From 348d1c057b9904c180f6d333f43d31aa3950977e Mon Sep 17 00:00:00 2001
From: salvacybersec <salva@opsecti.local>
Date: Mon, 6 Apr 2026 00:20:56 +0300
Subject: [PATCH] feat(08-03): add 30 Google dorks across 3 categories

- frontier.yaml: 12 dorks (OpenAI, Anthropic, Google AI, Groq, Cohere, Mistral, xAI, Replicate)
- specialized.yaml: 10 dorks (Perplexity, HF, ElevenLabs, Deepgram, AssemblyAI, Stability, Jina, Voyage)
- infrastructure.yaml: 8 dorks (OpenRouter, LiteLLM, Helicone, Portkey, Ollama, vLLM, LocalAI)
- Real site:/filetype:/intitle:/inurl: operators, no templating
- Dual-located: pkg/dorks/definitions/google/ (go:embed) + dorks/google/ (user-visible)
---
 dorks/google/frontier.yaml                    | 84 +++++++++++++++++++
 dorks/google/infrastructure.yaml              | 56 +++++++++++++
 dorks/google/specialized.yaml                 | 70 ++++++++++++++++
 pkg/dorks/definitions/google/frontier.yaml    | 84 +++++++++++++++++++
 .../definitions/google/infrastructure.yaml    | 56 +++++++++++++
 pkg/dorks/definitions/google/specialized.yaml | 70 ++++++++++++++++
 6 files changed, 420 insertions(+)
 create mode 100644 dorks/google/frontier.yaml
 create mode 100644 dorks/google/infrastructure.yaml
 create mode 100644 dorks/google/specialized.yaml
 create mode 100644 pkg/dorks/definitions/google/frontier.yaml
 create mode 100644 pkg/dorks/definitions/google/infrastructure.yaml
 create mode 100644 pkg/dorks/definitions/google/specialized.yaml

diff --git a/dorks/google/frontier.yaml b/dorks/google/frontier.yaml
new file mode 100644
index 0000000..a2ae711
--- /dev/null
+++ b/dorks/google/frontier.yaml
@@ -0,0 +1,84 @@
+- id: google-openai-pastebin
+  name: "OpenAI project keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "sk-proj-"'
+  description: "Pastebin dumps containing OpenAI project API keys"
+  tags: [openai, pastebin, tier1]
+- id: google-openai-gitlab-raw
+  name: "OpenAI keys in GitLab raw blobs"
+  source: google
+  category: frontier
+  query: 'site:gitlab.com/*/raw/* "sk-proj-"'
+  description: "GitLab raw file URLs that leak OpenAI project keys"
+  tags: [openai, gitlab, tier1]
+- id: google-openai-env-leak
+  name: "OpenAI keys in indexed .env files"
+  source: google
+  category: frontier
+  query: 'intext:"OPENAI_API_KEY=sk-proj-" filetype:env'
+  description: "Publicly indexed .env files with OpenAI project keys"
+  tags: [openai, env, tier1]
+- id: google-anthropic-pastebin
+  name: "Anthropic keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "sk-ant-api03-"'
+  description: "Pastebin dumps containing Anthropic API keys"
+  tags: [anthropic, pastebin, tier1]
+- id: google-anthropic-env
+  name: "Anthropic keys in indexed .env files"
+  source: google
+  category: frontier
+  query: 'intext:"ANTHROPIC_API_KEY=sk-ant-" filetype:env'
+  description: "Publicly indexed .env files with Anthropic API keys"
+  tags: [anthropic, env, tier1]
+- id: google-ai-pastebin
+  name: "Google AI keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "AIzaSy" "generativelanguage"'
+  description: "Google Generative Language keys exposed on Pastebin"
+  tags: [google-ai, pastebin, tier1]
+- id: google-ai-gitlab
+  name: "Google AI keys in GitLab configs"
+  source: google
+  category: frontier
+  query: 'site:gitlab.com "AIzaSy" inurl:config'
+  description: "GitLab config files containing Google AI API keys"
+  tags: [google-ai, gitlab, tier1]
+- id: google-groq-pastebin
+  name: "Groq keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "gsk_"'
+  description: "Pastebin dumps containing Groq API keys"
+  tags: [groq, pastebin, tier1]
+- id: google-cohere-env
+  name: "Cohere keys in indexed .env files"
+  source: google
+  category: frontier
+  query: 'intext:"COHERE_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with Cohere API keys"
+  tags: [cohere, env, tier2]
+- id: google-mistral-env
+  name: "Mistral keys in indexed .env files"
+  source: google
+  category: frontier
+  query: 'intext:"MISTRAL_API_KEY=" filetype:env'
+  description: "Publicly indexed .env files with Mistral API keys"
+  tags: [mistral, env, tier2]
+- id: google-xai-pastebin
+  name: "xAI keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "xai-"'
+  description: "Pastebin dumps containing xAI (Grok) API keys"
+  tags: [xai, pastebin, tier2]
+- id: google-replicate-env
+  name: "Replicate keys in indexed .env files (non-GitHub)"
+  source: google
+  category: frontier
+  query: 'intext:"r8_" filetype:env -site:github.com'
+  description: "Publicly indexed .env files with Replicate tokens outside GitHub"
+  tags: [replicate, env, tier2]
diff --git a/dorks/google/infrastructure.yaml b/dorks/google/infrastructure.yaml
new file mode 100644
index 0000000..f51e2f3
--- /dev/null
+++ b/dorks/google/infrastructure.yaml
@@ -0,0 +1,56 @@
+- id: google-openrouter-pastebin
+  name: "OpenRouter keys on Pastebin"
+  source: google
+  category: infrastructure
+  query: 'site:pastebin.com "sk-or-v1-"'
+  description: "Pastebin dumps containing OpenRouter gateway keys"
+  tags: [openrouter, pastebin, tier5]
+- id: google-openrouter-env
+  name: "OpenRouter keys in indexed .env files"
+  source: google
+  category: infrastructure
+  query: 'intext:"sk-or-v1-" filetype:env'
+  description: "Publicly indexed .env files with OpenRouter keys"
+  tags: [openrouter, env, tier5]
+- id: google-litellm-config
+  name: "LiteLLM master keys in YAML configs"
+  source: google
+  category: infrastructure
+  query: 'intext:"LITELLM_MASTER_KEY" filetype:yaml'
+  description: "LiteLLM config files leaking master keys"
+  tags: [litellm, yaml, tier5]
+- id: google-helicone-env
+  name: "Helicone keys in indexed .env files"
+  source: google
+  category: infrastructure
+  query: 'intext:"sk-helicone-" filetype:env'
+  description: "Publicly indexed .env files with Helicone gateway keys"
+  tags: [helicone, env, tier5]
+- id: google-portkey-env
+  name: "Portkey keys in indexed .env files"
+  source: google
+  category: infrastructure
+  query: 'intext:"PORTKEY_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with Portkey gateway keys"
+  tags: [portkey, env, tier5]
+- id: google-ollama-exposed
+  name: "Exposed Ollama dashboards"
+  source: google
+  category: infrastructure
+  query: 'intitle:"Ollama" inurl:":11434"'
+  description: "Publicly reachable Ollama instances on port 11434"
+  tags: [ollama, self-hosted, tier8]
+- id: google-vllm-exposed
+  name: "Exposed vLLM servers"
+  source: google
+  category: infrastructure
+  query: 'intitle:"vLLM" "/v1/models"'
+  description: "Publicly reachable vLLM inference endpoints"
+  tags: [vllm, self-hosted, tier8]
+- id: google-localai-exposed
+  name: "Exposed LocalAI servers"
+  source: google
+  category: infrastructure
+  query: 'intitle:"LocalAI" "/v1/chat/completions"'
+  description: "Publicly reachable LocalAI chat completion endpoints"
+  tags: [localai, self-hosted, tier8]
diff --git a/dorks/google/specialized.yaml b/dorks/google/specialized.yaml
new file mode 100644
index 0000000..ae70f67
--- /dev/null
+++ b/dorks/google/specialized.yaml
@@ -0,0 +1,70 @@
+- id: google-perplexity-pastebin
+  name: "Perplexity keys on Pastebin"
+  source: google
+  category: specialized
+  query: 'site:pastebin.com "pplx-"'
+  description: "Pastebin dumps containing Perplexity API keys"
+  tags: [perplexity, pastebin, tier3]
+- id: google-hf-pastebin
+  name: "Hugging Face tokens on Pastebin"
+  source: google
+  category: specialized
+  query: 'site:pastebin.com "hf_"'
+  description: "Pastebin dumps containing Hugging Face access tokens"
+  tags: [huggingface, pastebin, tier3]
+- id: google-elevenlabs-env
+  name: "ElevenLabs keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"ELEVENLABS_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with ElevenLabs API keys"
+  tags: [elevenlabs, env, tier3]
+- id: google-deepgram-env
+  name: "Deepgram keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"DEEPGRAM_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with Deepgram API keys"
+  tags: [deepgram, env, tier3]
+- id: google-assemblyai-pastebin
+  name: "AssemblyAI keys on Pastebin"
+  source: google
+  category: specialized
+  query: 'site:pastebin.com "ASSEMBLYAI_API_KEY"'
+  description: "Pastebin dumps containing AssemblyAI API keys"
+  tags: [assemblyai, pastebin, tier3]
+- id: google-stability-env
+  name: "Stability AI keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"sk-stability-" filetype:env'
+  description: "Publicly indexed .env files with Stability AI API keys"
+  tags: [stability, env, tier3]
+- id: google-jina-env
+  name: "Jina AI keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"jina_" filetype:env'
+  description: "Publicly indexed .env files with Jina AI API keys"
+  tags: [jina, env, tier3]
+- id: google-voyage-env
+  name: "Voyage AI keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"VOYAGE_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with Voyage AI API keys"
+  tags: [voyage, env, tier3]
+- id: google-hf-notebook
+  name: "Hugging Face tokens in Google Colab notebooks"
+  source: google
+  category: specialized
+  query: 'site:colab.research.google.com "hf_"'
+  description: "Google Colab notebooks leaking Hugging Face tokens"
+  tags: [huggingface, colab, tier3]
+- id: google-hf-kaggle
+  name: "Hugging Face tokens in Kaggle notebooks"
+  source: google
+  category: specialized
+  query: 'site:kaggle.com "hf_" inurl:notebook'
+  description: "Kaggle notebooks leaking Hugging Face tokens"
+  tags: [huggingface, kaggle, tier3]
diff --git a/pkg/dorks/definitions/google/frontier.yaml b/pkg/dorks/definitions/google/frontier.yaml
new file mode 100644
index 0000000..a2ae711
--- /dev/null
+++ b/pkg/dorks/definitions/google/frontier.yaml
@@ -0,0 +1,84 @@
+- id: google-openai-pastebin
+  name: "OpenAI project keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "sk-proj-"'
+  description: "Pastebin dumps containing OpenAI project API keys"
+  tags: [openai, pastebin, tier1]
+- id: google-openai-gitlab-raw
+  name: "OpenAI keys in GitLab raw blobs"
+  source: google
+  category: frontier
+  query: 'site:gitlab.com/*/raw/* "sk-proj-"'
+  description: "GitLab raw file URLs that leak OpenAI project keys"
+  tags: [openai, gitlab, tier1]
+- id: google-openai-env-leak
+  name: "OpenAI keys in indexed .env files"
+  source: google
+  category: frontier
+  query: 'intext:"OPENAI_API_KEY=sk-proj-" filetype:env'
+  description: "Publicly indexed .env files with OpenAI project keys"
+  tags: [openai, env, tier1]
+- id: google-anthropic-pastebin
+  name: "Anthropic keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "sk-ant-api03-"'
+  description: "Pastebin dumps containing Anthropic API keys"
+  tags: [anthropic, pastebin, tier1]
+- id: google-anthropic-env
+  name: "Anthropic keys in indexed .env files"
+  source: google
+  category: frontier
+  query: 'intext:"ANTHROPIC_API_KEY=sk-ant-" filetype:env'
+  description: "Publicly indexed .env files with Anthropic API keys"
+  tags: [anthropic, env, tier1]
+- id: google-ai-pastebin
+  name: "Google AI keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "AIzaSy" "generativelanguage"'
+  description: "Google Generative Language keys exposed on Pastebin"
+  tags: [google-ai, pastebin, tier1]
+- id: google-ai-gitlab
+  name: "Google AI keys in GitLab configs"
+  source: google
+  category: frontier
+  query: 'site:gitlab.com "AIzaSy" inurl:config'
+  description: "GitLab config files containing Google AI API keys"
+  tags: [google-ai, gitlab, tier1]
+- id: google-groq-pastebin
+  name: "Groq keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "gsk_"'
+  description: "Pastebin dumps containing Groq API keys"
+  tags: [groq, pastebin, tier1]
+- id: google-cohere-env
+  name: "Cohere keys in indexed .env files"
+  source: google
+  category: frontier
+  query: 'intext:"COHERE_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with Cohere API keys"
+  tags: [cohere, env, tier2]
+- id: google-mistral-env
+  name: "Mistral keys in indexed .env files"
+  source: google
+  category: frontier
+  query: 'intext:"MISTRAL_API_KEY=" filetype:env'
+  description: "Publicly indexed .env files with Mistral API keys"
+  tags: [mistral, env, tier2]
+- id: google-xai-pastebin
+  name: "xAI keys on Pastebin"
+  source: google
+  category: frontier
+  query: 'site:pastebin.com "xai-"'
+  description: "Pastebin dumps containing xAI (Grok) API keys"
+  tags: [xai, pastebin, tier2]
+- id: google-replicate-env
+  name: "Replicate keys in indexed .env files (non-GitHub)"
+  source: google
+  category: frontier
+  query: 'intext:"r8_" filetype:env -site:github.com'
+  description: "Publicly indexed .env files with Replicate tokens outside GitHub"
+  tags: [replicate, env, tier2]
diff --git a/pkg/dorks/definitions/google/infrastructure.yaml b/pkg/dorks/definitions/google/infrastructure.yaml
new file mode 100644
index 0000000..f51e2f3
--- /dev/null
+++ b/pkg/dorks/definitions/google/infrastructure.yaml
@@ -0,0 +1,56 @@
+- id: google-openrouter-pastebin
+  name: "OpenRouter keys on Pastebin"
+  source: google
+  category: infrastructure
+  query: 'site:pastebin.com "sk-or-v1-"'
+  description: "Pastebin dumps containing OpenRouter gateway keys"
+  tags: [openrouter, pastebin, tier5]
+- id: google-openrouter-env
+  name: "OpenRouter keys in indexed .env files"
+  source: google
+  category: infrastructure
+  query: 'intext:"sk-or-v1-" filetype:env'
+  description: "Publicly indexed .env files with OpenRouter keys"
+  tags: [openrouter, env, tier5]
+- id: google-litellm-config
+  name: "LiteLLM master keys in YAML configs"
+  source: google
+  category: infrastructure
+  query: 'intext:"LITELLM_MASTER_KEY" filetype:yaml'
+  description: "LiteLLM config files leaking master keys"
+  tags: [litellm, yaml, tier5]
+- id: google-helicone-env
+  name: "Helicone keys in indexed .env files"
+  source: google
+  category: infrastructure
+  query: 'intext:"sk-helicone-" filetype:env'
+  description: "Publicly indexed .env files with Helicone gateway keys"
+  tags: [helicone, env, tier5]
+- id: google-portkey-env
+  name: "Portkey keys in indexed .env files"
+  source: google
+  category: infrastructure
+  query: 'intext:"PORTKEY_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with Portkey gateway keys"
+  tags: [portkey, env, tier5]
+- id: google-ollama-exposed
+  name: "Exposed Ollama dashboards"
+  source: google
+  category: infrastructure
+  query: 'intitle:"Ollama" inurl:":11434"'
+  description: "Publicly reachable Ollama instances on port 11434"
+  tags: [ollama, self-hosted, tier8]
+- id: google-vllm-exposed
+  name: "Exposed vLLM servers"
+  source: google
+  category: infrastructure
+  query: 'intitle:"vLLM" "/v1/models"'
+  description: "Publicly reachable vLLM inference endpoints"
+  tags: [vllm, self-hosted, tier8]
+- id: google-localai-exposed
+  name: "Exposed LocalAI servers"
+  source: google
+  category: infrastructure
+  query: 'intitle:"LocalAI" "/v1/chat/completions"'
+  description: "Publicly reachable LocalAI chat completion endpoints"
+  tags: [localai, self-hosted, tier8]
diff --git a/pkg/dorks/definitions/google/specialized.yaml b/pkg/dorks/definitions/google/specialized.yaml
new file mode 100644
index 0000000..ae70f67
--- /dev/null
+++ b/pkg/dorks/definitions/google/specialized.yaml
@@ -0,0 +1,70 @@
+- id: google-perplexity-pastebin
+  name: "Perplexity keys on Pastebin"
+  source: google
+  category: specialized
+  query: 'site:pastebin.com "pplx-"'
+  description: "Pastebin dumps containing Perplexity API keys"
+  tags: [perplexity, pastebin, tier3]
+- id: google-hf-pastebin
+  name: "Hugging Face tokens on Pastebin"
+  source: google
+  category: specialized
+  query: 'site:pastebin.com "hf_"'
+  description: "Pastebin dumps containing Hugging Face access tokens"
+  tags: [huggingface, pastebin, tier3]
+- id: google-elevenlabs-env
+  name: "ElevenLabs keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"ELEVENLABS_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with ElevenLabs API keys"
+  tags: [elevenlabs, env, tier3]
+- id: google-deepgram-env
+  name: "Deepgram keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"DEEPGRAM_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with Deepgram API keys"
+  tags: [deepgram, env, tier3]
+- id: google-assemblyai-pastebin
+  name: "AssemblyAI keys on Pastebin"
+  source: google
+  category: specialized
+  query: 'site:pastebin.com "ASSEMBLYAI_API_KEY"'
+  description: "Pastebin dumps containing AssemblyAI API keys"
+  tags: [assemblyai, pastebin, tier3]
+- id: google-stability-env
+  name: "Stability AI keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"sk-stability-" filetype:env'
+  description: "Publicly indexed .env files with Stability AI API keys"
+  tags: [stability, env, tier3]
+- id: google-jina-env
+  name: "Jina AI keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"jina_" filetype:env'
+  description: "Publicly indexed .env files with Jina AI API keys"
+  tags: [jina, env, tier3]
+- id: google-voyage-env
+  name: "Voyage AI keys in indexed .env files"
+  source: google
+  category: specialized
+  query: 'intext:"VOYAGE_API_KEY" filetype:env'
+  description: "Publicly indexed .env files with Voyage AI API keys"
+  tags: [voyage, env, tier3]
+- id: google-hf-notebook
+  name: "Hugging Face tokens in Google Colab notebooks"
+  source: google
+  category: specialized
+  query: 'site:colab.research.google.com "hf_"'
+  description: "Google Colab notebooks leaking Hugging Face tokens"
+  tags: [huggingface, colab, tier3]
+- id: google-hf-kaggle
+  name: "Hugging Face tokens in Kaggle notebooks"
+  source: google
+  category: specialized
+  query: 'site:kaggle.com "hf_" inurl:notebook'
+  description: "Kaggle notebooks leaking Hugging Face tokens"
+  tags: [huggingface, kaggle, tier3]