Go-Dork - The Fastest Dork Scanner Written In Go

4 years ago 143
BOOK THIS SPACE FOR AD
ARTICLE AD

The fastest dork scanner written in Go.

There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask.

Install

Download a prebuilt binary from releases page, unpack and run! or If you have go compiler installed and configured:
> GO111MODULE=on go get -v github.com/dwisiswant0/go-dork/...

Usage

Basic Usage

Simply, go-dork can be run with:

> go-dork -q "inurl:'...'"

Flags

This will display help for the tool. Here are all the switches it supports.

Flag Description
-q/--query Search query (required)
-e/--engine Provide search engine (default: Google)
(options: Google, Shodan, Bing, Duck, Yahoo, Ask)
-p/--page Specify number of pages (default: 1)
-H/--header Pass custom header to search engine
-x/--proxy Use proxy to surfing
-s/--silent Silent mode, prints only results in output
-nc/--no-color Disable colored output results

Querying

Queries can also be input with stdin

> cat dorks.txt | go-dork -p 5

Defining engine

Search engine can be changed from the available engines: Google, Shodan, Bing, Duck, Yahoo, Ask. However, if the -e flag is not defined, it will use the Google search engine by default.

> go-dork -e bing -q ".php?id="

This will do a search by the Bing engine.

Pagination

By default, go-dork selects the first page, you can customize using the -p flag.

> go-dork -q "intext:'jira'" -p 5

It will search sequentially from pages 1 to 5.

Adding Headers

Maybe you want to use a search filter on the Shodan engine, you can use custom headers to add cookies or other header parts.

> go-dork -q "org:'Target' http.favicon.hash:116323821" \
--engine shodan -H "Cookie: ..." -H "User-Agent: ..."

Using Proxy

Using a proxy, this can also be useful if Google or other engines meet Captcha.

> go-dork -q "intitle:'BigIP'" -p 2 -x http://127.0.0.1:8989

Chained with other tools

If you want to chain the go-dork results with another tool, use the -s flag.

> go-dork -q "inurl:'/secure' intext:'jira' site:org" -s | nuclei -t workflows/jira-exploitaiton-workflow.yaml

Help & Bugs

If you are still confused or found a bug, please open the issue. All bug reports are appreciated, some features have not been tested yet due to lack of free time.

TODOs

Fixes Yahoo regexes Fixes Google regexes if using custom User-Agent Stopping if there's no results & page flag was set DuckDuckGo next page

Go-Dork - The Fastest Dork Scanner Written In Go Go-Dork - The Fastest Dork Scanner Written In Go Reviewed by Zion3R on 5:30 PM Rating: 5

Read Entire Article