DorkMe

DorkMe is a tool designed with the purpose of making easier the searching for vulnerabilities with Google Dorks, such as SQL Injection vulnerabilities.

Google hacking, also named Google dorking, is a computer hacking technique that uses Google Search and other Google applications to find security holes in the configuration and computer code that websites use.

For example, SQL injection usually has this structure in the url “file.php? Id = [vuln]”, to look for pages vulnerable to SQLi we can use the operator “inurl:”, which only shows results with X string in the url , we can also use the “filetype: [extension]” operator to search for sensitive files, a hyphen in front of a word so that the word does not appear in the search, quote a phrase or word to ALWAYS appear in the search results, etc.

List of special operators

dork folder contains -> dorks to search, result folder contains -> results of DorkMe execution.

Remember DorkMe is beta, to avoid bans DorkMe wait about 1 minute on each request and 3 minutes every 100 requests.

add dorks

If you want to add new dorks put it in one of the files in the dorks folder (preferable in its category), if it is not, you can add it to mydorks.txt. to add it: in the first line add the dork, in the second the severity: high , medium or low, and finally its description, look at the other files to do it correctly Dork List:

• http://www.conzu.de/en/google-dork-liste-2018-conzu/
• https://www.exploit-db.com/google-hacking-database/
• Find admin Panels: https://starhackx.blogspot.com/2014/02/list-of-dorks-to-find-admin-panels_23.html

Download

git clone https://github.com/blueudp/DorkMe.git
pip install google
pip install argparse
pip install -r requirements.txt

Use

python DorkMe.py --help 

example:python DorkMe.py --url bible-history.com --dorks vulns -v (recommended for test) 

python DorkMe.py --url bible-history.com --dorks Deprecated,Info -v (multiple dorks) 

python DorkMe.py --url bible-history.com --dorks all -v (test all)

Copyright (C) 2018 blueudp 

Source: https://github.com/blueudp/