Back to Library

Find INC Files

Finds exposed INC (include) files containing database credentials with plaintext UID and password values.

Beginner Friendly
Safe to use
files

Google Dork Query:

ext:inc "pwd=" "UID=
0
Not verified

What It Does

This dork uses the 'filetype:/ext:' operator to filter by file format to narrow results to specific file types combined with the '""' operator to enforce exact phrase matching. Results return specific files indexed by Google that were likely unintentionally exposed on public web servers.

Common Use Cases

  • Sensitive File Detection: Locate INC files that have been inadvertently exposed on public web servers.
  • Data Exposure Assessment: Assess whether INC files containing sensitive data are accessible without authentication.
  • Compliance Monitoring: Verify that INC files are properly secured and not violating data protection policies.

How to Use Safely

  1. Run this dork in Google to find publicly indexed INC files.
  2. Examine the results to identify files containing sensitive or confidential information.
  3. Assess the severity of each exposure based on the type of data contained in the files.
  4. Notify affected organizations and recommend access controls or file removal.

Responsible Use Required

This dork should only be used on systems you own or have explicit authorization to test. Unauthorized access to computer systems is illegal. Always follow ethical guidelines and obtain proper permission before testing.

TAGS

inc

Related Dorks

Find MODERATOR Files

Finds exposed vBulletin moderator control panels that may allow unauthorized forum moderation actions.

Exposed Configuration Files

Finds exposed configuration files (.config, .cfg, .ini) containing plaintext passwords and database credentials.

Find Backup-Management (phpMyBackup v.0.4 beta * ) Pages

Finds exposed phpMyBackup management interfaces that could allow unauthorized access to MySQL database backup operations.