Amazon S3 Buckets:
site:s3.amazonaws.com [domain name]
Open Redirections/SSRF:
site:domain.com inrul:[PARAMETER]
using the parameter list
Subdomain discovery:
site:domain.com
site:www.domain.com
site:domain.com -inurl:www
site:domain.com -www
site:*.domain.com
Information Disclosure:
site:*.domain.com ext:[FILE FORMAT] intext:[PII]
Secrets:
"company" "[PII]"
"target.tld" "[PII]"
Specifying the type of file/language used:
"company" "[PII]" language:[LANG]
"target.tld" "[PII]" language:[LANG]
Filtering out noise:
"company" "[PII]" -[FILTER]