Back to Library

Find please login Pages

PRO

Finds login pages displaying partial password hints that reduce the security of authentication systems.

Beginner Friendly
High risk - authorized use only
vulnerability

Google Dork Query:

••••••••••••••••••••••••••••••••••
0
Not verified

What It Does

This dork searches for pages with 'please login' in the title and 'your password is *' text, indicating login forms that display password hints or partial credentials. These pages reveal weak authentication implementations where the system exposes password information to unauthenticated users.

Common Use Cases

  • Authentication Security Audit: Find login systems that expose password hints, making them susceptible to targeted guessing attacks.
  • Password Policy Assessment: Identify web applications with insecure password display practices that violate security best practices.
  • Web Application Testing: During authorized pentests, locate login pages with password hints to test authentication bypass scenarios.

How to Use Safely

  1. Execute the dork in Google to find login pages showing password hints.
  2. Analyze the format and extent of password information revealed on the login page.
  3. Assess whether the password hints could enable targeted password guessing.
  4. Report insecure login implementations and recommend removing all password hints from login pages.

Responsible Use Required

This dork should only be used on systems you own or have explicit authorization to test. Unauthorized access to computer systems is illegal. Always follow ethical guidelines and obtain proper permission before testing.