Google Dorking

Automate the process of google dorking searches in order to detect leaked data.

Data Enrichment & Threat Intelligence · Google Dorking

Details

IDGoogle Dorking
ProviderOpen Source
CategoryData Enrichment & Threat Intelligence
From Version6.2.0
Docker Imagedemisto/python3:3.12.8.3296088
Supported ModulesAgentix XSIAM

README

Automate the process of google dorking searches in order to detect leaked data.

Configure Google Dorking in Cortex

Parameter Description Required
Search engine ID   True
API Key   True
File Types to Search Comma separated file types that’ll be searched and downloaded. True
Search Keywords Comma separated keywords to look for in the files. False
Sites To Search Provide a single or comma separated list of sites from which to perform the search on. True
Fetch incidents   False
Incident type   False
Maximum number of incidents per fetch   False
First fetch time   False
Trust any certificate (not secure)   False
Use system proxy settings   False
Incidents Fetch Interval   False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

google-dorking-search


Use the google search engine to search a query.

Base Command

google-dorking-search

Input

Argument Name Description Required
after Search after this date. Expected format: YYYY-MM-DD. Optional
file_types Comma separated file types that’ll be searched and downloaded. Optional
keywords Comma separated keywords to look for in the files. Optional
urls Provide a single or comma separated list of sites from which to perform the search on. Optional

Context Output

There is no context output for this command.

Command Example

``````

Human Readable Output

Configuration parameters

  • apiKey — Search engine ID (required)
  • file_types — File Types to Search (required)
  • keywords — Search Keywords
  • urls — Sites To Search (required)
  • isFetch — Fetch incidents
  • incidentType — Incident type
  • max_fetch — Maximum number of incidents per fetch
  • first_fetch — First fetch time
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • incidentFetchInterval — Incidents Fetch Interval

Commands (1)

  • google-dorking-search

    Use the google search engine to search a query.

## Google Dorking
- Automate the process of google dorking searches in order to detect leaked
  data.