GitDorker
GitDorker searches GitHub for exposed secrets using a collection of search patterns.
About GitDorker
GitDorker is a Python program that searches GitHub through the GitHub Search API using a large collection of GitHub search patterns, or "dorks." Given a query such as a domain name, it returns an overview of sensitive information potentially stored on GitHub and a tailored starting point for reviewing repositories or users.
It requires Python 3 and a GitHub personal access token; the author recommends at least two tokens from separate accounts to reduce the chance of rate limiting. The GitHub Search API allows 30 requests per minute, and the tool pauses after every 30 requests to avoid search failures, so a full run with alldorks.txt takes roughly five minutes. The project states it is made for educational and ethical testing only, and that using it against targets without prior mutual consent is illegal.
Key features
- Searches GitHub through the GitHub Search API using compiled dorks
- Includes alldorks.txt, a collection of 239 sensitive-information dorks
- Sleeps after every 30 requests to prevent search failures
- Accepts a query such as a domain and outputs results for review
- Supports alternating multiple tokens to reduce rate limiting
- Provides Docker build and run commands
Best for: Security researchers, bug bounty hunters and penetration testers who want to map potentially sensitive information exposed on GitHub for a given query.
Good for
- Ships with a compiled dork collection, including the 239-dork alldorks.txt file
- Built-in sleep function after every 30 requests to reduce rate-limit failures
- Discovered repositories or users can feed follow-up tools such as GitRob or Trufflehog
Watch out for
- Requires a GitHub personal access token; two tokens from separate accounts are recommended
- Limited to 30 requests per minute by the GitHub Search API
- Stated as intended for educational and ethical testing only, with prior mutual consent required
GitDorker at a glance
- Category
- Privacy & Security › Security Tools
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
GitDorker alternatives
Tools and sites you could use instead, ranked by how closely they match.
GitHub Advisory Database catalogs CVEs and GitHub-originated security advisories affecting open-source software.
Agentic Radar scans agent workflows for security issues and helps developers review potential risks.
Open source
24 alternatives
AndroGuard provides tools for reverse engineering and penetration testing Android applications.
Open source
24 alternatives
Find community-provided plugins for the Binary Ninja reverse engineering platform.
Open source
24 alternatives
Instrument running software with Frida, a dynamic analysis toolkit for observing and reprogramming applications.
unblob extracts files from complex binary blobs and firmware images, supporting security analysis of embedded software.
Popular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
GitDorker FAQ
What does GitDorker require to run?
Python 3, a GitHub personal access token, and the packages listed in the repository's requirements.txt file.
How long does a run using alldorks.txt take?
Roughly five minutes, because the tool pauses after every 30 requests to stay within the GitHub Search API limit.
Can GitDorker be combined with other tools?
Yes. The project suggests using GitRob or Trufflehog on repositories or users discovered with GitDorker.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.