsquash]

Imagine looking into random webcams and you find yourself

[@rkrkrkrkrk111]

Lmao

[@blahdgangstertheautomatica7270]

oh no

[@thotslayer2684]

(Chuckles) I’m in danger

[@mihaiioc.3809]

your profile picture checks out

[@estela5481]

I hope it doesn't happen to me.

[@tanercoder1915]

Me: I have 4 extensions in my browser, may be that is what slows my browser. Null Byte: Hold my beer

[@ByrnesDigital]

Im seriously curious as to what they all are

[@practicaloccultist231]

How would you direct the db password filetype:env to specific resources like what if I wanted to find netflix, KZbin red, vpns account passwords to piggyback on preexisting accounts?

[@trevorc3063]

This man has little sledgehammers on his fingertips that he uses for typing

[@jessicavogan1242]

Thanks for the laugh

[@TheRealKitWalker]

I so love you dude! You make FUN videos!! Actually something that one can learn from! Thank you so much! :D

[@michael-gary-scott]

I think this guy owns my soul now

[@rodrigoserrano75]

This man has taken your vital energy and you didn't even noticed

[@Levy_Wilson]

I remember using one of these to get Windows 7 keys back in the day. I actually found a company that was selling computers, they used some sort of scanner software to post the specs and it somehow got the Windows key and posted that along with everything else.

[@NullByteWHT]

Wow that's wild!

[@jonathantribble7013]

How would I as one who owns a server keep my data from being exposed? Is it as easy as storing a file higher than the /var/www/html/ directory or having a blank index.html file for each folder? It's crazy how easy it is to find such stuff!

[@Zooiest]

What’s the intro song? Or is that a self-made music piece?

[@UnleashedProPlays]

Obligatory Darude Sandstorm reply

[@CN-wt2bj]

@@cheapo7279 classic trance.

[@GreyHazRoot]

did you plan for the video length to be 1337?

[@TohoSeiwa]

for some people it is 1336 so... not so leet

[@RobGcraft]

Null Byte: *provides legit useful info* Comments: “BLINK, YOU DAMN ROBOT!”

[@studymotivationyts]

Three things not to do : 1. hacking FBI 2. Doing illegal activites 3. Staredown with this guy

[@jackmatthews1761]

13:37 duration. Coincidence? Maybe Dedication? Possibly Hotel?

[@ikeman2003]

Trivago

[@TalesGrimm]

Yes! Glad to see you teaching Dorks. Meanwhile, I'm building a Pumpkin Pi for the holidays!😁

[@fernandoblazin]

Pumpkin pi's are fun

[@wolf-war-master]

And tasty.... oh wait wrong universe! 😂😂

[@sudohack2187]

I like pineapple and pumpkin pie very tasty

[@AnTeaVirus]

yeah i won't duel in a don't blink game

[@slamsaren]

This is more than 10 yrs behind the curve, but thanks for spreading the message.

[@Exzenzia]

love how the video is 13:37

[@0subscribers1millionvideos29]

Im probably on a list now.

[@benbebop]

Yea, on the allintext:username lists

[@nimmen]

I've been watching Modern Rogue, Lockpicking Lawyer, Defcon talks etc.. for years. I'm definitely on some list by now lol

[@brendethedev2858]

@@nimmen I love all of those channels!

[@mcmegaplus]

Sir Please How Can I Track Lost Phone Using the IMEI

[@Xero-Hero]

Not possible. Imei does not have GPS attached to it

[@cinnatic]

Is it only me who noticed the video length is 1337

[@NullByteWHT]

Nope

[@WolfireGaming]

Do you have enough browser extentions?

[@danielolortegui8422]

Your device is more vulnerable than you may think

[@satyam8100]

How do I get Netflix passwords using this ? For research purposes of course

[@DEATH_TO_TYRANTS]

🤣

[@sarahpearce5423]

🤣😂

[@getb0nk]

This dude looks like he drank 11 coffees in a couple of minutes

[@donwolfman]

Hi please teach how to create a scampage for data collection on any login website.

[@GiftFromGod]

0:22 aha, I knew it was Vibrasphere! :D had to pause and start searching and finally found it! sweet september. one of my old time fav from them. nr 1 spot is Ensueno Morning Mix. thanks for reminding this dead soul of a long forgotten group I never could stop listening to a lifetime ago

[@adrielmtz702]

SCP-173 must really hate this guy

[@Dante9k]

I saw one of my old passwords on the dark web once. Wasn’t able to find tthe site again

[@coolbro_9520]

sure buddy

[@Dante9k]

JCentreChannel _ you don’t have to believe me. I just felt like I had to share it because it happens. It was a very old 2010 password

[@Abhishekkumar-jl2dr]

I feel so sorry for the keys, I don't know but that hurts 😭😭😭

[@alyctro8158]

So what if I want to look for a specific site that might've been deleted and I can't remember the name of because it was Chinese or something? The reason is, I've got a pen tablet. Manufactured by a company that supposedly closed down. And I want to get the driver file off their ftp or the server in question.

[@trouzz1810]

I feel like I'm being hypnotized with you not blinking

[@SuperAlphaKirby]

Time to find my crushes web cam. FBI Plaz don't get serious dis a joke

[@greedyniffler1337]

13:37 mins long👌

[@ko-Daegu]

IM NG I don’t get it ???

[@Flor2Easy]

@@ko-Daegu leet

[@SometimesDev]

Perfection

[@inef85]

@@ko-Daegu 1337 = "LEET" en.m.wikipedia.org/wiki/Leet

[@hector10908]

Leet

[@NativeVsColonial]

I'm a Hacker Kid: how do you hack (⑉⊙ȏ⊙) Me: I Google things

[@blackychan8175]

HI, thanks for sharing btw what dorks for locate time like year: or etc??

[@olletagtstrom7804]

this man simply does not blink... EVER

[@NullByteWHT]

The Kody isn't programmed to blink.

[@payteyboy3809]

What’s up FBI how ya doing?

[@slendii366]

Even if you do illegal things the chances of the FBI coming for you is highly unlikely.

[@s0ul216]

6:08 lmao I used to do that to find ftp url that contains movies that I wanted to watch since I couldn't do torrenting in my uni wifi.

[@NullByteWHT]

Nice, how well did that work for you?

[@s0ul216]

​@@NullByteWHT Worked too well. I got everything that I wanted at that time. Probably because it was movie, so people tend to keep it.

[@nitishchauhan8655]

Why are .env files being exposed to the internet? lol

[@UltimatePerfection]

I've used to know a site with a huge database of Google dorks for any situation, but forgot it's url. Anyone can help?

[@kuldeeppandya768]

Search "Google hacking database". You'll find exploit-db ghdb

[@UltimatePerfection]

@@kuldeeppandya768 Thanks, will do.

[@zconstellationz]

Would would the command be to bring up the search bar to pin point words on a page

[@ankitparmar547]

2:00 Those browser extensions 😐

[@rodricbr]

USERNAME=** PASSWORD=secret Very secure

[@shafarizkyf]

That .env file are from laravel framework. Can be found like that must be because the dev cannot upload the web properly lol ... or maybe a trap lol

[@arthurcheek5634]

Or ruby on rails

[@doomerlifez]

HOw many laptops do you own and what operating system do u use?

[@dhirajpatil1602]

There are too many people who copied your post as it is and put on their websites.please check.

[@TheExsi]

Notice me senpai...

[@overpowah109]

Thank you, now i can stop paying for pornub premium

[@stabgan]

link

[@AyeSpare]

Lmao

[@wubzy968]

How!!!?!?!?!