Author: Trix Cyrus
Repo Copyright: © 2025 Trixsec Org (Not Dorks Copyright) Maintained: Yes

DorkHub is the security researcher's companion. It’s a comprehensive repository of Google dorks collected in one place, specifically designed to aid in security assessments and ethical hacking.

DorkHub is a comprehensive collection of Google dorks, categorized for various purposes in security research, ethical hacking, and penetration testing. The repository is designed to help security professionals and researchers uncover sensitive information, misconfigurations, and vulnerabilities exposed on the web.

DorkHub is organized into the following categories:

Dorks for discovering exposed AI and Machine Learning infrastructure (Jupyter notebooks, datasets).

Dorks for finding exposed API endpoints (REST, GraphQL) and leaked API keys.

Dorks for uncovering backlink information and SEO insights.

Specialized dorks for bug bounty hunters to discover vulnerabilities and misconfigurations.

Dorks that assist in identifying sites related to carding and fraud.

Dorks for finding exposed and misconfigured CCTV cameras.

Dorks for uncovering exposed CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions).

Queries tailored for Censys search engine to find exposed devices and services.

Dorks aimed at uncovering exposed cloud instances and configurations.

Content Management System (CMS) specific dorks for platforms like WordPress, Joomla, and Magento, etc.

Dorks focused on finding exposed cryptocurrency wallets, transactions, and related sensitive data.

All Dorks From Exploit Database (ghdb) Are Categorised Here

Dorks for finding exposed Firebase configurations and databases.

Dorks related to gaming platforms, servers, and forums.

Dorks for finding sensitive information exposed on GitHub repositories.

Dorks for uncovering exposed Kubernetes dashboards, APIs, and Docker registries.

Local File Inclusion (LFI) specific dorks to uncover vulnerable endpoints.

A collection of miscellaneous dorks that don’t fit into other categories but are valuable for various purposes.

Dorks for finding exposed movie-related data and streaming platforms.

Dorks for uncovering content and services on the dark web using Tor.

Dorks for uncovering sensitive data across various search engines.

Dorks tailored for the Shodan search engine to find exposed devices and services.

Dorks for finding vulnerabilities and sensitive data in online shopping platforms.

Dorks Related To Social Media Sites Like:

• Instagram
• Facebook
• Twitter (X)
• Linkedin

SQL Injection (SQLi) specific dorks for identifying vulnerable endpoints.

Dorks for discovering exposed information on VirusTotal.

Cross-Site Scripting (XSS) specific dorks to uncover vulnerable endpoints.

1. Clone the repository:

   git clone https://github.com/TrixSec/DorkHub.git

2. Navigate to the desired category folder to access the dorks.
3. Use the dorks in Google or the specified search engine for your research.

Contributions are welcome! If you have new dorks or improvements to existing ones, feel free to submit a pull request.

1. Collection of Dorks: The dorks provided in this repository are collected from various public sources across the internet. The repository owner does not claim ownership of these dorks.

2. Educational Purpose: This repository is intended solely for educational and research purposes in the field of cybersecurity. The dorks are shared to help security professionals and ethical hackers in their work.

3. No Liability for Misuse: The repository owner is not responsible for any misuse of the dorks. Any unauthorized or illegal use of these dorks is strictly prohibited and is the sole responsibility of the user.

4. Use at Your Own Risk: Users are advised to exercise caution and ensure they have proper authorization when using these dorks in security assessments. Unauthorized access to systems is illegal and unethical.