atdork 1.3.6

Professional dorking ddgs metasearch OSINT tool

AtDork – Professional OSINT Dorking Tool

AtDork is a powerful, ethical OSINT tool that performs advanced search queries (Google Dorks) across multiple search engines simultaneously. Designed for security researchers, penetration testers, and bug bounty hunters, it automates the discovery of exposed documents, vulnerable parameters, misconfigured servers, and other sensitive information available on the public web.

---

Why AtDork?

• 🚀 Blazing fast – Multi‑threaded batch processing with configurable concurrency.
• 🔍 Multi‑engine – Queries DuckDuckGo, Google, Bing, Startpage, Yandex, Yahoo, and more.
• 🛡️ Anonymous – Built‑in proxy rotation, Tor integration, strict mode to prevent IP leaks.
• 🧹 Clean results – Automatic spam filtering, URL validation, and deduplication.
• 📊 Professional output – Export to JSON, CSV, TXT; SQLite database for history and resume.
• 🎯 Smart filtering – Vulnerability signature detection for WordPress, Joomla, SQLi, and more.
• 📝 Template system – Curated YAML‑based dork collections for instant productivity.
• ⚙️ Highly configurable – 47 CLI flags to control every aspect of your search.

---

Installation

From PyPI (Recommended)

pip install atdork

From Source

git clone https://github.com/amnottdevv/atdork.git
cd atdork
pip install .

Verify Installation

atdork --version
# Output: atdork 1.3.3

---

Quick Start

1. Your First Search

atdork -q "site:gov filetype:pdf" -r 10

This finds PDF files on government websites and displays the top 10 results.

2. Save Results to a File

atdork -q "intitle:index.of mp3" -r 20 --format json -o music.json

3. Batch Processing

Create a file dorks.txt:

site:edu filetype:xls
inurl:admin login
intitle:"index of" "backup"

Run them all at once:

atdork --batch-file dorks.txt -r 30 --format csv -o results.csv

4. Search with Proxy (Anonymous)

atdork -q "confidential filetype:docx" --proxy "http://user:pass@proxy:8080" --strict

---

Detailed Usage

Single Query

atdork -q "inurl:product.php?id=" -r 50 --backend google --region uk-en --safesearch off

Flag	Purpose
-q	Your dork query
-r	Number of results (max 100)
--backend	Search engine: google, bing, duckduckgo, startpage, yandex, auto
--region	Region code: us-en, uk-en, de-de, ru-ru, etc.
--safesearch	on, moderate, off

Batch Processing with Multi‑Threading

atdork --batch-file dorks.txt -r 40 --concurrency 5 --delay 2 --format json -o batch_results.json

Flag	Purpose
--batch-file	Text file with one dork per line
--concurrency	Number of parallel threads (1‑10)
--delay	Seconds between requests (avoid rate limits)
-o	Save all results to a single file
--output-dir	Save each query result as a separate file

Template Dorks (Pre‑Built)

List available templates:

atdork --list-templates

Use a template:

atdork --template sqli --target example.com -r 30

Combine multiple templates with custom queries:

atdork --template sqli,wordpress,exposed_config -q "site:gov filetype:pdf" -r 25

Preview what a template will do:

atdork --template login_panels --preview

Run only specific dorks from a template:

atdork --template sqli --select 1,3,5 -r 20

Flag	Purpose
--template	Template name(s), comma‑separated
--target	Domain to substitute {target} in template dorks
--select	Run specific dork numbers from template
--list-templates	Show all available templates
--preview	Show dorks without executing
--template-path	Custom template folder

Proxy & Anonymity

# Single proxy
atdork -q "target" --proxy "http://user:pass@host:8080"

# Multiple proxies (comma‑separated)
atdork -q "target" --proxy "http://p1:8080,socks5://p2:1080"

# From file
atdork -q "target" --proxy-file proxies.txt

# Tor integration
atdork -q "target" --tor --strict

# Strict mode (fail if all proxies down)
atdork -q "target" --proxy-file proxies.txt --strict

# Proxy management
atdork -q "target" --proxy-file proxies.txt --proxy-cooldown 120 --max-failures 3

Proxy file format (proxies.txt):

# HTTP proxies
http://user:[e-mail]:3128
http://user:[e-mail]:3128

# SOCKS proxies
socks5://res1.provider.com:1080
socks5h://res2.provider.com:1080

# Comments with # are ignored

Vulnerability Filtering

# Basic WordPress detection
atdork -q "inurl:wp-content" -r 30 --filter-vuln wordpress

# Link‑only filter (only matches URLs)
atdork -q "site:example.com" --filter-vuln wordpress-link

Create your own wordlist files in wordlists/ folder:

# wordlists/myplatform.txt
wp-content
wp-admin
wp-includes

Resilience & Rate Limiting

# Enable circuit breaker & backend fallback
atdork --batch-file dorks.txt --resilient

# Adaptive delay based on backend response
atdork --batch-file dorks.txt --adaptive-delay

# Combined
atdork --batch-file dorks.txt --resilient --adaptive-delay --concurrency 5 --delay 2

Output Validation

# Disable all filtering (keep raw results)
atdork -q "test" --no-validate

# Strict filtering (require non‑empty snippet)
atdork -q "test" --strict-filter

# Granular control
atdork -q "test" --validate-url only --validate-title 10 --validate-desc 50 --validate-spam true

Database & History

# Resume interrupted batch
atdork --resume

# View search history
atdork --history

# Export database to JSON/CSV
atdork --export-db all_results.json

# Disable duplicate URL detection
atdork -q "test" --no-dedup

Advanced Options

# Custom User‑Agent
atdork -q "test" --user-agent "MyBot/1.0"

# Disable SSL verification (not recommended)
atdork -q "test" --no-verify

# Disable backend fallback
atdork -q "test" --no-fallback-backends

# Debug mode (verbose logging)
atdork -q "test" --debug

# Custom log file
atdork -q "test" --log-file my_scan.log

# Show results during batch
atdork --batch-file dorks.txt -v

---

Complete Flag Reference

Flag	Description	Default
-q, --query	Search dork query
-r, --max-results	Maximum results (1‑100)	20
--batch-file	File with one query per line
--batch-separator	Separator for inline queries	;
-o, --output	Save results to file
--output-dir	Save each query to separate file
--format	Output format: txt, json, csv	txt
-v, --verbose	Show results in batch mode
--no-snippet	Hide snippets in terminal
--template	Load dork template(s)
--target	Domain for template substitution
--select	Select specific dorks from template
--list-templates	List available templates
--template-path	Custom template directory
--preview	Preview template dorks
--region	Search region	us-en
--safesearch	on, moderate, off	moderate
--timelimit	d, w, m, y
--backend	Search engine(s)	auto
--user-agent	Custom User‑Agent	auto‑rotate
--timeout	Request timeout (seconds)	10
--retries	Retry attempts on failure	2
--delay	Delay between requests (seconds)	0
--proxy	Comma‑separated proxy URLs
--proxy-file	File with proxy URLs
--tor	Use Tor SOCKS5 proxy
--strict	Fail if all proxies down
--proxy-cooldown	Cooldown after proxy failure (seconds)	60
--max-failures	Remove proxy after N failures	3
--concurrency	Parallel threads for batch	1
--resilient	Enable circuit breaker & fallback
--adaptive-delay	Enable adaptive rate limiting
--ip-guard	Enable IP leak detection (requires --strict)
--exec	Execute command on each result URL ({} = URL)
--exec-on-vuln	Execute command only on vulnerable results
--exec-parallel	Parallel processes for --exec	1
--exec-timeout	Timeout per --exec command (seconds)	30
--no-validate	Disable spam filtering
--strict-filter	Strict validation
--validate-url	URL validation mode	all
--validate-title	Minimum title length	5
--validate-desc	Minimum description length	10
--validate-spam	Enable spam detection	true
--filter-vuln	Vulnerability platform filter
--no-fallback-backends	Disable backend fallback
--no-verify	Disable SSL verification
--log-file	Log file path	atdork.log
--db-path	Database path	atdork.db
--resume	Resume pending queries
--history	Show search history
--no-dedup	Disable URL deduplication
--export-db	Export database to file
--config	YAML config file path
--interactive	Interactive mode
--debug	Enable debug logging
--version	Show version and exit

---

Real‑World Use Cases

Bug Bounty Reconnaissance

atdork --template sqli,xss,lfi --target target.com --proxy-file proxies.txt --strict --format json -o recon.json

Exposed Database Credentials

atdork -q 'filetype:env "DB_PASSWORD"' -r 50 --no-validate -v

Finding Admin Panels

atdork -q 'intitle:"admin panel" inurl:login' -r 30 --backend google --region uk-en

WordPress Vulnerability Scanning

atdork -q "inurl:wp-content site:example.com" -r 40 --filter-vuln wordpress -v

Automated Weekly Monitoring

# Add to crontab (Linux/macOS)
0 6 * * 1 cd /path/to/atdork && atdork --batch-file weekly_dorks.txt --format csv --output-dir /reports/$(date +\%Y-\%W)/

Real‑World Use Cases for resilient

1. Bug Bounty Reconnaissance with Resilience

atdork --template sqli,xss,lfi --target target.com \
  --proxy-file proxies.txt --strict --resilient --adaptive-delay \
  --concurrency 3 --format json -o recon.json

• Resilience ensures that if Google rate‑limits you, AtDork automatically switches to Startpage without losing progress.
• Adaptive delay prevents triggering new rate limits by learning the safe request speed.
• IP Guard can be added to immediately halt if your real IP is ever exposed.

2. Stealth Monitoring of a Government Domain

atdork -q "site:gov.in filetype:pdf confidential" -r 30 \
  --tor --strict --resilient --ip-guard \
  --delay 3 --validate-title 10 -v

• Tor + strict ensures complete anonymity.
• IP Guard monitors every few requests and will stop the scan the moment a leak is detected, preventing deanonymization.
• Resilience handles Tor circuit failures by waiting and retrying instead of crashing.

3. Automated Weekly OSINT Report for a Client

atdork --batch-file weekly_dorks.txt \
  --proxy-file premium_proxies.txt --strict --resilient --adaptive-delay \
  --concurrency 5 --format csv --output-dir /reports/2026-W25/ \
  --exec "echo {} >> all_urls.txt"

• Resilience + Adaptive Delay allows the batch to run unattended overnight. If a proxy dies or a backend blocks you, the job continues without intervention.
• Post‑processing (--exec) collects every discovered URL into a single file for further analysis.

4. Rapid WordPress Vulnerability Scan

atdork -q "inurl:wp-content" -r 40 \
  --filter-vuln wordpress \
  --resilient \
  --exec-on-vuln "wpscan --url {} --enumerate p" \
  --exec-parallel 2 --exec-timeout 60

• Only results matching WordPress signatures are kept.
• Post‑processing on vulnerable results triggers a WPScan scan on each target, automating vulnerability assessment.
• Resilience guarantees that the scan finishes even if search engines are unstable.

5. Detecting Exposed Database Credentials with Immediate Alert

atdork -q 'filetype:env "DB_PASSWORD"' -r 50 \
  --no-validate --resilient --ip-guard --strict \
  --proxy-file proxies.txt \
  --exec "curl -X POST -d 'url={}' https://hooks.slack.com/your-webhook"

• No validation ensures we capture raw, potentially messy results that may contain real passwords.
• IP Guard makes sure the proxy is never bypassed.
• Every valid result is sent to Slack instantly using --exec.

6. Large‑Scale Multi‑Target Recon Using Templates

atdork --template sqli,xss,exposed_config,login_panels \
  --target target1.com --target target2.com --target target3.com \
  --proxy-file proxies.txt --strict --resilient --adaptive-delay \
  --concurrency 5 -v -o multi_target.json

• Multiple targets are scanned in one session.
• Resilience handles the inevitable rate limits and blocks when scanning several domains aggressively.
• Verbose output shows results in real time so you can stop early if you already found what you need.

7. Continuous Dark Web / Sensitive Data Search

atdork -q "site:pastebin.com password" -r 20 \
  --tor --strict --resilient --ip-guard \
  --delay 5 --no-dedup \
  --exec "echo {} >> pastebin_urls.txt"

• Tor + IP Guard is essential for sensitive searches.
• No dedup ensures you see every paste, even if the URL has appeared before.
• High delay prevents Tor circuits from being overloaded.

---

Configuration File

Create atdork.yaml for persistent settings:

max_results: 30
region: "uk-en"
safesearch: "off"
delay: 1.0
format: "json"
output_dir: "./results"
proxy_file: "proxies.txt"

AtDork automatically loads this file from the current directory. CLI flags override YAML values.

---

Troubleshooting

Problem	Solution
Rate limited (429)	Add --delay 3, use --proxy-file, or enable --adaptive-delay
No results	Try different --backend (e.g., startpage, yandex) or --region
Proxy fails	Check format: scheme://user:pass@host:port
Batch stuck	Reduce --concurrency, add --timeout 15, enable --resilient
Install error	Use pip install -e . for development mode
IP leak with --strict	Enable --ip-guard to detect leaks early; use SOCKS5h proxies
All backends exhausted	Enable --resilient to activate backend fallback chain
Too many proxy failures	Increase --proxy-cooldown to 120, lower --max-failures, add more proxies
Results full of spam	Enable --strict-filter or set --validate-title 10 --validate-desc 50
Command not found: atdork	Run pip install . from project root, or use python atdork.py
Post‑process hangs	Set --exec-timeout 10 to limit each command, reduce --exec-parallel
Database locked	Close other AtDork instances, delete atdork.db and restart
Tor not working	Ensure Tor service is running: systemctl start tor (Linux) or launch Tor Browser

---

Project Structure

atdork/
├── atdork.py                    # CLI entry point
├── core/
│   ├── scanner.py               # Search engine integration
│   ├── batch_runner.py          # Batch execution (seq/parallel, resilience, rate‑limiting)
│   ├── proxy_manager.py         # Proxy pool management (rotation, cooldown, strict)
│   ├── filter_vuln.py           # Vulnerability signature filtering
│   ├── template_dork.py         # YAML template loader
│   ├── database.py              # SQLite storage, resume, history, export
│   ├── config.py                # YAML configuration loader (atdork.yaml)
│   ├── logger.py                # Rotating file + console logging
│   ├── post_processor.py        # Execute external commands on results (--exec)
│   ├── user_agents_managements.py # User‑Agent rotation pool
│   └── case/
│       ├── circuit_breaker.py   # Prevent hammering dead backends/proxies
│       ├── ip_guard.py          # Detect real‑IP leaks (--ip-guard)
│       ├── error_classifier.py  # Classify exceptions into actionable categories
│       ├── fallback_manager.py  # Decide when to switch backend/proxy
│       ├── retry_handler.py     # Exponential backoff with jitter
│       ├── adaptive_delay.py    # Per‑backend dynamic delay
│       ├── recovery_strategy.py # Map error categories to recovery actions
│       └── stats.py             # Collect & display runtime statistics
├── lib/
│   ├── display.py               # Terminal output formatting (banner, results)
│   ├── storage.py               # File export (TXT/JSON/CSV)
│   └── validator.py             # Spam/invalid result filtering
├── wordlists/                   # Vulnerability signatures & templates
├── tests/                       # 114 unit tests (pytest)
├── pyproject.toml               # Package configuration
└── README.md

---

Ethical Use & Disclaimer

AtDork is intended for legal, authorized security testing only.
You must have explicit written permission from the target owner before scanning.

Prohibited uses:

• Unauthorized access to systems or data
• Harvesting information in violation of laws
• Any activity that infringes on privacy or intellectual property rights

The developer assumes no liability for misuse of this software.

---

License

Distributed under the MIT License. See LICENSE for details.

---

Contact & Support

• GitHub: github.com/amnottdevv/atdork
• Issues: github.com/amnottdevv/atdork/issues
• PyPI: pypi.org/project/atdork

If you find this tool useful, consider leaving a ⭐ on GitHub!