Google Dorking Made Simpler with GFU

3 hours ago 5
BOOK THIS SPACE FOR AD
ARTICLE AD

Sheryx00

This week, I had a lot of discussions with my colleagues, and they mentioned spending a lot of time loading their small Google dorks, downloading, and reading files. Personally, I never spent much time on it for a simple reason: laziness.

Then I remembered the @tomnomnom’s GF tool and thought: “why not create a similar wrapper, but for Google Dorking?”

Gfu is basically that: a wrapper for searching and downloading publicly accessible files using Google Dorks.

As you can see in the image, you can use search with custom patterns. This tool has options to collect all interesting links into a file, and also download (with the --extension flag) anything you think could be useful.

What make it really friendly is that it can be use with predefined patterns. E.g: use --pattern s3 to collect files in buckets, or --pattern secrets to run the common dorks that search for sensible information, and so on. You can create more patterns and combine them!

The --help flag is pretty straightforward:

-t, --target Target string for the search (e.g., domain name).
-o, --output Output folder to save logs and downloaded files. (Required)
-p, --pattern Comma-separated list of pattern names (e.g., api,secrets,repos).
-a, --aggressive Enable aggressive mode to use all patterns in the .gfu folder.
-d, --delay Delay (in seconds) between requests. Default is 30s.
-e, --extension Filter downloads by specific file extension (e.g., pdf, txt, csv).
-x, --extended Download all files regardless of extension.
-l, --list List all available pattern JSON files.
-c, --custom Custom Google dork query (e.g., 'site:github.com filetype:pdf')

You should give a try to the patterns list, and see how it works. I created a specific repository just for that. but remember that can be used with the --custom flag if you want a custom search.

Patterns must be saved in the ~/.gfu folder manually. It only take a few seconds to copy the files there.

Well, it’s just like GF as I said 😂 (it’s written in Python and not Go), but it doesn’t require installation, and it’s really easy to use. It save time for me and my friends, and now it’s public. Enjoy it!

gfu: https://github.com/Sheryx00/gfugfu-patterns: https://github.com/Sheryx00/gfu-patterns

Feel free to contribute to the patterns list. If you want to get in touch with me, I always respond on X: @sheryx00. 😊

Happy hacking!

Read Entire Article