Dorker
![The image features the text "[oo]" in a bold, white, handwritten-style font against a solid blue background. The letters are slightly irregular, giving a casual and artistic feel to the design.](/media/store/open_source_applications/Dorker/dorker_logo_thumbnail_image.webp){kind=logo}
This software is provided strictly for educational and research purposes only. The authors and contributors shall not be held liable for any damages, legal issues, security breaches, or other consequences arising from the use or misuse of this software. Users are solely responsible for ensuring their activities comply with all applicable laws, regulations, and organizational policies. By using this software, you acknowledge that it is provided “as is,” without any warranties or guarantees of any kind, and you assume full responsibility for its use.
Dorker is a powerful open-source reconnaissance tool designed to automate the use of Google Dorks for identifying publicly accessible sensitive information related to a target. Whether searching by domain, personal names, company names, or events, Dorker streamlines the process of crafting and executing advanced search queries. It provides real-time progress feedback, automatically captures screenshots of search results, and includes stealth optimizations through headless browsing mode to avoid detection. These features make Dorker an essential tool for security researchers, penetration testers, and OSINT professionals.
Installation and Setup
Dorker is easy to install on Debian-based Linux distributions, including Kali and Debian. Pre-compiled .deb packages are available for direct download from the official GitHub repository, allowing quick deployment in any terminal environment. After downloading the appropriate package with curl, installation is completed using dpkg with superuser privileges. This simple setup process makes it convenient to integrate Dorker into security workflows, whether for scheduled scans or on-demand investigations.
Key Features and Modes
Dorker offers flexible search options tailored for a variety of reconnaissance scenarios. It supports both domain-based searches (e.g., example.com) and name-based searches (e.g., “John Doe”) using either Google or DuckDuckGo as the search engine. Advanced options include a headless mode (-hl) for stealthy, automated browsing and the ability to specify a custom GeckoDriver path (-gd). Combined with automatic screenshot capturing and clear progress indicators, these capabilities make Dorker highly effective for uncovering exposed files, misconfigured directories, and other valuable intelligence with minimal manual effort.
Practical Usage Examples
The Dorker command-line interface is simple yet versatile, accommodating a wide range of use cases. For example, a user can run a domain search with: dorker example.com or perform a targeted name-based search: dorker "John Doe". To operate stealthily and avoid detection by search engines, headless mode can be enabled: dorker example.com -hl. For more complex setups, a custom GeckoDriver path can be specified: dorker example.com -gd /home/user/geckodriver. These examples demonstrate Dorker’s ability to streamline reconnaissance tasks, from quick OSINT checks to comprehensive information gathering.
