A powerful browser-based reconnaissance tool for penetration testers, bug bounty hunters, and security researchers.
🚀 Live Demo • 📖 Documentation • 🤝 Contribute
- Overview
- Key Features
- How It Works
- Technology Stack
- Getting Started
- Use Cases
- Roadmap
- Contributing
- Legal Disclaimer
- License
- Author
SurfaceHunter automates the reconnaissance phase of security assessments by eliminating manual Google Dorking and parameter hunting. Built for efficiency and ease of use, it accelerates the discovery of hidden attack surfaces across web applications.
Reconnaissance is the foundation of every successful security assessment. Instead of manually crafting hundreds of Google queries, SurfaceHunter provides:
- ✅ 250+ Pre-built Google Dorks across 24+ vulnerability categories
- ✅ OWASP Top-25 Parameter Discovery with 150+ high-risk patterns
- ✅ Zero Configuration — Works directly in your browser
- ✅ Bug Bounty Optimized — Professional recon workflow
- ✅ Educational Resource — Learn OSINT & reconnaissance techniques
⚠️ Note: This tool performs reconnaissance only. It does NOT exploit vulnerabilities.
Discover hidden assets with 250+ curated Google Dorks covering:
24+ Vulnerability Categories (Click to expand)
- 🔐 Admin & Login Panels
- 💉 SQL Injection (SQLi)
- 🎯 Cross-Site Scripting (XSS)
- 📁 Local File Inclusion (LFI)
- 🌐 Server-Side Request Forgery (SSRF)
- ↪️ Open Redirect
- 💾 Backup & Configuration Files
- 🗄️ Exposed Databases
- 🔌 API Endpoints & Documentation
- ☁️ Cloud Storage Buckets (AWS S3, Azure, GCP)
- 🔧 Git Repositories & Version Control
- 📂 Directory Listings
- 🔌 WordPress Security Issues
- 🐛 Debug & Error Pages
- 🔑 Sensitive Files (
.env,.log,.bak,.sql) - 📊 Analytics & Tracking Scripts
- 🎫 Session Tokens & Credentials
- 📱 Mobile App Endpoints
- 🔐 Authentication Bypass Vectors
- And many more...
Hunt vulnerable parameters with 150+ high-risk patterns mapped to:
| Vulnerability Type | Example Parameters |
|---|---|
| 🌐 SSRF | url=, uri=, path=, dest= |
| 📁 LFI | file=, document=, folder=, pg= |
| 💉 SQL Injection | id=, user=, product=, cat= |
| ↪️ Open Redirect | redirect=, return=, next=, goto= |
| 🎯 XSS | q=, search=, keyword=, query= |
| ⚡ RCE | cmd=, exec=, command=, ping= |
- Severity Classification: 🟢 Low • 🟡 Medium • 🟠 High • 🔴 Critical
- One-Click Search: Automated Google query execution
- Copy-Paste Ready: Instant query generation
- Cyber-Themed UI: Professional, hacker-aesthetic interface
- Real-Time Results: No backend, no delays
- ✅ No Backend Required — Pure client-side JavaScript
- ✅ No API Keys Needed — Direct browser execution
- ✅ Privacy First — Zero data collection
- ✅ Instant Deployment — GitHub Pages compatible
- ✅ Cross-Platform — Works on any modern browser
graph LR
A[Enter Target Domain] --> B[Select Recon Module]
B --> C[Google Dork / OWASP Params]
C --> D[Generate Queries]
D --> E[Execute Search]
E --> F[Manual Testing]
Example: testphp.vulnweb.com
Choose from:
- 🔍 Google Dork Categories (Admin Panels, SQLi, XSS, etc.)
- 🛡️ OWASP Parameter Scanner (SSRF, LFI, Open Redirect, etc.)
SurfaceHunter generates optimized Google queries:
site:example.com inurl:login
site:example.com inurl:id=
site:example.com filetype:env
site:example.com inurl:admin intitle:"login"
Use discovered assets with:
- 🔧 Burp Suite — Intercept & modify requests
- 🌐 Browser DevTools — Analyze responses
- 💉 Payload Injection — Test for vulnerabilities
- 🧪 Business Logic Testing — Manual verification
| Technology | Purpose |
|---|---|
| HTML5 | Semantic structure & accessibility |
| CSS3 | Cyberpunk UI, neon effects, animations |
| Vanilla JavaScript | Dynamic rendering & automation |
- 🎨 Google Fonts — Orbitron, JetBrains Mono
- 🎭 Font Awesome — Professional iconography
- 🌌 Canvas API — Animated Matrix-style background
Google Search Operators:
site: # Restrict to specific domain
inurl: # Search within URL
intitle: # Search page titles
filetype: # Find specific file types
OWASP Testing Guide Integration:
- Parameter fuzzing patterns
- Common vulnerability vectors
- Real-world bug bounty techniques
-
Visit the Live Demo
https://dharmendrastm.github.io/GoogleDork/ -
Enter Your Target Domain
example.com -
Start Hunting
- Select a dork category
- Click "Search Google"
- Analyze results
# Fork this repository
git clone https://github.com/dharmendrastm/GoogleDork.git
cd GoogleDork
# Enable GitHub Pages
# Settings → Pages → Source: main branch
# Your instance will be live at:
# https://yourusername.github.io/GoogleDork/# Clone the repository
git clone https://github.com/dharmendrastm/GoogleDork.git
cd GoogleDork
# Open in browser
open index.html
# or
python -m http.server 8000- Accelerate reconnaissance phase
- Discover forgotten subdomains
- Find exposed admin panels
- Identify configuration errors
- Uncover hidden endpoints
- Hunt vulnerable parameters
- Discover sensitive file exposures
- Optimize recon workflow
- Learn OSINT techniques
- Understand Google Dorking
- Practice reconnaissance methodology
- Build portfolio projects
- Initial access research
- Target profiling
- Asset discovery
- Attack surface mapping
- Wayback Machine Integration — Historical URL discovery
- Subdomain Enumeration — Automated subdomain finder
- Parameter Brute-Force — Custom wordlist support
- Export Functionality — CSV/TXT/JSON reports
- Recon Notes System — Built-in note-taking
- CVSS Integration — Severity scoring
- Dark Mode Toggle — UI customization
- Multi-Target Support — Batch domain scanning
- API Rate Limiting — Respect search quotas
- Custom Dork Builder — User-defined queries
- Browser extension version
- Mobile app (PWA)
- Integration with Burp Suite/OWASP ZAP
- Community dork database
- AI-powered query optimization
Contributions make the open-source community thrive! Here's how you can help:
- ⭐ Star this repository — Show your support
- 🍴 Fork & improve — Add new features
- 🐛 Report bugs — Help us improve
- 💡 Suggest ideas — Feature requests welcome
- 📝 Improve docs — Better documentation
- Add new Google Dork categories
- Expand OWASP parameter lists
- UI/UX enhancements
- Performance optimizations
- Internationalization (i18n)
- Accessibility improvements
# 1. Fork the repository
# 2. Create your feature branch
git checkout -b feature/AmazingFeature
# 3. Commit your changes
git commit -m 'Add some AmazingFeature'
# 4. Push to the branch
git push origin feature/AmazingFeature
# 5. Open a Pull RequestThis tool is intended ONLY for:
- ✅ Educational purposes
- ✅ Authorized security testing
- ✅ Legal penetration testing engagements
- ✅ Bug bounty programs with explicit permission
DO NOT use this tool:
- Without explicit written authorization
- Against systems you don't own or have permission to test
- For any illegal activities
- To cause harm or disruption
- Unauthorized access is illegal in most jurisdictions
- You are solely responsible for your actions
- The developer assumes NO LIABILITY for misuse
- Always obtain written permission before testing
- Follow responsible disclosure practices
🔐 Use ethically. Test responsibly. Hack legally.
This project is licensed under the MIT License — see the LICENSE file for details.
MIT License
Copyright (c) 2025 Dharmendra Kumar
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software...
Penetration Tester | Security Researcher | OSINT Enthusiast
Also known as: dharmendrahacker • dharmendracyberhack
Have questions? Want to collaborate? Reach out!
📧 Professional inquiries: LinkedIn
🐛 Bug reports: GitHub Issues
💡 Feature requests: Discussions
- OWASP Foundation — For security testing guidelines
- Bug Bounty Community — For reconnaissance best practices
- Open Source Contributors — For making security accessible
SurfaceHunter — Hunt the Attack Surface, Not the Vulnerabilities
If this project helped you, consider giving it a ⭐
© 2025 SurfaceHunter | All Rights Reserved
Found a security issue? Please report responsibly via private disclosure.