DorkEye is an automated OSINT DORKING TOOL that discovers exposed web assets through intelligent search queries.
It combines a dork generator driven by YAML templates (soft / medium / aggressive modes), an SQL and XSS testing module, a 13-step autonomous analysis pipeline, an adaptive recursive crawler, and a database port scanner.
It can identify indexed directories, sensitive files, admin panels, databases, backups, configuration files, credentials, PII data, subdomains, and technology fingerprints — efficiently and with stealth controls.
"Update:"
sudo apt update
sudo apt install -y python3 python3-pip python3-venv git
"Git Clone:"
git clone https://github.com/xPloits3c/DorkEye.git
cd DorkEye
"Create environment:"
python3 -m venv dorkeye_env
"Activate environment:"
source dorkeye_env/bin/activate
"Install requirements:"
pip install -r requirements.txt
"WIZARD MODE:"
python3 dorkeye.py --wizard
"Help:"
python3 dorkeye.py -h
"Deactivate environment:"
deactivate
"Remove environment:"
rm -rf dorkeye_env
🔹 # WIZARD Mode
python3 dorkeye.py --wizard
🔹 # Basic search
python3 dorkeye.py -d "inurl:admin" -o results.txt
🔹 # Dork Generator + Detection
python3 dorkeye.py --dg=sqli --mode=aggressive --sqli --stealth -o report.json
🔹 # SQLi + stealth
python3 dorkeye.py -d "site:example.com .php?id=" --sqli --stealth -o scan.html
🔹 # Fast scan
python3 dorkeye.py -d dorks.txt --no-analyze -c 200 -o fast_results.csv
🔹 # Direct SQLi test on a URL
python3 dorkeye.py -u "https://target.com/page.php?id=1" --sqli --stealth -o result.json
🔹 # Re-process a saved result file
python3 dorkeye.py -f Dump/results.json --sqli --xss --dbscan --analyze -o retest.html
🔹 # Web Console
python3 dorkeye.py --ui
DorkEye/
│ ├── dorkeye.py ← DorkEye Engine
│ ├── requirements.txt
│ ├── http_fingerprints.json
│ ├── README.md
│ /Tools/
│ ├── dork_generator.py ← Dork Generator Queries
│ ├── dorkeye_agents.py ← Agents v3.1 pipeline
│ ├── dorkeye_patterns.py ← Shared pattern library
│ ├── dorkeye_analyze.py ← Standalone analysis CLI
│ ├── db_portscan.py ← Scans exposed database ports
│ ├── dorkeye_web.py ← Local web interface
│ ├── sqli.py ← 5 Method sqli injection (105 payloads)
│ └── xss.py ← 4 Method xss injection (111 payloads)
│ /Templates/
│ ├── dorks_templates.yaml
│ ├── sql.yaml
│ └── example.yaml
│ /.github/
│ ├── CODE_OF_CONDUCT.md
│ ├── CONTRIBUTING.md
│ ├── SECURITY.md
│ ├── pull_request_template.md
│ /ISSUE_TEMPLATE/
│ ├── bug_report.md
│ └── feature_request.md
│ /workflows
│ └── claude-dorkeye.yml
│ /Dump/
│ ├── *.csv
│ ├── *.json
│ ├── *.txt
│ └── *.html
│ /Docs/
│ ├── cli.md
│ ├── wizard.md
│ ├── sqli.md
│ ├── agents.md
│ ├── crawler.md
│ ├── fingerprinting.md
│ ├── output_formats.md
│ ├── file_categories.md
│ ├── dork_generator.md
│ ├── INSTALL.md
│ ├── REPORT_HTML.md
│ ├── USAGE.md
│ └── DDGSEE.md
│ /Screenshots/
│ ├── img0
│ └── img1
DorkEye is provided for educational and authorized security-testing purposes only. You are solely responsible for complying with all applicable laws and for obtaining explicit, written authorization before scanning, testing, or probing any system, domain, or network you do not own. The authors and contributors accept no liability for misuse or for any damage resulting from the use of this tool.
If you find DorkEye useful, please consider starring the repository 🌟 —
MIT License © 2026 I.C.W.T xPloits3c