Back to Library

Find YOUR Files

Discovers exposed YOUR files that may contain sensitive or proprietary information.

Intermediate
Safe to use
files

Google Dork Query:

inurl:comment.asp intext:Your e-mail address will be used to send you voting and comment activity. Inclusion of your address is optional but Battle Blog cannot notify you of these activities unless you supply an accurate e-mail.
0
Not verified

What It Does

This dork uses the 'inurl:' operator to find specific text in URLs combined with the 'intext:' operator to search for text in page content combined with the 'ext:' operator to filter by file extension to narrow results to specific pages. It excludes -mail, -mail. to reduce false positives. Results return specific files indexed by Google that were likely unintentionally exposed on public web servers.

Common Use Cases

  • Sensitive File Detection: Find specific file types inadvertently exposed on public web servers.
  • Data Classification Review: Identify files that should be classified and protected from public access.
  • Information Governance Audit: Discover exposed files during data governance reviews to ensure proper access controls.

How to Use Safely

  1. Run this dork to find specific file types exposed on public web servers.
  2. Review results to identify files containing sensitive information.
  3. Download and examine accessible files to assess data sensitivity.
  4. Report exposed files and recommend removing them or adding authentication.

Responsible Use Required

This dork should only be used on systems you own or have explicit authorization to test. Unauthorized access to computer systems is illegal. Always follow ethical guidelines and obtain proper permission before testing.

TAGS

your

Related Dorks

Find MODERATOR Files

Finds exposed vBulletin moderator control panels that may allow unauthorized forum moderation actions.

Exposed Configuration Files

Finds exposed configuration files (.config, .cfg, .ini) containing plaintext passwords and database credentials.

Find Backup-Management (phpMyBackup v.0.4 beta * ) Pages

Finds exposed phpMyBackup management interfaces that could allow unauthorized access to MySQL database backup operations.