Google Dorking

Amazon S3 Buckets: site:s3.amazonaws.com [domain name]

Open Redirections/SSRF: site:domain.com inrul:[PARAMETER] using the parameter list

Subdomain discovery: site:domain.com

site:www.domain.com

site:domain.com -inurl:www

site:domain.com -www

site:*.domain.com

Information Disclosure: site:*.domain.com ext:[FILE FORMAT] intext:[PII]

GitHub Dorking

Secrets:

"company" "[PII]"

"target.tld" "[PII]"

Specifying the type of file/language used:

"company" "[PII]" language:[LANG]

"target.tld" "[PII]" language:[LANG]

Filtering out noise:

"company" "[PII]" -[FILTER]