Dorkify for Google Dorking and Security Recon

Dorkify is a Python-based Google dorking tool that simplifies advanced search queries through a command-line interface. It uses Google search operators to locate information matching specific keywords, website titles, URLs, and domains. Security professionals can use these techniques during authorized reconnaissance to identify exposed resources and review a website’s public-facing information.

Google dorking relies on operators such as site:, intitle:, and inurl: to narrow search results. Dorkify packages several search functions into one tool, making it easier to perform targeted searches without manually constructing every query.

Dorkify Features and Search Options

Dorkify offers several search modes beyond standard Google searches. Its available options cover information lookup, media searches, and security-focused reconnaissance.

• Google and URL searches: Search for keywords and locate pages based on URL or title terms.
• Website reconnaissance: Use domain-specific searches to examine publicly indexed pages on a selected website.
• WordPress discovery: Search for WordPress-related pages and potentially exposed information.
• Credential-related searches: Look for publicly indexed username or password lists. Treat any exposed credentials as sensitive information.
• Web server and CCTV searches: Search for pages associated with web servers and camera systems that may be publicly exposed.
• FTP discovery: Search for pages that may reveal open FTP servers or directory listings.
• General information: Search for books, music, maps, weather, definitions, and stock information.

Search results do not prove that a system is vulnerable or that a service is accessible. Google only returns information it has indexed, and results can be outdated or inaccurate. Verify findings through authorized testing before treating them as security issues.

Installing Dorkify

Dorkify requires Python 3.6 or higher according to the original project instructions. Clone the repository and install its dependencies using the commands below.

git clone https://github.com/hhhrrrttt222111/Dorkify.git
cd Dorkify
python3 -m pip install -r requirements.txt

Using a virtual environment can help keep the project’s Python dependencies separate from other applications on your system.

python3 -m venv .venv
source .venv/bin/activate
python3 -m pip install -r requirements.txt

The activation command shown above is for Linux and macOS. On Windows, activate the environment with .venv\Scripts\activate.

Using Dorkify from the Command Line

Check the available commands before starting a search. The help output lists the supported modes and their corresponding options.

python3 dorkify.py --help

To launch the command-line interface, run:

python3 dorkify.py --cli

You can also run individual searches using the relevant command-line options. For example, the following commands demonstrate general searches and common Google operators:

# Search for a general keyword
python3 dorkify.py --search "network security"

# Search for a keyword in page titles
python3 dorkify.py --intitle "security policy"

# Restrict results to a specific domain
python3 dorkify.py --site example.com

# Search for a term in URLs
python3 dorkify.py --inurl "documentation"

These examples illustrate the intended options. Check the project’s help output if your installed version handles arguments differently.

Security Considerations for Google Dorking

Dorkify can support early-stage reconnaissance by helping security teams identify publicly indexed pages that deserve further review. For example, a website administrator may search their own domain for unintended directory listings, exposed documentation, or sensitive files indexed by search engines.

Use these searches only for systems you own or have explicit permission to assess. Do not attempt to access discovered cameras, FTP services, accounts, or confidential files without authorization. If a search reveals exposed credentials or private data, avoid downloading or sharing the material and report it through the organization’s approved security contact.

For additional reconnaissance techniques, see our guide to website OSINT tools and reconnaissance techniques. You can also review the Dorkify source repository for project files and installation instructions.