Star 历史趋势
数据来源: GitHub API · 生成自 Stargazers.cn
README.md
image

DorkEye – OSINT Google Dorking Tool

Python License Status Search Version

Repo views Stars Forks Issues Last Commit

Telegram

image

What is DorkEye?

DorkEye is an automated OSINT DORKING TOOL that discovers exposed web assets through intelligent search queries.

  • It combines a dork generator driven by YAML templates (soft / medium / aggressive modes), an SQL and XSS testing module, a 13-step autonomous analysis pipeline, an adaptive recursive crawler, and a database port scanner.

  • It can identify indexed directories, sensitive files, admin panels, databases, backups, configuration files, credentials, PII data, subdomains, and technology fingerprints — efficiently and with stealth controls.

startdev4 9 5 startdev4 9 5_0

Why DorkEye

  • Runs everywhere — Linux · macOS · Windows · Android (Termux) · iOS (iSH)
  • Bypass CAPTCHA and rate-limiting
  • Advanced, interactive HTML report
  • Maintain anonymity and avoid IP blocking
  • Clean and unfiltered search results
  • Keep dorking for hours — DorkEye won't get banned.
564558417-37385827-9112-4efe-aa0a-f8941da0a2d9

What's New 🥇

FeatureDetails
🧙 WizardInteractive guided session — all options
⚙️ Dork GeneratorYAML template modes: soft / medium / aggressive
📱 All SystemsAndroid/Termux · iOS/iSH · macOS · Linux · Windows
🎯 SQLi-XSSTest URL’s directly with -u and -f
📂 File Re-ProcessingRe-run SQLi/XSS/analysis/crawl on saved result files with -f
💉 SQL Injection5 methods: 105 payloads
💉 XSS Injection4 methods: 111 payloads
🖥️ Web ConsoleMatrix-Style local dashboard via browser --ui
🚪 DB Port Scan15 services, no-auth probes, 3 severity levels --dbscan
🤖 Agents Pipeline13-step autonomous analysis
🛡️ HeaderIntelAgentInfo leaks, missing security headers, outdated server
🧬 TechFingerprintAgent35 technologies detected, CVE dorks generated
📧 EmailHarvesterAgentCollects and categorizes emails: admin / security / info..
🔐 PiiDetectorAgentPhone, IBAN, fiscal code, credit card, SSN, DOB
🌐 SubdomainAgentExtracts subdomains and generates queries
🔄 Adaptive CrawlRecursive multi-round dorking
🔑 HTTP Fingerprinting22 browser/OS profiles — Chrome, Firefox, Safari, mobile, etc.
📊 Output FormatsHTML interactive report — all saved to Dump/
🗂️ File Categories7 auto-detected categories - whitelist / blacklist filtering
🖥️ Full CLI ReferenceAll 38 flags and every possible combination

One-command install — Alpine / iOS (iSH)

Recommended for iOS users via iSH (Alpine Linux) and any Alpine-based system.
install.sh auto-detects the environment and runs the matching setup. Docs

apk add git
git clone https://github.com/xPloits3c/DorkEye.git
cd DorkEye
sh install.sh
source dorkeye_env/bin/activate
python dorkeye.py —wizard

Using Debian, Ubuntu or Kali? Follow the Quick Install below.

Update

  sudo apt update
  sudo apt install -y python3 python3-pip python3-venv git

AUTOMATIC Quick Install

  git clone https://github.com/xPloits3c/DorkEye.git
  cd DorkEye
  sh install.sh
  source dorkeye_env/bin/activate
  python dorkeye.py —wizard

MANUAL Quick Install

  git clone https://github.com/xPloits3c/DorkEye.git
  cd DorkEye
  python3 -m venv dorkeye_env
  source dorkeye_env/bin/activate
  pip install -r requirements.txt
  python dorkeye.py --wizard
dev5 0wiz
"Help:"
  python3 dorkeye.py -h

"Deactivate environment:"
  deactivate

"Remove environment:"
  rm -rf dorkeye_env

Usage

dev5 0usage

🔹 # WIZARD Mode  Docs

  python3 dorkeye.py --wizard

🔹 # Basic search  Docs

  python3 dorkeye.py -d "inurl:admin" -o results.txt

🔹 # Dork Generator + Detection  Docs

  python3 dorkeye.py --dg=sqli --mode=aggressive --sqli --stealth -o report.json

🔹 # SQLi + stealth  Docs

  python3 dorkeye.py -d "site:example.com .php?id=" --sqli --stealth -o scan.html

🔹 # Fast scan  Docs

  python3 dorkeye.py -d dorks.txt --no-analyze -c 200 -o fast_results.csv

🔹 # Direct SQLi test on a URL  Docs

  python3 dorkeye.py -u "https://target.com/page.php?id=1" --sqli --stealth -o result.json

🔹 # Re-process a saved result file  Docs

  python3 dorkeye.py -f Dump/results.json --sqli --xss --dbscan --analyze -o retest.html

🔹 # Web Console  Docs

  python3 dorkeye.py --ui
image

Examples

de-hex

📁 Project Structure

DorkEye/
│ ├── dorkeye.py                      ← DorkEye Engine
│ ├── requirements.txt                ← Python dependencies
│ ├── http_fingerprints.json          ← 22 browser/OS HTTP profiles
│ ├── install.sh                      ← Device detect + dispatch (Linux/macOS/Termux/iSH)
│ ├── install.bat                     ← Windows installer (double-click)
│ ├── README.md                       ← This file (you are here)
│ ├── LICENSE                         ← MIT license
│ ├── .gitignore                      ← Git ignore rules
│ /Devices/                           ← Per-device installers
│    /iOS/
│        ├── install_ish.sh           ← iSH (iOS) lite installer — no lxml
│        └── ddg_lite.py              ← lxml-free DuckDuckGo backend
│    /Android/
│        └── install_termux.sh        ← Termux installer (libxml2/libxslt + venv)
│    /Linux/
│        └── install_linux.sh         ← Linux / macOS installer (venv)
│ /Tools/
│    ├── __init__.py                  ← Package initializer
│    ├── dork_generator.py            ← Dork Generator Queries
│    ├── dorkeye_agents.py            ← Agents pipeline
│    ├── dorkeye_patterns.py          ← Shared pattern library
│    ├── dorkeye_analyze.py           ← Standalone analysis CLI
│    ├── db_portscan.py               ← Scans exposed database ports
│    ├── dorkeye_web.py               ← Local web interface
│    ├── sqli.py                      ← 5 Method sqli injection (105 payloads)
│    └── xss.py                       ← 4 Method xss injection (111 payloads)
│ /Templates/
│    ├── dorks_templates.yaml         ← Default template 
│    ├── example.yaml                 ← Example template
│    └── sql.yaml                     ← SQLi dork template
│ /.github/
│    ├── CODE_OF_CONDUCT.md           ← Community guidelines
│    ├── CONTRIBUTING.md              ← Contribution guide
│    ├── SECURITY.md                  ← Security policy
│    ├── FUNDING.yml                  ← Sponsor configuration
│    ├── pull_request_template.md     ← PR template
│     /ISSUE_TEMPLATE/
│        ├── bug_report.md            ← Bug report template
│        └── feature_request.md       ← Feature request template
│     /workflows/
│        └── claude-dorkeye.yml       ← GitHub Actions AI agent
│ /Docs/
│    ├── cli.md                       ← Full CLI reference (38 flags)
│    ├── wizard.md                    ← Interactive wizard guide
│    ├── sqli.md                      ← SQL injection reference
│    ├── xss.md                       ← XSS injection reference
│    ├── agents.md                    ← Agents pipeline guide
│    ├── crawler.md                   ← Adaptive crawler guide
│    ├── dbscan.md                    ← DB port scan guide
│    ├── fingerprinting.md            ← HTTP fingerprinting guide
│    ├── http_fingerprints.md         ← Fingerprint profiles reference
│    ├── webconsole.md                ← Web Console guide
│    ├── termux.md                    ← Termux / Android setup
│    ├── ish.md                       ← iSH / iOS setup (lite mode)
│    ├── windows.md                   ← Windows setup (install.bat)
│    ├── output_formats.md            ← Output formats guide
│    ├── file_categories.md           ← File categories guide
│    ├── dork_generator.md            ← Dork generator guide
│    ├── INSTALL.md                   ← Installation guide
│    ├── REPORT_HTML.md               ← HTML report guide
│    ├── USAGE.md                     ← Usage examples
│    ├── DDGSEE.md                    ← DuckDuckGo engine notes
│     /Dorks/
│        ├── Dorks_Collection_List.txt ← Curated dork collection
│        ├── JSON_exposure_dork.txt   ← JSON exposure dorks
│        └── sql_dorks.txt            ← SQLi-oriented dorks
│ /Screenshots/
│    ├── dev_logo_0.png
│    ├── dev_logo_1.png
│    ├── dev5_menu_h0.png
│    ├── dev5_menu_h1.png
│    ├── directsqltest.png
│    ├── directsqltesthtml.png
│    ├── sqlmultipletestfromfile.png
│    └── sqlmultipletestfromfilehtml.png
│ /Dump/                              ← runtime output, not versioned (see .gitignore)
│    ├── *.csv
│    ├── *.json
│    ├── *.txt
│    └── *.html

Example DorkEye Report

image image


WARNING

[!WARNING] DorkEye is provided for educational and authorized security-testing purposes only.

  • You are solely responsible for complying with all applicable laws and for obtaining explicit, written authorization before scanning, testing, or probing any system, domain, or network you do not own.
  • The authors and contributors accept no liability for misuse or for any damage resulting from the use of this tool.

📞 Contact


⭐ Support

  • Feel free to contribute. please do.
  • If you find DorkEye useful, please consider starring the repository 🌟
  • Buy me a coffee and keep the development caffeinated ☕

Sponsor DorkEye


📜 License

MIT License © 2026 I.C.W.T xPloits3c

Contributors

Typing SVG

关于 About

Automated Google Dorking tool. It generates and executes advanced search queries to locate exposed files. It also checks for vulnerabilities such as SQLi and XSS, and performs metadata analysis and extraction.
awesomebug-bountycybersecuritydorkdorking-listduckduckgoduckduckgo-dorkgoogle-dorkgoogle-dorkinghackerhackingosintosint-toolpentestingpython3reconsql-injectionvulnerabilitiesxss-injection

语言 Languages

Python99.0%
Shell0.8%
Batchfile0.1%

提交活跃度 Commit Activity

代码提交热力图
过去 52 周的开发活跃度
814
Total Commits
峰值: 87次/周
Less
More

核心贡献者 Contributors