dorkbot – Command-Line Tool For Google Dorking

dorkbot is a modular command-line tool for Google dorking, which is performing vulnerability scans against a set of web pages returned by Google search queries in a given Google Custom Search Engine.

How dorkbot works

It is broken up into two sets of modules:

• Indexers – modules that issue a search query and return the results as targets
• Scanners – modules that perform a vulnerability scan against each target

Targets are stored in a local database file upon being indexed. Once scanned, any vulnerabilities found by the chosen scanner are written to a standard JSON report file. Indexing and scanning processes can be run separately or combined in a single command.

dorkbot Google Vulnerability Scanner Usage

Example:

The scanner module also needs:

– Arachni – Web Application Security Scanner Framework
– Wapiti – Web Application Scanner / Black-box testing

You can download dorkbot here:

dorkbot-master.zip

Or read more here.