Free Google Dork Generator

Generate search queries to find exposed data and pages

Enter a domain to generate a comprehensive set of Google dork queries organized by category — sensitive files, admin panels, login pages, exposed directories, database dumps, configuration files, and more. Each dork is a search query that finds pages indexed by Google that may contain security-sensitive information.

Trusted by teams at

Ramp
Pilot
Vercel
Stripe
Better Auth
SST
OpenCode

How it works

How Google Dork Generator works

01

Enter a target domain

Type the domain you want to investigate. We'll generate targeted search queries scoped to that domain using Google's advanced search operators.

02

Get categorized dork queries

We generate 20+ dork queries organized into categories: sensitive files, admin panels, login pages, exposed directories, API endpoints, backup files, configuration leaks, and more.

03

Receive risk analysis

Each category is explained with its risk level and what an attacker could gain from the results. High-risk dorks are highlighted for immediate attention.

Features

What Google Dork Generator checks

Find exposed sensitive files

Generates queries to find .env files, configuration files, SQL dumps, log files, and backup archives that may be indexed by search engines — often the fastest path to credentials and secrets.

Discover admin panels and login pages

Creates dorks that locate admin dashboards, CMS login pages, database management interfaces (phpMyAdmin, Adminer), and other administrative endpoints.

Detect directory listings

Targets pages with 'Index of' titles that expose directory contents, revealing file structures, backup files, and internal resources that should not be publicly accessible.

Locate API documentation and endpoints

Finds exposed Swagger/OpenAPI documentation, GraphQL playgrounds, and API endpoints that may not require authentication and leak sensitive data.

Identify information disclosure

Generates queries for error messages, stack traces, phpinfo pages, server status pages, and debug endpoints that reveal internal system details.

Use cases

Who should use the free Google Dork Generator

Penetration Testers

Start reconnaissance with OSINT by discovering what Google has already indexed. Find exposed files, forgotten endpoints, and information disclosure before touching the target directly.

Security Teams

Monitor your organization's exposure by running these dorks periodically. Find accidentally published credentials, internal documents, or staging environments indexed by search engines.

Bug Bounty Hunters

Quickly generate a comprehensive dork list for a target domain. Google dorking is often the fastest way to find exposed admin panels, backup files, and misconfigurations.

More tools

All free security tools

FAQ

Frequently asked questions

Everything you need to know about the free Google Dork Generator.

Go beyond Google Dork Generator

This free Google Dork Generator checks a handful of things. Maced's AI pentest checks thousands.

Get a full autonomous penetration test — including OWASP Top 10, authentication flaws, business logic errors, API security, and more — with a compliance-ready report in hours.

Proof of exploit on every finding · SOC 2 & ISO 27001 compatible