All techniques that I am writing in this blog is only for educational & ethical vulnerability research purposes. Author is not responsible for any misuse!

🌐 Site: zoomeye.ai

After banging my head for couple of days for more dork crafting ideas, I came up with this simple and easy technique described in the end.

ZoomEye Dorks

http.body="InvalidOperationException"

title="DisallowedHost at /"
http.body="DisallowedHost"

title="ModuleNotFoundError at /"

http.body="MongoError"

🤑 Extract all keywords for dorking from Nuclei Public Templates

First update nuclei templates to fetch latest templates

#update nuclei template
nuclei -ut

Find location where you downloaded the templates

locate nuclei-templates

cd /path/to/nuclei-templates
cd /file/logs/

Extract all matcher keywords present in the YAML Templates

grep -rhoP "^\s*-\s*'[^']+'" . --include="*.yaml" | sed -E "s/^\s*-\s*'([^']+)'/\1/"

Directly make the dork syntax with it

grep -rhoP "^\s*-\s*'[^']+'" . --include="*.yaml" | sed -E "s/^\s*-\s*'([^']+)'/http.body=\"\1\"/"

Save the dorks into a file

grep -rhoP "^\s*-\s*'[^']+'" . --include="*.yaml" | sed -E "s/^\s*-\s*'([^']+)'/http.body=\"\1\"/" > zoomeye_dorks.txt

🤖 ChatGPT Prompt Ideas for Mass Automation

🙂 Enjoy this mass hunting technique

You can apply the same mass hunting technique for any other bug given that you have the API Key :)

Disadvantage: As always only the first hunter who will report wins, if duplicate, then the credits used for the API calls wasted successfully 🙂