volkansah / the_extractor.py

The Extractor is a Python script that extracts Google dorks from the official Google Hacking Database (GHDB) XML file and saves them in a CSV file. The script only extracts dorks that contain the "inurl:" operator because they are more specific and useful for targeted web scanning.

The Extractor (GHDB) lite

The Extractor is a Python script that extracts Google dorks from the official Google Hacking Database (GHDB) and saves them in a CSV-file. The script only extracts dorks that contain the "inurl:" operator because they are more specific and useful for targeted web scanning.

Warning:

The Extractor script is intended for educational and ethical purposes only. The extracted dorks should only be used for ethical hacking and web security testing. The authors of The Extractor do not condone illegal activities and are not responsible for any misuse of the extracted dorks. Always use the extracted dorks responsibly and in accordance with the law.

This script is part of a larger collection and was created to be used with caution. Some functions have been removed to prevent any malicious attacks, but it remains a simple yet powerful script that can be used for bad sites.

Prerequisites

The script has been tested on Linux/Unix Bash-installed systems.

• Python 3.x
• requests module (you can install it via pip: pip install requests)
• CSV module (built-in module in Python)
• uuid module (built-in module in Python)

Usage

• Download the GHDB XML file from the official GHDB repository: https://gitlab.com/exploit-database/exploitdb/-/tree/main/
• Save the file in the same directory as the Python script.

Run the script:

python extractor.py 

or

python3 extractor.py

• The script will check if an Internet connection is available. If yes, it will download the latest GHDB XML file. If no, it will use the local file (if available) or ask if you want to create a local copy of the GHDB XML file.
• The script will extract the dorks and save them in the specified output format (CSV by default) in the same directory as the script.

Note

• The Extractor script only extracts dorks that contain the "inurl:" operator because they are more specific and useful for targeted web scanning.
• The Extractor (Nemesis Version) is now included in PoisonIvory (see version below)

              .__                      .__                          
______   ____ |__| __________   ____   |__| __  _____________ ___.__.
\____ \ /  _ \|  |/  ___/  _ \ /    \  |  \  \/ /  _ \_  __ <   |  |
|  |_> >  <_> )  |\___ (  <_> )   |  \ |  |\   (  <_> )  | \/\___  |
|   __/ \____/|__/____  >____/|___|  / |__| \_/ \____/|__|   / ____|
|__|  nemesis v.2.5.23 \/           \/   © 2008-2023 Volkan Sah   \/   

Disclaimer

The authors of The Extractor do not condone illegal activities and are not responsible for any misuse of the extracted dorks. Always use the extracted dorks responsibly and in accordance with the law.

Copyright

• VolkanSah on Github
• Developer Site
• Become a 'Sponsor'
• Source of this resposerity

License

This project is licensed under the MIT - see the LICENSE file for details.