Reveal the Cloud with Google Dorks

Find sensitive data in Amazon AWS, Google Cloud, and more

Special Google searches called “dorks” can be used to reveal sensitive data and identify targets for bug bounty hunting and penetration testing.

Cloud Storage Dorks

Cloud storage services like Amazon S3, Microsoft Azure Blob Storage, Google Cloud, and Google Drive can often contain sensitive information.

To find buckets and sensitive data, use the following dorks:

site:s3.amazonaws.com "example.com"
site:blob.core.windows.net "example.com"
site:googleapis.com "example.com"
site:drive.google.com "example.com"

Add terms like confidential, privileged, not for public release to narrow your results.

Bug Bounty Dorks

To find Bug Bounty programs and Vulnerability Disclosure Programs (VDPs), use the following dork:

"submit vulnerability report" | "powered by bugcrowd" | "powered by hackerone"