Google Dorks & Bug Bounty Recon Engine
Automated reconnaissance query composer generating 20+ specialized Google & GitHub dorks across exposed files (.env, .sql, .git, .bak), admin consoles (phpMyAdmin, Grafana, cPanel), cloud storage buckets (AWS S3, Azure Blob, GCP), and leaked API keys. 1-click launch in Google/GitHub.
Environment & .env Secrets
Detects exposed .env configuration files containing database and API credentials.
Exposed .git Source Repository
Finds publicly readable .git/HEAD or .git/config repositories exposing full source code.
Database SQL Dumps & Backups
Identifies raw SQL table dumps, database exports, and schema files.
Backup & Compressed Archives
Locates archived source code and website backup archives (.zip, .tar.gz, .bak, .old).
Application & Server Logs
Finds server access logs, error dumps, and debug journals with IP and token telemetry.
Web Server Configs (Nginx/Apache)
Discovers exposed nginx.conf, httpd.conf, web.config, and .htaccess files.
Admin Portals & Login Consoles
Locates administrative dashboards, manager logins, and internal consoles.
phpMyAdmin & Database Managers
Finds exposed database management interfaces accessible over public HTTP.
Grafana & Kibana Observability Panels
Exposes internal monitoring panels, metric collectors, and cluster telemetry.
Jenkins & CI/CD Pipeline Servers
Discovers continuous integration build servers with potential secret execution vectors.
AWS S3 Cloud Buckets
Searches Amazon Web Services S3 public endpoints for buckets belonging to domain.
Azure Blob Storage Containers
Finds Microsoft Azure blob storage endpoints containing brand or corporate assets.
Google Cloud Storage Buckets
Searches Google Cloud Platform storage buckets for publicly accessible objects.
DigitalOcean Spaces Storage
Locates DigitalOcean spaces asset stores associated with target brand.
Swagger & OpenAPI Specifications
Maps all backend REST endpoints via exposed OpenAPI schemas and interactive Swagger UI.
GraphQL Playgrounds & Consoles
Identifies GraphQL query endpoints, introspection tools, and Apollo explorers.
Leaked API Keys & Client Secrets
Finds exposed API authorization tokens, JWTs, and secret keys in HTML or JS bundles.
SQL Syntax Errors & Verbose Traces
Detects web applications exposing database syntax errors indicative of SQL injection.
PHP Fatal Errors & Stack Traces
Finds uncaught PHP runtime exceptions displaying absolute server paths and line numbers.
Directory Listing Enabled (Index of /)
Discovers Apache/Nginx web directories with directory listing index browsing enabled.
Confidential PDFs & Internal Memos
Discovers corporate documents tagged as strictly confidential, internal, or proprietary.
Excel Sheets with Passwords / PII
Finds spreadsheets containing salary bands, passwords, employee phone numbers, or PII.
GitHub Repository Passwords
Searches GitHub code for corporate passwords and master credentials matching domain.
Private SSH Keys & RSA Certificates
Finds leaked private SSH host keys and TLS certificates committed to GitHub.
AWS & Cloud Provider Keys
Identifies leaked AKIA Amazon Web Services access keys belonging to the organization.
All 17 Utility Tools (39+ Suite)