pagodo is a command-line tool that automates Google dork searches to identify potentially vulnerable web pages and applications. It consists of two main components: ghdb_scraper.py, which retrieves the latest Google dorks from the Google Hacking Database maintained by Offensive Security, and pagodo.py, which performs the actual searches using those dorks.
The tool solves the problem of manually executing Google dork queries through a web browser by automating the search process at scale. It uses the yagooglesearch library to perform flexible Google searches and supports both HTTP(S) and SOCKS5 proxies natively, allowing users to specify multiple proxies in round-robin fashion without requiring external tools like proxychains4. The ghdb_scraper component maintains a local cache of dorks organized by category, which can be refreshed to ensure searches use the latest available dorks.
Developers conducting security research, bug bounty hunting, or reconnaissance should consider this tool if they need to systematically search for exposed or misconfigured web applications. The tool is designed for Python 3.6 and later and can be used either as a command-line script or imported as a module for integration into larger workflows. The project explicitly notes that scraping Google Search results may violate Google's Terms of Service and recommends using Google's official API as the preferred method.
The project maintains an active codebase with regular updates to keep pace with changes to the Google Hacking Database. Development includes ongoing refinement of the proxy support implementation and migration to the more flexible yagooglesearch library. The tool includes comprehensive documentation for both script and module usage patterns, supporting multiple ways of interacting with the dork data and search functionality.
