data.ts

import { DorkPhase } from './types';

export const DORK_DATA: DorkPhase[] = [
  {
    phase: "accessibility",
    title: "Public Horizon",
    description: "The visible surface. What can be seen without touching the system.",
    categories: [
      {
        id: "subdomains",
        title: "Subdomain Discovery",
        description: "Mapping the breadth of the attack surface.",
        icon: 'eye',
        items: [
          { title: "Subdomains (Exclude www)", query: "site:target.com -www", type: "google" },
          { title: "Dev & Staging Environments", query: "site:target.com (inurl:dev OR inurl:staging OR inurl:test OR inurl:uat OR inurl:beta)", type: "google" },
          { title: "API Endpoints", query: "site:target.com (inurl:api OR inurl:v1 OR inurl:v2 OR intitle:api)", type: "google" }
        ]
      },
      {
        id: "cloud",
        title: "Cloud Footprint",
        description: "External assets and storage buckets often left public.",
        icon: 'eye',
        items: [
          { title: "AWS S3 Buckets", query: 'site:s3.amazonaws.com "target.com"', type: "google" },
          { title: "Google Storage", query: 'site:storage.googleapis.com "target.com"', type: "google" },
          { title: "Azure Blob", query: 'site:blob.core.windows.net "target.com"', type: "google" },
          { title: "DigitalOcean Spaces", query: 'site:digitaloceanspaces.com "target.com"', type: "google" }
        ]
      },
      {
        id: "intel",
        title: "Intelligence & Policy",
        description: "Rules of engagement and security contacts.",
        icon: 'bug',
        items: [
          { title: "Responsible Disclosure", query: 'site:target.com "responsible disclosure"', type: "google" },
          { title: "Bug Bounty Programs", query: 'site:target.com "bug bounty"', type: "google" },
          { title: "Security.txt", query: 'site:target.com inurl:security.txt', type: "google" }
        ]
      }
    ]
  },
  
  {
    phase: "necessity",
    title: "Entry Points",
    description: "High-necessity gates. Where users and admins must authenticate.",
    categories: [
      {
        id: "login",
        title: "Authentication Gateways",
        description: "The front doors of the application.",
        icon: 'lock',
        items: [
          { title: "Login Portals", query: 'site:target.com (inurl:login OR inurl:signin OR intitle:"login" OR intitle:"sign in")', type: "google" },
          { title: "Signup & Registration", query: 'site:target.com (inurl:auth OR inurl:signup OR inurl:register)', type: "google" },
          { title: "SSO / Identity Providers", query: 'site:target.com (inurl:sso OR inurl:oauth OR inurl:idp)', type: "google" }
        ]
      },
      {
        id: "admin",
        title: "Administrative Access",
        description: "Privileged access points intended for staff.",
        icon: 'key',
        items: [
          { title: "Admin Panels", query: 'site:target.com (inurl:admin OR intitle:"admin" OR inurl:dashboard OR inurl:panel)', type: "google" },
          { title: "VPN / Remote Access", query: 'site:target.com (inurl:vpn OR inurl:remote OR inurl:portal OR intitle:"citrix")', type: "google" },
          { title: "Content Management (CMS)", query: 'site:target.com (inurl:wp-admin OR inurl:administrator OR inurl:backend)', type: "google" }
        ]
      }
    ]
  },

  {
    phase: "ease_of_access",
    title: "Human Error",
    description: "Mistakes and leftovers. The easiest path to compromise.",
    categories: [
      {
        id: "config",
        title: "Configuration Leaks",
        description: "Critical files defining how apps run.",
        icon: 'terminal',
        items: [
          { title: "Environment Files (.env)", query: 'site:target.com (ext:env OR ext:env.bak OR ext:env.old)', type: "google" },
          { title: "Server Configs", query: 'site:target.com (ext:xml inurl:web.config OR ext:conf inurl:httpd.conf OR ext:ini inurl:php.ini)', type: "google" },
          { title: "Cloud Keys & Secrets", query: 'site:target.com ("aws access key" OR "api key" OR "access token" OR "secret key")', type: "google" }
        ]
      },
      {
        id: "artifacts",
        title: "Exposed Artifacts",
        description: "Files left behind by developers or backup systems.",
        icon: 'eye',
        items: [
          { title: "Directory Listing", query: 'site:target.com intitle:"index of"', type: "google" },
          { title: "Log Files", query: 'site:target.com (ext:log OR inurl:log OR filetype:log)', type: "google" },
          { title: "Backup Files", query: 'site:target.com (ext:bak OR ext:old OR ext:swp OR ext:git OR ext:zip)', type: "google" }
        ]
      }
    ]
  },

  {
    phase: "infrastructure",
    title: "Deep Infrastructure",
    description: "The engine room. DevOps tools and code repositories.",
    categories: [
      {
        id: "devops",
        title: "DevOps & Monitoring",
        description: "Internal tooling exposed to the public internet.",
        icon: 'terminal',
        items: [
          { title: "Jenkins Instances", query: 'site:target.com intitle:"Dashboard [Jenkins]"', type: "google" },
          { title: "Jira / Confluence", query: 'site:atlassian.net "target.com"', type: "google" },
          { title: "Kibana / Grafana", query: 'site:target.com (intitle:"Grafana" OR inurl:"/app/kibana")', type: "google" },
          { title: "Docker Registry", query: 'site:target.com inurl:v2/_catalog', type: "google" }
        ]
      },
      {
        id: "github",
        title: "Code Repositories",
        description: "Searching GitHub for hardcoded secrets.",
        icon: 'bug',
        items: [
          { title: "Secrets & Credentials", query: '"target.com" AND ("api_key" OR "secret" OR "password" OR "token")', type: "github" },
          { title: "AWS Keys", query: '"target.com" AND ("AKIA" OR "aws_secret_access_key")', type: "github" },
          { title: "Config Files", query: '"target.com" AND (filename:.env OR filename:config)', type: "github" }
        ]
      }
    ]
  },

  {
    phase: "vulnerabilities",
    title: "Vulnerability Signals",
    description: "Technical errors and parameters indicating potential faults.",
    categories: [
      {
        id: "injection",
        title: "Injection Vectors",
        description: "Parameters that interact with the backend.",
        icon: 'bug',
        items: [
          { title: "SQL Injection Parameters", query: 'site:target.com (inurl:id= OR inurl:pid= OR inurl:cat= OR inurl:action= OR inurl:user=)', type: "google" },
          { title: "Reflected XSS", query: 'site:target.com (inurl:search= OR inurl:q= OR inurl:query= OR inurl:keyword=)', type: "google" },
          { title: "Open Redirects", query: 'site:target.com (inurl:url= OR inurl:redirect= OR inurl:return= OR inurl:next=)', type: "google" },
          { title: "SSRF Endpoints", query: 'site:target.com (inurl:http= OR inurl:url= OR inurl:path= OR inurl:dest=)', type: "google" }
        ]
      },
      {
        id: "db_errors",
        title: "Stack Trace Leaks",
        description: "Error messages revealing underlying technology.",
        icon: 'terminal',
        items: [
          { title: "SQL Errors", query: 'site:target.com (intext:"sql syntax" OR intext:"syntax error" OR intext:"mysql_fetch")', type: "google" },
          { title: "PHP Errors", query: 'site:target.com (intext:"fatal error" OR intext:"php warning" OR intext:"call to undefined")', type: "google" },
          { title: "General Leaks", query: 'site:target.com (intext:"exception" OR intext:"stack trace" OR intext:"error occurred")', type: "google" }
        ]
      }
    ]
  }
];