+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Automating Dorking and XSS Scanning (/showthread.php?tid=6291430)
Automating Dorking and XSS Scanning - Chorozon - Feb 4, 2025
Put this together for the lols it automates google dorking to find exposed log in / admin pages and SQL dumps and sensitive information.
don't think i had seen a automated dorking tool.
but i think this concept could actually be decent if attach XSS strike type capabilities or even brute forcing the URL log in list .
Drop any website vulnerability tools that i should take a look at
https://github.com/Chorozon666/Chad
RE: Automating Dorking and XSS Scanning - Chorozon - Sep 29, 2025
Updated
Chad VPS / RDP Dorking and Scanning Tool
Updated Tool
Chad-RDP is a Python-based tool for automated Google dorking and scanning, designed to discover Remote Desktop Protocol (RDP), Remote Desktop Services (RDS), and Virtual Private Server (VPS) resources. It uses predefined Google dorks to scrape URLs for RDP web interfaces, downloadable RDP files, RDP-related logs, and VPS control panels/login pages. The tool extracts IP addresses from URLs and performs lightweight nmap scans to identify operating systems and open ports (22, 80, 443, 3389) with services. It includes evasion techniques like user agent rotation and random delays to avoid detection. Results are saved to separate files for URLs and scan data. Intended for educational purposes only, it requires Selenium, python-nmap, and nmap for operation.
https://github.com/Chorozon666/Chad/blob/main/chad_rdp.py
RE: Automating Dorking and XSS Scanning - Hackers - Oct 2, 2025
Looks good, I like that you've automated the browsing for this (obviously).
I feel like a lot of people here have made comments that make me think they don't know they can do that.
RE: Automating Dorking and XSS Scanning - Chorozon - Oct 13, 2025
(Oct 2, 2025 09:44 AM)enki Wrote: Looks good, I like that you've automated the browsing for this (obviously).
I feel like a lot of people here have made comments that make me think they don't know they can do that.
Glad you like it , i had not seen anything similar
Dorks are underrated
RE: Automating Dorking and XSS Scanning - Hackers - Oct 13, 2025
(Oct 13, 2025 12:16 AM)Chorozon Wrote: Glad you like it , i had not seen anything similar
Dorks are underrated
They are - dorks are one of the best ways to discover systems without needing to do manual scans.
RE: Automating Dorking and XSS Scanning - Chorozon - Oct 13, 2025
(Oct 13, 2025 05:56 AM)enki Wrote: They are - dorks are one of the best ways to discover systems without needing to do manual scans.
The amount of just current credentials you can find is insane not to mention if you get creative
You should fork my code i would be interested to see what you do
RE: Automating Dorking and XSS Scanning - Hackers - Oct 14, 2025
(Oct 13, 2025 03:41 PM)Chorozon Wrote: The amount of just current credentials you can find is insane not to mention if you get creative
You should fork my code i would be interested to see what you do
I'm whitehat but will check it out!!
RE: Automating Dorking and XSS Scanning - Chorozon - Oct 14, 2025
(Oct 14, 2025 02:23 AM)enki Wrote: I'm whitehat but will check it out!!
The amount of times i have found sites working passwords on front facing dumps through dorks is crazy
Send them a email and let them know and they might pay you or hire you ))