CSE API Key
API Inactive
Configure Google Custom Search
Enter your Google Custom Search API Key and Search Engine ID to avoid rate limiting.
API Key:
Search Engine ID:
Test Connection
Cancel
Save
Koala's Personal Bug Bounty Search Engine.
Enter Target Domain:
Reset Tracking
File & Directory Discovery
Directory listing vulnerabilities
Exposed Configuration files
Exposed Database files
Exposed log files
Backup and old files
Publicly exposed documents
Configuration PHP files
Admin backup archives
WordPress config files
WordPress backups
MySQL config files
Exposed .git directories
Web Application Discovery
Login pages
SQL errors
phpinfo()
WordPress sites
Finding Backdoors
Installation & setup files
Open Redirects
Apache Struts RCE
WordPress files
Admin portals
Upload pages
Contact Form 7
Drupal logins
Joomla database files
Information Gathering
Pastebin entries
LinkedIn employees
Sensitive files
Subdomains
Sub-subdomains
SSL Certificate info
Reddit mentions
Cloud & Infrastructure
Open Bug Bounty reports
Censys IPv4
Censys Domains
Censys Certificates
Shodan search
Jenkins instances
Kibana/Elasticsearch
AWS S3 Buckets
Kubernetes dashboards
Docker API
Firebase instances
MongoDB servers
Web server status pages
API & Development
GitHub dorks
Flash files (Google)
Flash files (Yandex)
GeoServer WFS
ArcGIS directories
Ansible YAML files
API Info pages
GitHub API directories
SQL query in URL
JSON-RPC endpoints
JWKS-RSA endpoints
YAML config files
Docker compose files
Maven POM files
GraphQL endpoints
API keys & secrets
JIRA dashboards
Spring actuator endpoints
Prometheus servers
Environment files with secrets
API docs & Swagger
Confluence & Wiki pages
Archives & Historical
Crossdomain.xml
ThreatCrowd
Archive.org SWF files
Archive.org Flash files
Archive.org domain history
Archive.org full site
Archive.org WordPress files
Direct file downloads
Exposed /etc directories
SQL directories