Dorks to Lines
End-to-end process for generating dorks, scraping links, and producing combos.
1. Make Your Dorks
- Choose a target niche (shopping, gaming, streaming, etc.).
- Build 50–100 seed keywords (2–4 words) in the language that matches your target.
- Create a text file for page types (for example
php,asp,aspx). Using onlyphpfocuses on more recent sites. - Create a text file for parameters (
id,product,article,collection, and so on). - Upload these files to the dashboard.
- Open the Dork Generator from the toolbox icon, keep Google enabled, and select your files.
- Choose how many dorks to generate (1,000 keywords usually produce 25–50k dorks) and run the generator. The result is saved to cloud storage.
2. Scrape Links
Non-Proxyless Plans
- Start a Scraper/Parser task.
- Thread suggestions:
- 4 vCPU / 8 GB RAM: 50–75 threads.
- 8 vCPU / 16 GB RAM: 100–200 threads.
- Timeout: keep 7,500 ms as a baseline.
- Attach your dorks and proxies.
- In settings, choose the search engines to use. Yahoo runs slower; consider running it separately.
- Start the task and save the filtered links once complete.
Proxyless Plans
- Same steps as above but skip the proxy list.
- Ensure only Google is selected in the settings.
- Run the task and save the filtered links.
3. Run the Vulnerability Scanner
- Gather at least 100k links for meaningful output.
- Create a Vulnerability scanner task.
- Thread suggestions:
- 4 vCPU / 8 GB RAM: 25–50 threads.
- 8 vCPU / 16 GB RAM: 75–100 threads.
- Timeout: 7,500–15,000 ms depending on your proxies.
- Load the filtered links (and proxies if you have them).
- Choose the vulnerability type (SQL is the default starting point) or leave the settings unchanged when you plan to dump databases.
- Save the results when the task finishes.
4. Dump the Databases
- Aim for at least 1,000 SQL-vulnerable links.
- Start a Dumper task.
- Choose your proxies (10–20 ISP/DC proxies recommended).
- Configure threads (50/50 main-secondary for 6–8 vCPU and 16 GB RAM, 25/25 for 4 vCPU and 8 GB RAM).
- Adjust preset options if you need something other than the default email:pass extraction.
- Save settings if you make changes, then run the task.
- Use the filter dropdown near Save results to show only dumped entries when reviewing.
5. Dehash the Lines
- Open the Dehasher module.
- Select the list saved from the Dumper (for example
[2000][website.com]). - Choose the correct layout (Item:Hash or Hash:Item).
- Start the task and wait for the results.
- If a list returns zero matches, move to the next one.
Tips
- Research trending topics in your target niche before generating keywords.
- Proxyless plans unlock Google scraping, which dramatically increases result volume.
- Monitor CPU and RAM usage. Reduce thread counts if utilisation spikes; increase them if it stays under 50%.
- You can run multiple tasks simultaneously, but lower the threads on each to stay within hardware limits.
- Residential proxies are fine for the Scraper/Parser. Use ISP/DC proxies for the Vulnerability scanner and Dumper.