dorks eye

-

DORKS EYE


Dorks Eye is a Python3-based tool designed to identify vulnerable links using Google Dorks. It systematically collects web page and application links from the internet, uncovering potentially sensitive information such as SQL queries, usernames, passwords, bank details, and more. Dorks Eye also offers the capability to save the results in a text-format file. This open-source tool is freely available on GitHub for anyone to use. 

WHAT ARE GOOGLE DORKS?


Google dorking, also known as Google hacking or Google-fu, is a technique used by individuals to perform advanced and specific searches on the Google search engine to find information that is not typically visible in regular searches. It involves using special search operators and queries to uncover hidden or sensitive data on websites and web applications. Google dorking can be used for various purposes, including:

  • Security Testing: Security professionals and ethical hackers use Google dorking to discover vulnerabilities and weaknesses in websites and web applications. By crafting specific queries, they can find exposed login pages, sensitive directories, error messages that reveal system information, and more. 
  • Information Gathering: Cybercriminals or malicious actors may also use Google dorking to find targets for cyberattacks. They can search for email addresses, passwords, and other confidential information that may have been inadvertently exposed online. 
  • Competitive Intelligence: Businesses and marketers can use Google dorking to gather information about their competitors. This might include identifying specific product listings, customer reviews, or pricing information that is not readily accessible through standard searches. 
  • Research: Researchers and journalists may employ Google dorking to uncover publicly available data that is not easily found through traditional search methods. This can include academic papers, government documents, and more. 

CHARACTERISTICS:

  • Python3-Based: Dorks Eye is developed in the Python3 programming language, making it accessible and easy to use on various platforms. 
  • Google Dorks: It specializes in utilizing Google Dorks, which are advanced search queries, to identify vulnerable links on the internet. 
  • Link Gathering: The tool gathers links to web pages and applications from the internet. These links can potentially lead to websites with security vulnerabilities. 
  • Sensitive Data Discovery: Dorks Eye is capable of revealing sensitive information, including SQL queries, usernames, passwords, bank details, and more. This functionality is crucial for security testing and auditing. 
  • Results Export: It supports saving the results in a text-formatted file. This feature enables users to document and analyze the discovered information. 
  • Open Source: Dorks Eye is an open-source tool, which means it is freely available for anyone to use and modify. It is hosted on GitHub, allowing for community contributions and updates. 
  • Security Testing: One of its primary use cases is security testing and vulnerability assessment, helping security professionals and ethical hackers identify potential weaknesses in websites and applications. 

INSTALLATION OF EYE DORKS:

  • Step1: Dorks Eye require python to run. Check if the python is installed on your kali or not. To check run the following command. 
  • python –version
 


  • Step3: Now, execute the following command to navigate to the tool's directory. You need to be inside this directory to run the tool. 
  • cd dorks-eye 

  • Step4: While inside the "dorks-eye" directory, you'll need to install a dependency for dorks-eye using the following command. 
  • sudo pip3 install -r requirements.txt 

  • Step5: Once all the dependencies has been installed run the following command to run the tool.  
  • python3 dorks-eye.py 

WORKING WITH DORK EYE ON KALI LINUX OS:

USAGE: TO FIND CONFIG FILES

  • Step1: Run the following command to start the tool 
  • python3 dorks-eye.py 
  • Step2: Given below query will give the list of links of vulnerable websites. 
  • indexof:backup/web.config 
  • Step3: We will be showcasing more than 10 vulnerable sites on the terminal, although we can display additional websites as well. 
  • Step4: Upon visiting the link, we have accessed the contents of the "conf" directory, which comprises of many different files. 








Comments

Post a Comment

Popular posts from this blog

CAREER TECHNOLOGY CYBER SECURITY INDIA PVT LTD.

-
Image
CAREER TECHNOLOGY CYBER SECURITY INDIA PVT  LTD. ISO 27001:2013, ISO 9001:2015 Certified  Company         INTERNATIONALLY AUTHORISED FOR CYBER FORENSICS, CYBER SECURITY, CYBER AUDIT TRAINING & EXAM CENTER BY MILE2 CYBER SECURITY United States First ATC of Mile 2 Cyber Security in Mumbai & MIRA-BHAYANDER / VASAI-VIRAR, Since JAN 2017. Offline as well as Online batches both are available. PG accommodation for students is available. Joi n   CAREER TECHNOLOGY CYBER SE CURITY INDIA  PVT LTD.   Today  To Start Your  Career In  Cyber Security. * OUR PROFESSIONAL DIPLOMA COURSES FOR  ALL  UNDERGRADUATE ,    GRADUATE ,  AND  WORKING PROFESSIONALS* __ ______________________________________________________________________ Why do you have to choose our institute? 1. Our Diploma is Authorised by the Indian Government as well as its full copyright & Trademark by ISO. IT will help you to add Extra Technical Skills in     Your Resume. Its Contains Full Practicals Knowledge from the In
Read more

Some Dark web Links

-
Image
Here are some of the Forum/Website to visit on dark web related to cybersecurity and hacking. Before visiting this website please follow the steps to be safe on the dark web/ Deepweb. Security Steps to be taken before opening the links: First of All, To browse these dark web forums, first close all active programs and applications in your computer then start Your NordVPN or any Paid and HQ VPN that have TOR service and select Onion Over VPN Server.  Now start Tor Browser and disable Javascript. In this way, you have created a completely secure and untraceable environment for you. If you think Tor Browser gives you full anonymity then you are wrong.  Only premium VPN services can provide you fully secure and untraceable environment. I have tried my hands on many premium VPN services, and I found NordVPN beats its competitor in all features. Disclaimer ⚠ : This info are shared for educational purpose only, neither the website nor creator hold any info or liable to any
Read more

Cyber Security Audits

-
Image
 Cyber Security Audits What is Cyber Security Audit?                 A cyber audit, at its core, refers to a systematic evaluation and assessment of an organization's information systems. This evaluation is designed to identify potential vulnerabilities, non-compliance with standards, and areas of improvement in both technology and processes, all with the aim of safeguarding digital assets against potential threats. Cyber audits delve deeply into the organization's technological infrastructure, scrutinizing hardware, software, networks, and even the practices and protocols that users and administrators follow. This in-depth review allows for a holistic understanding of the current cybersecurity posture of the entity and helps in crafting more robust and resilient digital environments. The rationale behind conducting a cyber audit often stems from both internal and external pressures. Internally, management recognizes the intrinsic value of their digital assets, understanding th
Read more