There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask.
- Basic Usage
- Defining engine
- Adding custom headers
- Using proxy
- Chained with other tools
- Supporting Materials
- Help & Bugs
- Download a prebuilt binary from releases page, unpack and run! or
- If you have Go 1.15+ compiler installed and configured:
> GO111MODULE=on go get -v -u dw1.io/go-dork
It’s fairly simple, go-dork can be run with:
> go-dork -q "inurl:'...'"
> go-dork -h
This will display help for the tool. Here are all the switches it supports.
|-q/–query||Search query (required)|
|-e/–engine||Provide search engine (default: Google)|
|(options: Google, Shodan, Bing, Duck, Yahoo, Ask)|
|-p/–page||Specify number of pages (default: 1)|
|-H/–header||Pass custom header to search engine|
|-x/–proxy||Use proxy to surfing|
|-s/–silent||Silent mode, prints only results in output|
> go-dork -q "inurl:..."
Queries can also be input with stdin
> cat dorks.txt | go-dork -p 5
Search engine can be changed from the available engines: Google, Shodan, Bing, Duck, Yahoo, Ask. However, if the
-e flag is not defined, it will use the Google search engine by default.
> go-dork -e bing -q ".php?id="
This will do a search by the Bing engine.
By default, go-dork scrapes the first page, you can customize using the
> go-dork -q "intext:'jira'" -p 5
It will search sequentially from pages 1 to 5.
Adding custom headers
Maybe you want to use a search filter on the Shodan engine, you can use custom headers to add cookies or other header parts.
> go-dork -q "org:'Target' http.favicon.hash:116323821" \ --engine shodan -H "Cookie: ..." -H "User-Agent: ..."
Using a proxy, this can also be useful if Google or other engines meet Captcha.
> go-dork -q "intitle:'BigIP'" -p 2 -x http://127.0.0.1:8989
Chained with other tools
If you want to chain the
go-dork results with another tool, use the
> cat dorks.txt | go-dork | pwntools > go-dork -q "inurl:'/secure' intext:'jira' site:org" -s | nuclei -t workflows/jira-exploitaiton-workflow.yaml
- Hazana. Dorking on Steroids, 11 Mar. 2021, https://hazanasec.github.io/2021-03-11-Dorking-on-Steriods/.
Help & Bugs
If you are still confused or found a bug, please open the issue. All bug reports are appreciated, some features have not been tested yet due to lack of free time.
- Fixes Yahoo regexes
- Fixes Google regexes if using custom User-Agent
- Stopping if there’s no results & page flag was set
- DuckDuckGo next page
LICENSE for more details.