Dork Factory is a cross-platform, interactive command-line tool designed to generate high-quality Google and Yandex dorks for Passive Recon & Discovery.
It focuses exclusively on search engine query manufacturing, helping security researchers uncover publicly indexed information without actively interacting with targets.
No scanning. No fuzzing. No crawling. Just clean, structured, search-engine–ready recon.
- Interactive CLI (no flags required)
- Google & Yandex dork generation
- Recon category selection
- Preset profiles (Bug Bounty, OSINT, CTF, etc.)
- Advanced filtering & exclusions
- Clean, colorized output
- Exportable results
- Fully passive & ethical
- Windows · Linux · macOS compatible
Running the tool without arguments launches the interactive interface:
python dorkfactory.pyThis mode allows full usage without memorizing flags, using a menu-driven workflow.
Define one or multiple targets, including wildcards and subdomains.
Supported:
example.com*.example.com- Multiple targets
- Exclusions
Choose which search engine(s) to generate dorks for:
- Yandex
- Both
Select which recon categories to include in the generation process.
Examples:
- Panels & Authentication
- Sensitive Files & Backups
- Errors & Debug
- APIs & Endpoints
- OSINT & Metadata
Profiles automatically configure engines and categories for common use cases.
Available profiles include:
bugbountyosint-companyctfwebapp-basiccloud-recon
Fine-tune the generation process with optional advanced settings.
Options include:
- Noise reduction
- Strict queries
- Banner toggle
- Color output control
Once configured, Dork Factory generates categorized, optimized dorks and provides ready-to-use search URLs.
Each dork is:
- Grouped by category
- Engine-aware
- Deduplicated
- Labeled for clarity
Generated dorks can be exported for later use.
Supported formats:
.txt.md.json
For advanced users or scripting purposes, Dork Factory also supports flags.
python dorkfactory.py --target example.com --profile bugbounty --engine both --no-banner-h, --help Show help
-i, --interactive Force interactive mode
-nb, --no-banner Disable banner
--target Define target(s)
--engine google | yandex | both
--category Select categories
--profile Use a preset
--exclude Exclusions
--export Export results
--silent Minimal output
--no-color Disable colors
Dork Factory is designed with passive reconnaissance principles in mind:
- ❌ No requests sent to targets
- ❌ No crawling or scraping
- ❌ No exploitation
- ❌ No fuzzing or scanning
- ✅ Public search engine queries only
Use responsibly and only on targets you are authorized to research.
- Language: Python 3
- Interface: Interactive CLI (TUI-style)
- Platforms: Windows, Linux, macOS
- Output: Colorized, categorized, exportable
- Comments: Minimal, only where logic matters
- Language: Full English
Dork Factory turns search engines into structured recon tools, providing clarity, speed, and organization to passive discovery workflows.
Manufacturing search queries for Recon & Discovery.
Made with <3 by URDev.
