uDork : Tool That Uses Advanced Google Search Techniques

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on.

It does NOT make attacks against any server, it only uses predefined dorks and/or official lists from exploit-db.com (Google Hacking Database: https://www.exploit-db.com/google-hacking-database).

Download & Install

$ git clone https://github.com/m3n0sd0n4ld/uDork
$ cd uDork
$ chmod +x uDork.sh
– Open the file “uDork.sh” and write inside this line:

$ ./uDork.sh -h

Steps To Obtain The Cookie & Configure The Cookie

  • Login to facebook.com
  • Now we will access www.messenger.com (It is the Facebook messaging app) and click on the “Continue as…” button.
  • Once we’re in, all we have to do is get the two cookies we need to make uDork work.
  • With firefox:
    • Right mouse button and click on “Inspect”.
    • Click on the “Network” tab and select any line that is in the domain “www.messenger.com“.
    • Now click on the “Cookies” tab, copy and paste the cookies “c_user” and “xs” into the “uDork.sh” file.

Thus: cookies=”c_user=XXXXXX; xs=XXXXXX;”

  • With Google Chrome
    • Right mouse button and click on “Inspect”.
    • Click on the tab “Application”, in the left column, look for the section “Cookies”, copy and paste the cookies “c_user” and “xs” with their value to the file “uDork.sh”.

Thus: cookies=”c_user=XXXXXX; xs=XXXXXX;”

Docker Version

  • Acknowledgement

Twitter: @interh4ck GitHub:(https://github.com/interhack86)

$ git clone https://github.com/m3n0sd0n4ld/uDork
$ cd uDork
$ docker build -t udork .
$ docker run –rm -it -e c_user=XXXXXXXXX -e xs=XXXXXXXXX udork -h

Use

  • Menu
  • Example of searching pdf files
  • Example of a search for a list of default extensions.
  • Example of searching routes with the word “password”
  • Dorks listing
  • Example of use Dorks Massive
R K

Recent Posts

M.E.A.T. – Pioneering Mobile Forensics With The Mobile Evidence Acquisition Toolkit

The Mobile Evidence Acquisition Toolkit designed by BlackStone Discovery. Developed to enhance digital forensics, this…

24 hours ago

Social Media OSINT Tools – A Comprehensive Guide

Here are some tools that you can use for Social Media OSINT. In the ever-evolving…

24 hours ago

Elenco Di Distro – Distribuzioni Windows, MacOS, Linux Per OSINT E Cybersecurity

Scoprite l'elenco completo delle distribuzioni di sistemi operativi per Windows, MacOS e Linux, specializzate in…

24 hours ago

Social Analyzer : A Cutting-Edge Tool For Social Media Investigations

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile…

24 hours ago

cURL For OSINT – Unlocking The Power Of Command Line Tools For Intelligence Gathering

cURL is a command line tool created in 1998 by Daniel Stenberg, a Swedish Developper/Programmer.Daniel Stenberg's…

24 hours ago

BeVigil CLI – A Comprehensive Guide To OSINT API Integration

bevigil-cli provides a unified command line interface and python library for using BeVigil OSINT API. BeVigil…

2 days ago