OSINT Research Presets

Google

Exposed Documents

Find publicly accessible PDF and DOC files on a target domain that may contain sensitive information.

site: filetype: OR


site:target.com filetype:pdf OR filetype:doc "confidential" OR "internal use only"

Customize: target domain

Open in Builder

Google

Credential & Secret Leaks

Find exposed .env files that may contain database passwords, API keys, or cloud access credentials.

ext: "..." OR site:


ext:env "DB_PASSWORD" OR "AWS_ACCESS_KEY_ID" site:example.com

Customize: target domain

Open in Builder

Google

Admin & Login Pages

Discover login portals, admin panels, and dashboard URLs on a target domain.

site: intitle: inurl: OR


site:deloitte.com intitle:"login" OR inurl:admin OR inurl:dashboard

Customize: target domain

Open in Builder

Google

Open Amazon S3 Buckets

Find publicly accessible S3 cloud storage buckets belonging to a company — may contain media, documents, or backups.

site: "..."


site:*.s3.amazonaws.com "company or product name"

Customize: company name

Open in Builder

Google

Exposed Site Backups

Find backup archives accidentally left in public directories — ZIP, tar.gz, and SQL dumps in wp-content or root.

site: inurl: ext: OR


site:example.com inurl:wp-content ext:zip OR ext:tar.gz OR ext:sql "backup"

Customize: target domain

Open in Builder

Google

Wikipedia Dead Links

Find Wikipedia pages in your niche that link to dead sites — create similar content and propose a replacement link to editors.

site: "..."


site:wikipedia.org "dead link" "your niche keyword"

Customize: niche keyword

Open in Builder

Google

Email Address Discovery

Find email addresses mentioned in public documents and pages on a target domain.

site: filetype: OR


site:target.com filetype:pdf OR filetype:doc OR filetype:xls "@target.com"

Customize: target domain

Open in Builder

Google

Guest Author Reverse Engineering

Find all sites where a specific author has published guest posts — build your own outreach target list.

"..." OR -site:


"guest post by" OR "written by" "Author Name" -site:authorsite.com

Customize: author name , author site

Open in Builder

Google

Open Directory Listing

Find publicly exposed directory indexes that may reveal internal file structure.

site: intitle:


site:oracle.com intitle:"index of /" OR intitle:"directory listing"

Customize: target domain

Open in Builder

Google

Employee Resume Discovery

Find published resumes and CVs of people who work at a target company — useful for competitive intelligence and recruiting.

intitle: OR "..." ext:


(intitle:"resume" OR intitle:"cv") "Company Name" (ext:pdf OR ext:doc OR ext:docx)

Customize: company name

Open in Builder

Google

Journalist & Media Contact Lists

Find open spreadsheets with journalist emails and phone numbers used by PR teams — Excel and CSV files with media contacts.

intitle: OR "..." ext:


("media list" OR "press contacts" OR inurl:media) "your niche" (ext:xls OR ext:xlsx OR ext:csv)

Customize: niche keyword

Open in Builder

Google

Government Document Search

Search for specific documents across government domains in a given country.

site: filetype:


site:gov filetype:pdf "budget" OR "procurement" OR "report"

Customize: gov domain , keywords

Open in Builder

Google

Hidden Promo Codes & Affiliates

Discover which coupon sites and affiliate partners a competitor works with — find their promo codes outside their own site.

inurl: OR "..." -site:


inurl:promo OR inurl:discount "Nike" -site:nike.com

Customize: competitor name , competitor domain

Open in Builder

Google

Open Image Upload Directories

Find raw upload folders on a site — bypassing HTML pages to find unoptimized images or hidden files.

site: -inurl:


site:example.com inurl:wp-content/uploads intitle:"index of"

Customize: target domain

Open in Builder