模式

使用样例

-ip

bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -ip

-asn

bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -asn

-cve

bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -cve

-favicon

bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -favicon

-leaks

bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -leaks

-deep

bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -deep

-count

bash karma_v2 -d <DOMAIN.TLD> -l <INTEGER> -count

DORK

DORK

DORK

ssl.cert.fingerprint

http.status:"302" oauth

"Server: Jetty"

ssl

http.status:"302" sso

X-Amz-Bucket-Region

org

title:"401 Authorization Required"

"development" org:"Amazon.com"

hostname

http.html:"403 Forbidden"

"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Jenkins [Jenkins]"

ssl.cert.issuer.cn

http.html:"500 Internal Server Error"

http.favicon.hash:81586312 200

ssl.cert.subject.cn

ssl.cert.subject.cn:*v-pn*

product:"Kubernetes" port:"10250, 2379"

ssl.cert.expired:true

title:"citrix gateway"

port:"9100" http.title:"Node Exporter"

ssl.cert.subject.commonName

http.html:"JFrog"

http.title:"Grafana"

http.title:"Index of /"

"X-Jfrog"

http.title:"RabbitMQ"

ftp port:"10000"

http.title:"dashboard"

HTTP/1.1 307 Temporary Redirect "Location: /containers"

"Authentication: disabled" port:445 product:"Samba"

http.title:"Openfire Admin Console"

http.favicon.hash:1278323681

title:"Login - Adminer"

http.title:"control panel"

"MongoDB Server Information" port:27017 -authentication

http.title:"sign up"

http.html:"* The wp-config.php creation script uses this file"

port:"9200" all:"elastic indices"

http.title:"LogIn"

clockwork

"220" "230 Login successful." port:21

port:"11211" product:"Memcached"

"port: 53" Recursion: Enabled

title:"kibana"

port:9090 http.title:"Prometheus Time Series Collection and Processing Server"

"default password"

title:protected

http.component:Moodle

http.favicon.hash:116323821

html:"/login/?next=" title:"Django"

html:"/admin/login/?next=" title:"Django"

title:"system dashboard" html:jira

http.component:ruby port:3000

html:"secret_key_base"

I will add more soon

. . .

DORK

DORK

DORK

"netweaver"

port:"2379" product:"etcd"

http.title:"DisallowedHost"

ssl:"${target}" "-AkamaiGHost" "-GHost"

ssl:"${target}" "-Cloudflare"

ssl:"${target}" "-Cloudfront"

"X-Debug-Token-Link" port:443

http.title:"shipyard" HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 5664

http.title:"TIBCO Jaspersoft:" port:"443" "1970"

"Confluence"

http.title:"SonarQube"

html:"jmx?qry=Hadoop:*"

http.title:"Directory Listing"

http.title:"H-SPHERE"

http.title:"Swagger UI - "

Server: Apache-Coyote/1.1 Tomcat-5.5"

port:2375 product:"Docker"

http.title:"phpinfo()"

http.title:"ID_VC_Welcome"

"x-powered-by" "jboss"

jboss http.favicon.hash:-656811182

http.title:"Welcome to JBoss"

port:"8089, 8000" "splunkd"

http.favicon.hash:-316785925

title:"splunkd" org:"Amazon.com"

http.title:"oracle business intelligence sign in"

http.title:"Oracle WebLogic Server Administration Console"

http.title:"Apache Status"

I will add more soon

. . .