Security Reconnaissance using Google Dorks and AI Scraper - n8n Workflow

Security researchers and penetration testers needing automated information gathering.
System administrators performing external vulnerability assessments.
Developers looking for advanced web scraping n8n templates.
Users seeking a practical application of a custom code n8n node combined with AI scraping tools.

Information gathering is a crucial first step in any security audit. Manually executing dozens of Google Dorks against a target domain is time-consuming. This specialized n8n workflow solves this by providing a robust, automated solution. Once triggered via the initial form, the n8n node uses custom JavaScript to construct a comprehensive list of security-relevant Google Dork queries targeting the specified domain.

Each customized query is then systematically scraped using the AI Scraper n8n node (Parsera), extracting exposed links, configuration files, and indexed directories. Finally, the collected data is cleaned, formatted, and delivered directly to your inbox using a Gmail n8n node. This approach guarantees that security teams receive timely, actionable intelligence without manual intervention, making this a highly valuable n8n workflow template.

The entire process starts with the n8n trigger:

1. Form Input Trigger: The n8n workflow is initiated by submitting a target URL via the internal form n8n trigger.


2. Dork Customization: The Dorks Template Search n8n node extracts the domain name from the input URL and dynamically generates a list of powerful Google Dorks (e.g., searching for ext:pdf, inurl:login, or configuration files) specific to that domain.


3. Batch Processing: The Split Dorks One-by-One n8n node manages the flow by splitting the extensive dork list into smaller batches (size 8), ensuring reliable processing by the scraping service.


4. AI Scraper Execution: The Scrape with agent n8n node (using Parsera/AI Scraper) executes the Google search for each dork, efficiently extracting the resulting links.


5. Data Cleaning: The Clean Output n8n node filters the raw results, removing links that point back to Google itself, search fragments, or invalid entries, leaving only potentially sensitive external links.


6. Report Generation: The Generate HTML n8n node compiles the cleaned links into a readable Markdown/HTML format, preparing the final report body.


7. Email Delivery: The Send a message n8n node utilizes the Gmail service to send the reconnaissance report, including the subject 'Google Dorks Report' and the formatted list of links.

To deploy this n8n workflow template successfully, follow these steps:

1. Import the n8n Workflow: Copy the provided JSON data and paste it into your n8n instance using the 'New' -> 'Import from JSON' option.


2. Configure Credentials:

1. Setup the Trigger: The Form Input n8n trigger is ready to use. Click 'Activate' (or 'Run Once') and open the provided webhook URL to input the target domain.


2. Testing: Run the n8n workflow once to ensure all components, especially the custom code n8n node and the scraping n8n node, are executing correctly and the report is delivered.

Form Input (n8n trigger):
Function: Acts as the starting n8n trigger, capturing the target URL that will be used for reconnaissance.
Key Configuration: Defines a single input field labeled 'URL'.
Dorks Template Search (Code n8n node):
Function: Parses the input URL, extracts the domain, and generates a list of Google search URLs (dorks) customized for that domain.
Key Configuration: Uses JavaScript to construct strings like site:.domain.com ext:pdf and URL-encodes them for search queries.
Split Dorks One-by-One (n8n node):
Function: Splits the large list of generated dork searches into batches of 8, optimizing the load on the scraping service.
Scrape with agent (AI Scraper n8n node):
Function: Executes the Google search query defined by the dork URL using a Parsera AI Agent named 'google' and extracts the search result links.
Key Configuration: Uses the expression ={{ $json.dork }} for the URL input and specifies google as the agent name.
Clean Output (Code n8n node):
Function: Filters the scraped links to remove internal Google links, ensuring the final report contains only relevant target domain links.
Key Configuration: Custom JS filtering logic that checks if the link starts with 'http' and does not contain 'google.com'.
Generate HTML (Code n8n node):
Function: Formats the cleaned list of links into a clear, numbered Markdown report structure.
Send a message (Gmail n8n node):
Function: Final action of this n8n workflow; sends the generated security report via email.
* Key Configuration: Uses dynamic data for the message body (={{ $json.markdown }}) and a static subject.