API Recon via Google Dorking

1 day ago 5

BOOK THIS SPACE FOR AD

ARTICLE AD

CRUD Operation Endpoints, API Doc, various API documentation, custom keywords to combine for refined advanced search.

⚠️Disclaimer: This is only for educational & ethical pentesting purposes with permission. The author is not responsible for any malicious or illegal abuse of the information shared here!

Photo by Joan Gamell on Unsplash

If you don’t understand what is dorking, learn from beginning 👇

Advanced Google Dorking

Sites to eliminate in all below dorks

-site:github.com -site:github.io -site:stackoverflow.com

Here, I am showing only the Google search engine results. But you must utilize all available search engines like Bing, Yandex, DuckDuckGo, Qwant, etc…

1️⃣ GET API

intitle:"GET api/" site:gov
intitle:"GET api/" site:gov.*
intitle:"GET api/" site:edu
intitle:"GET api/" site:TLD
intitle:"GET api/" site:ccTLD

intitle:"GET api/" site:gov "/all"
intitle:"GET api/" site:gov "/list"
intitle:"API" "application/json" "List of" site:gov
intitle:"GET api/" site:gov "Get all"
intitle:"GET api/" site:gov "Get a"

2️⃣ Create Method

"CREATE /" "API" inurl:doc site:gov

3️⃣ Post Method

"POST /" "API" inurl:doc site:gov

4️⃣ Put Method

"PUT /" "API" inurl:doc site:gov
"PUT /v1" "API" inurl:doc -site:github.com
"PUT /v2" "API" inurl:doc -site:github.com

Read Entire Article