feat: add categorized dork dictionaries

README.md

@@ -68,6 +68,10 @@ github-dorks -r techgaun/github-dorks --format json           # stream JSON to s
 github-dorks -u dev-nepal --format jsonl -o results.jsonl     # write newline-delimited JSON
 
 github-dorks -u dev-nepal --format csv -o results.csv --force # explicitly replace an existing file
+
+github-dorks --list-categories                                # list bundled dictionaries
+
+github-dorks -r techgaun/github-dorks -c cloud -c devops      # scan selected categories
 ```
 
 The legacy `python github-dork.py ...` invocation remains available for
@@ -85,6 +89,13 @@ provided. Use `--quiet` to suppress progress and summaries, or `--verbose` to
 print every query as it runs. Structured stdout remains machine-readable because
 status messages are sent to stderr.
 
+The bundled dictionary is split into `ai`, `cloud`, `databases`, `devops`,
+`frameworks`, `identity`, `observability`, `private-keys`, `saas`, and `system`
+categories. Repeat `-c/--category` to combine categories. With no category or
+custom `--dork` file, the command uses the backward-compatible
+`github-dorks.txt` aggregate. That aggregate is generated from the category
+files with `python scripts/build-dorks.py`.
+
 ### Development
 
 Run the dependency-free unit test suite with:
@@ -99,17 +110,20 @@ The CI test matrix covers Python 3.10 through 3.13.
 
 - Authenticated requests receive higher rate limits. Searches may pause until
   GitHub resets the search limit.
-- Search results can be printed to the terminal or written as CSV.
+- Large category combinations can take time because GitHub applies a separate
+  search rate limit.
 
 ### Contribution
 
-Please consider contributing dorks that can reveal potentially sensitive information on Github.
+Please consider contributing dorks that can reveal potentially sensitive information on GitHub.
 Documented sources for newer credential families are maintained in
 [docs/dork-sources.md](docs/dork-sources.md).
 
 ### List of Dorks
 
-The canonical, categorized dictionary is [github-dorks.txt](github-dorks.txt).
+The canonical dictionaries are the [categorized files](github_dorks/dorks).
+The generated [github-dorks.txt](github-dorks.txt) file contains every category
+for backward compatibility.
 The table below provides descriptions for many established patterns; newer
 credential families and their vendor references are tracked in
 [docs/dork-sources.md](docs/dork-sources.md). Many dorks can be modified to make

docs/dork-sources.md

@@ -1,9 +1,10 @@
 # Dork source references
 
-The primary `github-dorks.txt` dictionary favors documented token prefixes and
-canonical environment-variable names. Prefixes generally produce stronger
-signals; variable-name searches also catch providers that do not guarantee a
-stable public token format.
+The dictionaries in `github_dorks/dorks/` favor documented token prefixes and
+canonical environment-variable names. The generated `github-dorks.txt`
+aggregate contains every category for backward compatibility. Prefixes
+generally produce stronger signals; variable-name searches also catch providers
+that do not guarantee a stable public token format.
 
 These references support the modern credential families added to the
 dictionary. They are not exhaustive, and a match still requires manual review.
@@ -20,6 +21,38 @@ dictionary. They are not exhaustive, and a match still requires manual review.
 - [OpenAI API key setup](https://platform.openai.com/docs/quickstart)
 - [Claude API authentication](https://platform.claude.com/docs/en/api/overview#authentication)
 - [Hugging Face user access tokens](https://huggingface.co/docs/hub/security-tokens)
+- [Groq API keys](https://console.groq.com/docs/quickstart)
+- [Mistral API authentication](https://docs.mistral.ai/api/)
+- [Cohere API keys](https://docs.cohere.com/docs/rate-limits)
+- [Replicate API tokens](https://replicate.com/docs/topics/security/api-tokens)
+- [Pinecone API keys](https://docs.pinecone.io/guides/get-started/authentication)
+- [LangSmith environment variables](https://docs.langchain.com/langsmith/observability-quickstart)
+
+## Identity and secrets management
+
+- [1Password service account tokens](https://developer.1password.com/docs/service-accounts/use-with-1password-cli/)
+- [Vault token environment variable](https://developer.hashicorp.com/vault/docs/commands#environment-variables)
+- [Doppler service tokens](https://docs.doppler.com/docs/service-tokens)
+- [Infisical machine identities](https://infisical.com/docs/documentation/platform/identities/machine-identities)
+- [Auth0 application credentials](https://auth0.com/docs/get-started/applications/application-settings)
+- [Clerk environment variables](https://clerk.com/docs/guides/development/clerk-environment-variables)
+
+## Databases and data platforms
+
+- [Neon API authentication](https://api-docs.neon.tech/reference/authentication)
+- [PlanetScale service tokens](https://planetscale.com/docs/concepts/service-tokens)
+- [Upstash Redis REST API](https://upstash.com/docs/redis/features/restapi)
+- [Upstash Vector REST API](https://upstash.com/docs/vector/api/get-started)
+- [MongoDB Atlas API authentication](https://www.mongodb.com/docs/atlas/configure-api-access/)
+- [Databricks personal access tokens](https://docs.databricks.com/aws/en/dev-tools/auth/pat)
+
+## Observability and developer security
+
+- [New Relic API keys](https://docs.newrelic.com/docs/apis/intro-apis/new-relic-api-keys/)
+- [Grafana service account tokens](https://grafana.com/docs/grafana/latest/administration/service-accounts/)
+- [Honeycomb API keys](https://docs.honeycomb.io/configure/environments/manage-api-keys/)
+- [PagerDuty API access keys](https://developer.pagerduty.com/docs/rest-api-v2/authentication/)
+- [Snyk authentication](https://docs.snyk.io/snyk-cli/authenticate-to-use-the-cli)
 
 ## Cloud and infrastructure
 
@@ -30,6 +63,9 @@ dictionary. They are not exhaustive, and a match still requires manual review.
 - [Vercel access tokens](https://vercel.com/docs/rest-api/reference/welcome#creating-an-access-token)
 - [Supabase environment variables](https://supabase.com/docs/guides/functions/secrets)
 - [Sentry authentication tokens](https://docs.sentry.io/api/auth/)
+- [Netlify access tokens](https://docs.netlify.com/api-and-cli-guides/api-guides/get-started-with-api/)
+- [Fly.io access tokens](https://fly.io/docs/security/tokens/)
+- [Firebase CLI authentication](https://firebase.google.com/docs/cli#cli-ci-systems)
 
 ## General secret formats