Find Vulnerable Services & Hidden Info Using Google Dorks [Tutorial]

Our Premium Ethical Hacking Bundle Is 90% Off: nulb.app/cwlshop
How to Find Hidden Information Online Using Google Dorks
Full Tutorial: nulb.app/z4m32
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: KodyKinzie
A Google search may not be what one thinks of when it comes to hacking. However, Google offers advanced techniques when searching which can offer a treasure trove of hidden and vulnerable services if used correctly. Today, we'll introduce you to Google dorking, on this episode of Cyber Weapons Lab.
To learn more, check out the article: nulb.app/#####
Follow Null Byte on:
Twitter: / nullbytewht
Flipboard: flip.it/3.Gf_0
Vimeo: vimeo.com/channels/nullbyte
Website: null-byte.com
Weekly newsletter: eepurl.com/dE3Ovb

[@meh5812]

you should do a tutorial of how to not blink

[@root317]

Loool

[@rusirumunasinghe7354]

Imagine walking into a staring contest and this guy walks in

[@meh5812]

@@rusirumunasinghe7354 yeah

[@rickmonarch4552]

He has invisible eyelids.

[@mikemcdonald5147]

@@rusirumunasinghe7354 you're doomed doomed I say LOL

[@Mazda1080]

The fact that Google’s product KZbin recommended me of this video must be an unsolved mystery

[@Me-eb3wv]

Frfr

[@SednaFTW]

Same they must have made a major mistake I would have no need for this knowledge

[@robomods6793]

1:24

[@bigboibean7837]

Same

[@trickzclipz5910]

@@SednaFTW I do

[@benbebop]

Trees: exist This man: Flying bushes

[@kyouutube8648]

Tree: Exists 4 Creepy Human: # 9 2 Hide behind: Tending Human 5, 6, ,7,... ..: Backyard. Flying Bushes: Exist ײ Cause / Effect: From Abuse & Neglect In Backyards belonging to Creepy Human #9 .... .... ... All Creepy Human equivalents like.

[@altypotato2459]

I'll be honest with you. I thought you just making nonsense... When I got to that part I laughed hard. lol well played

[@kyouutube8648]

@@altypotato2459 It would sound Nonsensical to to those who have not walked in my shoes for the past 2 1/2 years of my life. Thank you for finding it humorous either way. 💜God Bless💙 & 🎇Happy Holidays🎆

[@HITARIX]

"This place is crazy!" - I don't think he goes out so much.

[@kyouutube8648]

@@HITARIX I don go out much. I hide in a forest... Away from Humans.

[@MixingSneaX]

Imagine finding your password

[@Seltaeb_]

Plot twist: it was a password you forgot and figured was lost to time.

[@leafyclass]

@@vanshajrai6089 yup

[@kazutokirigaya2777]

@@vanshajrai6089 found my Netflix account and about 300 others Edit:paswords were included

[@k5y]

kazuto kirigaya link?

[@olbluelips]

I've found some of my very old passwords in huge plaintext databases. it's kind of a nice feeling somehow, as long as you don't still use that password anywhere

[@basilo9923]

i feel like clicking on this video just put me on a watchlist..

[@s000sdas]

Nope

[@st20332]

Don’t listen to yoka hes MI5 n wants you to keep doing your normal so he can catch you

[@joshuakuehn]

Ok zoomer

[@st20332]

Joshua Kuehn who

[@sehidnamirinifbypguypj5822]

@@joshuakuehn who the hell is zoomer? Is it a code name for a cyber spook

[@lawsne0nx-dg4mingletspl4y2]

“Dont log in to accounts with passwords” Literally everyone who watched this video : ok boomer

[@sjoorsieportie7962]

ggDefault no shit boomer

[@him6008]

@ggDefault Ok boomer

[@aldrick3340]

@ggDefault ok boomer

[@ImDannn]

@ggDefault Boomer

[@goldensoldier2093]

@ggDefault Ok boomer

[@MrIAmHighDef]

Nailed the video length lolll

[@christiansoto410]

Off by 1, he should have made it 13:37!

[@jimothyus]

Christian Soto it is 13:37 for me

[@jotardothegreat]

*Leet*

[@glocksantana853]

Anonymouse hax0r xD

[@Shaggidelic69]

@@jimothyus same.

[@heidithomas111]

The information you give out, people would normally charge us so much money to learn! That makes you a great person and relives my migraine on where to look! Thank you!!

[@Kliamframe]

I've been looking everywhere for a Vigor 2950 manual in chinese! Thank you!

[@mpanobertin4955]

hi can we chat inbox

[@Crunchiest]

Khall Himines yes

[@bejanminlucas6489]

Micheal never disappoint 👆, helped me twice already Let me gained access to my husband phone and recover my Facebook account🙏👆 , ,

[@t-pain7889]

1:04 he blinks

[@andzelasgvazdauskas5504]

Glitch in the matrix

[@derayend6939]

Half blink, unfortunately

[@ashis-biswas]

Lol impossible

[@anagraphical_angel]

Oh my god This can't be!

[@susanwojci]

it was a half blink

[@WillZ0111]

Thank you, oh KZbin algorithm, for showing this to me instead of making it go viral first.

[@zeg0noidpils26]

I got it today as youtube recommendation, great one!

[@Shaggidelic69]

I can't thumbs up bcuz the #111 is too good.

[@TheDodge1996]

I've been watching that kind of videos and surprisingly most of them are leading to you. One or another way everything brings me to your channel. No choice but to subscribe! Thank you Null Byte!

[@100Jim]

who else went looking through random web cams around the world

[@im_cool_lol]

didn't worked for me

[@ashishbavlekar1389]

@@im_cool_lol work**

[@oru]

@@ashishbavlekar1389 that guy's name is "gfjhsgdfjh dashgfjhasbfjha". Do you really grammar police on them?

[@bleedthebeat]

i got into some sort of marine biology site found out from a word document that they have plans to have some sort of cruse ship doing research in the us. not like that means anything to me but i thought it was cool

[@Alexander-jm1oi]

Yep, me too.

[@yeep123]

The fact that this video is 13:37 long makes it 100000 times better

[@yafethtb]

I was only tried to find about OSINT a few times, and KZbin suggested I need to see this. No complaints.

[@Luke-we6id]

shows us how to get usernames and passwords and tells us to not login.

[@aldxbaran]

Do it

[@luiginotcool]

How do you actually log in I have no idea how you would actually do that. You get a username and password for a database but idk how you would access the database

[@eloualiissam3501]

@ugur but how?

[@TrainsnStuff22]

@@luiginotcool If you can't figure out how to actually login then you should not be doing any of this stuff like looking for login credentials

[@rumplstiltztinkerstein]

There's no marketing in cybersecurity. Any vulnerability is both an oportunity to protect as it is to do harm. Some people will try to do harm with this information. But the more people know about these things, the more chances there are of people protecting themselves from these threats. If there were other ways to get people more secure we would gladly go for it. But we all know that keeping too much knowledge for just a handful of people is even more dangerous than everyone knowing about a threat.

[@leoncampa]

Just keep in mind that whatever tools listed here are actually well known by law enforcement, which occasionally plant such files on purpose with the intention to incite people to access them. This then leads them to track you down, and is cause for arrest. Unlike entrapment (where someone pressures you to do something illegal), incitement (leaving open an easy target) is not a valid defense in court, and you are likely to face serious consequences if caught; regardless of your motive.

[@ComasGhost]

Like for example?

[@king_miles0259]

This cap how can you go to jail for looking at things that are on google. now it’s what you do with the things you look at that might get you in trouble

[@Eddie_Winter]

Or use the alternative "bing nerds"

[@juderadford1865]

How about no

[@lucaskeyworth]

What about yahoo geeks?

[@mayankraj2294]

.

[@kopuz.co.uk.]

question

[@just_a_rock]

AskJeeves knowitalls

[@MarlenaDawn]

Your commnets about this brilliant, skilled expert, who generously shares his knowledge, says more ABOUT YOU - the people who sadly cut this man down so you could 'measure up.' It is very sad that some of us feel better after we highlight another's weakness or after we insult, degrade, expose, malign, or gossip about another person. Some of us harm ourselves and feel better for it- and we've all done it at some time. Don't beat yourself up over it, just try to do better- AND THERE IS A BETTER WAY- If you want elevate yourself in your own eyes and through the eyes of others, TAKE THE COMPASSIONATE ROUTE. Be that stand-up person who preserves another's dignity, supports, encourages or or finds the positive amid criticism or poor performance. Thanks for reading this

[@husnithamrin007]

incredible possibilities to those who master it. I am almost done with my first track, but there is so much more to discover and learn. TNice tutorials

[@auspicioustoot]

“These dorks are extremely powerful” 😂

[@TheWizard45134]

...."i feel like i say that a lot"

[@mr_mr]

@@TheWizard45134 dying lol

[@mr_mr]

New Null Byte tee shirt? All black with gray text "these dorks are extremely powerful"

[@musicalneptunian]

Meditate. Realize the power of your inner dork. May it serve everyone.

[@marcthompson647]

I read this comment as he said it

[@westcoastadventurer3911]

My sister was hacked and we tried this (before watching this video), but we couldn't get past typing in an email address that she has access to! For every email she types, she just gets some error about how that email is invalid or something! She need help, Because it keeps on to the loading after the face ID scan. And if I try on another phone it'll not work, because they removed her number and email on it U know what honestly this man helps us get through depression & bad thoughts in my head *Virtualcodecrack🎡net* Thanks for the access .

[@Hyrtsi]

scam

[@Lynnewhitneey]

I recommend slyvester to you, so much believe I have with him💯

[@Lynnewhitneey]

I recommend slyvester to you, so much believe I have with him💯

[@Lynnewhitneey]

I recommend slyvester to you, so much believe I have with him💯

[@DayDayZero]

13:37 nice cut ;-)

[@glutenfreegam3r177]

came here for this!

[@KocsonyasKarcsi]

Yesss

[@Mizzy154]

Bruh

[@Mizzy154]

Haven't got done by one of those in ages GG

[@imhulki463]

I don't get it, what's awesome about it? Am I missing something?

[@gamingraptor1765]

You r just aweso....i was litterly noob in tNice tutorials...u explained it very simply...thanks i will surely go for next parts of tNice tutorials video.. thanks

[@I.D.M.]

"Flying bushes" We generally call those trees.

[@79mjm79]

LMFAOOO

[@gosth81]

Lol

[@TheRealKitWalker]

I so love you dude! You make FUN videos!! Actually something that one can learn from! Thank you so much! :D

[@ggmaxx66]

thank you for this concise explanation of google dorks! 😎

[@LEETLANDS]

you should warn people that by watching this video they gonna get backstabbed with knowledge at some point... Awesome video, thanks

[@vickyjohnson6383]

Fascinating stuff, however I'm just getting started with this. Would be nice to have updated info as this video is nearly 2-1/2 years old. LUXURYHACKS🟢NET saved me

[@pest5547]

I second that request...

[@matthewayers4926]

You should do a tutorial on how to TAP YOUR KEYBOARD LOUDER

[@teerich2011]

It's such a popular sound that they still sell mechanical keyboards. Beats the typewriter sound by a smidge.

[@mpanobertin4955]

hi can we chat inbox

[@matthewayers4926]

@@mpanobertin4955 huh?

[@mpanobertin4955]

@@matthewayers4926 came inbox

[@matthewayers4926]

@@mpanobertin4955 what inbox

[@zvit]

What was more interesting than the video were some of your bookmarks... especially the "The VPN service provider for the truly paranoid" :D

[@nateblack972]

Great video. Love that intro music!

[@alexandermorper2207]

Me: I think I’ll go to sleep now Also me 4 hours later: watching KZbin video on how to hack

[@tammymoerman6112]

Hahaha ikr

[@MykaFowler]

You should do a tutorial on how to make sure your own information wont come up in any of these searches!! Please!

[@mikez104]

New game called blink drink. Every time you blink before he does you have to drink. Although I'm thinking I'd end up with alcohol poisoning . I love this guys videos.

[@Phoenixmountfordx]

I got this in my recommended. I have no idea what you’re talking about but im interested.

[@trurocker03]

Subscribed, love your work

[@drewfus5037]

Every time I see your intro, I want to grab a Pi3 case cover from my spares and mail it to you.

[@space_001.]

the fact he didnt blinked give me chills for his existence

[@siddharthasodariya3981]

TNice tutorials was great! the way you explain tNice tutorialngs and repeating it really helps. thanks for the tutorial!

[@bendeck8918]

You are honestly great funny enough not annoying keep it up

[@cinnamonsquash]

Imagine looking into random webcams and you find yourself

[@rkrkrkrkrk111]

Lmao

[@blahdgangstertheautomatica7270]

oh no

[@thotslayer2684]

(Chuckles) I’m in danger

[@mihaiioc.3809]

your profile picture checks out

[@estela5481]

I hope it doesn't happen to me.

[@coffeedata7107]

Dude, I have being following you for enough time to say your content quality is changing. As it is a side effect of the fact that KZbin is banning every hacking videos, It would be awesome if you often made videos for your web page, not only in KZbin, so the content keep being as an amazing as always! This doesn't mean this is a bad video, keep it up buddy!

[@Timm2003]

Thank u, this was pretty helpful!

[@GiftFromGod]

0:22 aha, I knew it was Vibrasphere! :D had to pause and start searching and finally found it! sweet september. one of my old time fav from them. nr 1 spot is Ensueno Morning Mix. thanks for reminding this dead soul of a long forgotten group I never could stop listening to a lifetime ago

[@efenty6235]

all throughout the intro i was questioning wether or not he's missing his right hand

[@JebemTiZivot]

*Sees trees* “Woah, they’ve got flying bushes”

[@drippinwet774]

go ez on him; he's probably rarely outside of his house

[@JebemTiZivot]

drippin wet Your proper use of the semicolon is a disgrace to its god given purpose of being used wrong...

[@nonasuomynona1734]

Predivno ime

[@JebemTiZivot]

Andrej Ivanovic da😂😂😂

[@blorkflorkernorp9773]

Reminds me of a time that I had to tell a friend that what she just saw was not in fact a "giant fucking minivan".

[@jasonbelt8954]

Following along, this was fun. So much stuff that shouldn't be available!

[@josemembreno4170]

Hey Kody, how come you haven’t made the null byte article into an app on Android and iOS in the App Store or google store?

[@FdPros]

why is this recommended to me thanks

[@johnblankenship215]

Daryl is really good at what he does.

[@brettshoemaker5949]

Wow! Excellent presentation!

[@ThisFinalHandle]

How is it your channel has the same intro music as Jim Browning's outro music? The plot thickens.

[@ThisFinalHandle]

Not the same...just a coincidence after all. Jim Browning freemusicarchive.org/music/BoxCat_Games/Nameless_the_Hackers_RPG_Soundtrack/BoxCat_Games__-Nameless-___the_Hackers_RPG_Soundtrack_-_10_Epic_Song# Null bytes kzbin.info/www/bejne/mYncfmd_pbt7jas

[@trouzz1810]

I feel like I'm being hypnotized with you not blinking

[@martinelfast9763]

This is more than 10 yrs behind the curve, but thanks for spreading the message.

[@y2ksw1]

I've always been on the other side of the firewall, and I fully agree with you, when it comes to accidental exposure. It's a feature which comes with too much security, and the breach becomes human. You have no idea which data I could put my hands on, while securing large companies. Summing up: do not overprotect your systems, else you'll find everywhere stickers with the passwords, including the Internet!

[@kaiserwaffen6818]

Imagine having a staring contest with this guy.

[@GigiKohler]

2jzSupra lol

[@blorkflorkernorp9773]

I would rather have a roundhouse contest with Chuck Norris.

[@mariahamilton3005]

After series of being scammed, finally I got my cashout from a reliable vendor name Cardlegit on telegram. High balance cc with high PayPal deposit

[@jamiehill901]

Love the comb over

[@ichselbst8914]

I just watch these videos cuz this guy is totally cool 👍

[@michael-gary-scott]

I think this guy owns my soul now

[@JessicaFEREM]

my dude, there's a resize thing between the awesome bar and the extensions, and you can hide most of your non-active extensions in the menu. You can also just remove or turn off the ones you're not gonna use often. having that many extensions is going to slow down your chrome. Not to mention you are opening yourself to risk to any of the extensions being compromised.

[@NullByteWHT]

Thanks for the tip JessicaFEREM!

[@Levy_Wilson]

I remember using one of these to get Windows 7 keys back in the day. I actually found a company that was selling computers, they used some sort of scanner software to post the specs and it somehow got the Windows key and posted that along with everything else.

[@NullByteWHT]

Wow that's wild!

[@EricYoungVFX]

Google is going to delete this video faster than they fix vulnerabilities

[@ZaHandle]

“7 months ago”

[@simonf9158]

When i tried the methods google opend a captcha because of "possibly botted searches" .

[@79mjm79]

Actually they can't fix this. Anything uploaded to the Internet in any shape or form using WiFi can be accessed. Basically your Gmail, Instagram etc can all be accessed using Google dorks if you go through hundreds of pages you may find your own password.

[@mihaiioc.3809]

yeah, about that

[@mpanobertin4955]

hi can we chat inbox

[@Fortyfester]

The webcam service you looked up seems to be for intentional listings - it's advertised as a way for you to check on your belongings from anywhere. So basically any webcam on that service should be intentionally on that service, you aren't gaining any sort of undesired access to a hidden item.

[@christianbarry5484]

Slyvester is no Scam, I’m sure💯✅

[@christianbarry5484]

Slyvester is no Scam, I’m sure💯✅

[@54V4]

Awsome fun stuff to explore. Thx!

[@blackychan8175]

HI, thanks for sharing btw what dorks for locate time like year: or etc??

[@IsaiahGamers]

Just looking at this dude you can tell he visits the dark web daily

[@rensaito9009]

idk how to :(

[@mayankraj2294]

.

[@spoopymayers2224]

@@rensaito9009 tor browser... (.onion links)

[@chrisakaschulbus4903]

"Just looking at this dude you can tell he visits the dark web daily" ... whats that? a new combination between deep web and darknet? :D

[@user-kv6dz2ez1u]

It's easy to visit the dark web lol

[@its336already6]

when u read the new policies of youtube and gotta improvise

[@hellopropop]

Best Video I've every seen in 2 yrs

[@rajjatin4598]

In The setup thank you so much!

[@tanercoder1915]

Me: I have 4 extensions in my browser, may be that is what slows my browser. Null Byte: Hold my beer

[@ByrnesDigital]

Im seriously curious as to what they all are

[@jonathantribble7013]

How would I as one who owns a server keep my data from being exposed? Is it as easy as storing a file higher than the /var/www/html/ directory or having a blank index.html file for each folder? It's crazy how easy it is to find such stuff!

[@mentalimbalance6808]

I really enjoy your videos.

[@jeffstowe4860]

This is cool stuff. Thanks!

[@that1nonja888]

Is intitle:”admin”db_password filetype:env a dork or do I have errors in this code

[@trevorc3063]

This man has little sledgehammers on his fingertips that he uses for typing

[@jessicavogan1242]

Thanks for the laugh

[@mainoryjessi]

Hey man, you look like a geeky version of a James Bond villain :) Thank you for the videos!

[@hawk__]

How nicley u do explain.. 😍, I think, it's also the Magic of Music 🎶 behind ya 😂

[@dannayy8052]

I love that the video length is 13:37

[@NullByteWHT]

;p

[@AnTeaVirus]

yeah i won't duel in a don't blink game

[@rodrigoserrano75]

This man has taken your vital energy and you didn't even noticed

[@rickvegas9493]

Hi! You should do a tutorial of your BHO in Chrome

[@dropshotking1212]

So how do companies “accidentally” leave these logs visible like this? Like it’s not making sense to me... this kinda feels like someone did it on purpose what am I missing here??

[@ricky4761]

Exactly

[@CraigClayton-bk3ze]

I don't know if you notice it doesn't actually give many results

[@maimamkay1947]

robots.txt many people don't use it.

[@JosueRodriguez08]

Stupid people. That's it

[@BenderdickCumbersnatch]

Mostly misconfiguration. Like if a web app is meant to run on Apache web server and has a bunch of Apache ".htaccess" configuration files which forbid access to password files. But they decide to run the web app on another web server such as Nginx, which means the Apache-based access restrictions aren't active and all files are exposed. 😂

[@Abhishekkumar-jl2dr]

I feel so sorry for the keys, I don't know but that hurts 😭😭😭

[@dukeetannerpuppypd2275]

Wow Justin what you just said right there is describing exactly what's happening to me right now. Is there any way that you can find out who is doing the stuff that you would be doing on that end of it if they were doing that to you? I'm pretty sure that when two computers communicate the other computer is inside the other computer Cadillac they got there chocolate in my peanut butter. LOL. if you can refer me to a previous video I don't have time to go back and watch all yours but very interesting stuff how would that work for me to find out who's in my phone? Please help I would really appreciate it. I've been trying to get into coding for a little while it's a hard one for me and 53 even though I wrote my own Pitfall version back on the Compaq computer 64-bit things have changed

[@practicaloccultist231]

How would you direct the db password filetype:env to specific resources like what if I wanted to find netflix, KZbin red, vpns account passwords to piggyback on preexisting accounts?

[@jackmatthews1761]

13:37 duration. Coincidence? Maybe Dedication? Possibly Hotel?

[@ikeman2003]

Trivago

[@s0ul216]

6:08 lmao I used to do that to find ftp url that contains movies that I wanted to watch since I couldn't do torrenting in my uni wifi.

[@NullByteWHT]

Nice, how well did that work for you?

[@s0ul216]

​@@NullByteWHT Worked too well. I got everything that I wanted at that time. Probably because it was movie, so people tend to keep it.

[@markcockbain287]

Thank You So Much Bud

[@bermuda333]

intro song is vibrasphere - sweet september btw

[@Mike_lombardo]

Just the comment I was looking for. Thank you!

[@TalesGrimm]

Yes! Glad to see you teaching Dorks. Meanwhile, I'm building a Pumpkin Pi for the holidays!😁

[@fernandoblazin]

Pumpkin pi's are fun

[@wolf-war-master]

And tasty.... oh wait wrong universe! 😂😂

[@sudohack2187]

I like pineapple and pumpkin pie very tasty

[@adrielmtz702]

SCP-173 must really hate this guy

[@KINGABDUL99]

Thank you so much

[@samcoates2519]

You should do a video on how to bypass the FRP

[@getb0nk]

This dude looks like he drank 11 coffees in a couple of minutes

[@Zooiest]

What’s the intro song? Or is that a self-made music piece?

[@UnleashedProPlays]

Obligatory Darude Sandstorm reply

[@CN-wt2bj]

@@cheapo7279 classic trance.

[@calllester3827]

Would would the command be to bring up the search bar to pin point words on a page

[@jonathanjota292]

good job! i bet you are great at making s! good luck

[@0subscribers1millionvideos29]

Im probably on a list now.

[@benbebop]

Yea, on the allintext:username lists

[@nimmen]

I've been watching Modern Rogue, Lockpicking Lawyer, Defcon talks etc.. for years. I'm definitely on some list by now lol

[@brendethedev2858]

@@nimmen I love all of those channels!

[@Haze1434]

Proving, as always, that the main vulnerability to any system is, and always will be, people's stupidity.

[@gabecargo7693]

Bro, I swear, the amount of vulnerable public schools via username teacher password student is saddening

[@alakey98]

Gabe Cargo and how could one find them?

[@alakey98]

I’m asking for a friend

[@Vfwxnjtz]

@@alakey98 are you somali

[@alakey98]

Ace yes