Secret Search Engine is an advanced reconnaissance toolkit for bug bounty hunters and OSINT researchers. It consolidates powerful search queries (Google dorks) and platform integrations to help discover exposed assets, sensitive files, and potential vulnerabilities.
Built and improved by CyberTechAjju โ inspired by the original project by gatiella.
- 100+ curated Google dorks across multiple categories
- Platform integrations: Google, GitHub, Shodan, Censys, crt.sh, Web Archive, Reddit, Pastebin, Yandex
- Subdomain discovery and asset enumeration
- Exposed file detection (.env, .git, backups, config files, databases)
- Vulnerability heuristics (phpinfo, open redirects, Struts RCE indicators, upload script checks)
- Secrets hunting (API keys, tokens, cloud credentials)
- OSINT gathering (LinkedIn, ThreatCrowd, OpenBugBounty, Reddit mentions)
- Query builder with tokens (site, inurl, ext, intitle, intext, -)
- Favorites & history with export/import support
- Keyboard shortcuts for faster workflow
No runtime or external dependencies required โ this is a static HTML toolkit.
- Clone the repository:
git clone https://github.com/cyberajju/Secret-Search-Engine.git cd Secret-Search-Engine - Open
index.htmlin your browser.
Tip: Use a modern browser (Chrome, Firefox) for best UI/UX.
- Enter target domain(s). Multiple targets can be comma-separated for batch mode.
- Select the platform to search (Google, GitHub, Shodan, etc.).
- Choose a dork category and click a query to launch searches in the selected platform.
- Use the query builder to combine tokens and craft custom searches.
- Save favorite dorks and export/import them for reuse.
This project includes 100+ curated Google dorks organized by category to speed up reconnaissance.
To keep the README readable, see the DORKS.md file (or the dorks section in the UI) for the complete list.
- Original inspiration: gatiella
- Upgrades, UI/UX improvements, and maintenance: CyberTechAjju
- Add more dork categories (Cloud, IoT, APIs)
- Dark/light theme toggle
- Export results to CSV/JSON
- Integration with bug-bounty platforms
MIT License โ free to use, modify, and share. Please use the tool responsibly and ethically.
โจ Keep learning, keep hacking โ CyberTechAjju โจ