A Python tool to automate some dorking stuff to find information disclosures.

Last update: Jan 8, 2023

Overview

WebDork v1.0.3

A open-source tool to find publicly available sensitive information about Companies/Organisations!

WebDork

A Python tool to automate some dorking stuff to find information disclosures. Suggestions and issues are welcome because I know codes can never be perfect.

Note:

As a user of this tool you agree this terms:

I will not use it for any blackhat/unethical work
I will not disclose any information found by this tool

Not all results found by this tool are sensitive information. If you find any information using this tool you must verify it by yourself and check whether the information can really cause any major/minor harm to A company.

Example finds:

Backend related information.
Company's/Orgnisation's future/internal plans/mindmaps.
Internal tools.

Compatibility

Check your Python version by typing in

$ python --version

If you get the following

Python 3.9.0

or any version greater than or equal to 3.9, this script has been tested and confirmed to be supported.

Installation

For termux

pkg install git -y 
pkg install python -y 
git clone https://github.com/HACKE-RC/webdork
cd webdork
python termux-setup.py

For iSH

apk add git
apk add python3
apk add py3-pip
git clone https://github.com/HACKE-RC/webdork
cd webdork
python setup.py

For Debian-based GNU/Linux distributions

git clone https://github.com/HACKE-RC/webdork
cd webdork
sudo python3 setup.py

Usage:

Help menu of the tool

webdork -h
usage: main.py [-h] -cn Company name [-bw] [--show] [-o Output] [-v] [-s] [--no-save-output]

A python tool to automatically dork on a given company\'s name.

optional arguments:
  -h, --help            show this help message and exit
  -cn Company name, --company-name Company name
                        Name of the company
  -bw, --browser        Search the dorks in browser.
  --show                Print results from the dorks.
  -o Output             Output filename(default is dorkresults.txt).
  -v, --verbose         Turn verbose mode on.
  -s, --silent          Just save the results without printing anything.
  --no-save-output      Don\'t save the output in file.

Example usage:

webdork -cn Hackerone -bw --show -v -o output.txt

Arguments :

Company/Organisation name to search for : -cn
Open the dorks in browser : -bw, --browser
Show dork results in terminal : --show
Output filename : -o
Better output : -v, --verbose
Directly save the results without printing anything : -s, --silent
Do not save the result in any file : --no-save-output

Shoutout :

Ahsan khan for this tweet.
TheSpeedX for writing docs of Tbomb in such a amazing way!. I copied some stuff from his docs about TBomb.
Resethacker!
aks1337 for pull request.
Akash Chhabra for pull request.

If you like my work consider contacting me on Twitter @coder_rc for donation related information.

Demonstrative Video:

https://youtu.be/JCReY9O5oTk

Made with so much debugging by RC

You might also like...

DepFine Is a tool to find the unregistered dependency based on dependency confusion valunerablility and lead to RCE

Comments

result showing some error

Hi, while executing command faced below error webdork -cn advancedmd --show -v -o Admoutput.txt

Error:- Getting the results from dork -> inurl:gitlab "advancedmd" Traceback (most recent call last): File "/usr/bin/webdork", line 193, in all_links = Scanner.filtergoogle(all_links) File "/usr/bin/webdork", line 87, in filtergoogle actual_results.append(url[url.index(":http")+1:] ) ValueError: substring not found
wontfix

opened by naveen12 2

A Python tool to automate some dorking stuff to find information disclosures.

Related tags

Overview

WebDork v1.0.3

WebDork

Note:

As a user of this tool you agree this terms:

Example finds:

Compatibility

Installation

For termux

For iSH

For Debian-based GNU/Linux distributions

Usage:

Example usage:

Arguments :

Shoutout :

Demonstrative Video:

You might also like...

DepFine Is a tool to find the unregistered dependency based on dependency confusion valunerablility and lead to RCE

Click-Jack - Automatic tool to find Clickjacking Vulnerability in various Web applications

Automated tool to find & created Exploit Poc for Clickjacking Vulnerability

A tool to find good RCE From my series: A powerful Burp extension to make bounties rain

A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities

Python lib to automate basic QFT calculations like Wick-contractions.

This python script will automate the testing for the Log4J vulnerability for HTTP and HTTPS connections.

AIL LeakFeeder: A Module for AIL Framework that automate the process to feed leaked files automatically to AIL

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

Comments

result showing some error

Owner

Rahul rc

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks.

Collection Of Discord Hacking Tools / Fun Stuff / Exploits That Is Completely Made Using Python.

Password database With special stuff

Yuyu Scanner is a Web Reconnaissance & Web Analysis Scanner to find assets and information about targets.

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

Osint-Tool - Information collection tool in python

Bandit is a tool designed to find common security issues in Python code.

Profil3r is an OSINT tool that allows you to find potential profiles of a person on social networks, as well as their email addresses 🕵️

A Tool to find subdomains from hackerone reports.

NexScanner is a tool which allows you to scan a website and find the admin login panel and sub-domains