Dorks to retrieve FTP/SFTP passwords. Posted On : Oct. 6, 2018, 1:30 p.m.

I discovered a new google dork today. I was going through a SFTP plugin in sublime text 3, which created a file sftp-config.json to store FTP/SFTP credentials for a project server. Following dork retrieves the results including sftp-config.json files.

intitle:"Index Of" intext:sftp-config.json

Here is another dork for Atom text editor, in this case there is a SFTP/FTP plugin which saves the credentials in .ftpconfig file. Following dork will retrieve the results including .ftpconfig files.

intitle:"Index Of" intext:.ftpconfig

Here is another dork for VS code text editor.

intitle:"Index Of" intext:".vscode"

These dorks are published on exploit-db as well,
#DORK1
#DORK2
#DORK3

Disclaimer :
Both dorks were discovered by me, and are published here only for general awareness and with no harmful perspectives. You are responsible for your own actions.

See more blog posts