Back to Library

Find PHP Files

PRO

Locates password and credential files containing authentication credentials that have been inadvertently exposed to public indexing.

Beginner Friendly
Safe to use
files

Google Dork Query:

••••••••••••••••••••••••••••••••••
0
Not verified

What It Does

This dork uses the 'intext:' operator to search for specific strings within page body content combined with the 'ext:' operator to filter by file extension. Results typically show directory listings, file contents, or download links for sensitive files that should not be publicly accessible.

Common Use Cases

  • Sensitive Data Discovery: Locate password and credential files that may have been accidentally exposed and contain confidential information.
  • Security Compliance Audit: Verify that password and credential files are properly secured and not indexed by search engines in your organization.
  • Incident Response: During incident response, check whether password and credential files from your organization have been exposed to the public internet.

How to Use Safely

  1. Run this dork in Google to discover password and credential files that have been indexed.
  2. Examine each result to determine if the exposed files contain sensitive or confidential data.
  3. Check file metadata, directory paths, and associated domains for additional intelligence.
  4. Notify affected organizations through responsible disclosure if sensitive data is confirmed exposed.

Responsible Use Required

This dork should only be used on systems you own or have explicit authorization to test. Unauthorized access to computer systems is illegal. Always follow ethical guidelines and obtain proper permission before testing.

TAGS

php

Related Dorks

Find PAC Files

Finds proxy auto-configuration (PAC) files that have been inadvertently exposed on web servers and indexed by search engines.

Find Live View / - AXIS Pages

Finds live view / - axis pages that have been inadvertently exposed on web servers and indexed by search engines.

Find DocMGR Pages

Finds exposed DocMGR document management system login pages in multiple languages indicating international deployments.