Goofile
Command line tool for searching specific file types within a given domain using Google search. Identifies publicly accessible files like PDFs from target domains.
Description
Goofile is a command line filetype search utility designed for reconnaissance tasks in cybersecurity. It leverages Google search capabilities to locate specific file extensions across an entire domain, making it valuable for information gathering during penetration testing or security assessments. The tool is particularly useful for discovering sensitive documents such as PDFs, DOCs, or other formats that may be publicly indexed but overlooked by website administrators.
Use cases include mapping out document repositories on target domains, identifying potential information leaks, and supporting OSINT operations. For instance, security professionals can quickly enumerate all PDF files on a domain to review for confidential data exposure. The tool supports customization through Google Custom Search Engine integration for more precise queries.
Developed by Thomas (G13) Richards, goofile v1.5 is lightweight and integrates seamlessly into Kali Linux workflows, with dependencies on Python3 and python3-requests.
How It Works
Goofile queries Google search using dorks tailored to specific filetypes and domains, such as 'filetype:pdf site:domain.com'. It optionally uses Google Custom Search Engine API with provided key and engine ID for enhanced results. The tool parses search results to extract and list matching file URLs, displaying them in a formatted output. Logging verbosity can be adjusted for debugging search operations.
Installation
sudo apt install goofileFlags
Examples
goofile -d kali.org -f pdfgoofile -hgoofile -d example.com -f docgoofile -d target.org -f xlsx -q confidentialgoofile -d site.com -f txtgoofile -d domain.net -f zip -k APIKEY -e ENGINEID