added additional recon/domains-vulnerabilities/ghdb_* modules for bind/yahoo/ddg

[s0i37]

These search systems don't require to solving captcha

Before submitting a pull request, make sure to complete the following:

• Ensure there are no similar pull requests.
• Read the Development Guide.

What kind of PR is this?
Please add an 'x' in the appropriate box, and apply a label to the PR matching the type here.

• Bug Fix
• [ x] New Module
• Documentation Update

Checklist For Approval

• Updated the meta dictionary for the module.
  • If bug fix, updated the version.
• Indexed the module
• Added the index to the modules.yml file
• Made the most out of the available mixins.
• Ensured the code is PEP8 compliant with pycodestyle or black.

[s0i37]

I have tested bing/yahoo/ddg. And only yahoo has the better supports of google search operators (except of intitle:, allintitle: and allintext:)

[lanmaster53]

I have tested bing/yahoo/ddg. And only yahoo has the better supports of google search operators (except of intitle:, allintitle: and allintext:)

So does that mean the other modules provide bad responses to dorks that use operators not understood by the engine? I'm not even sure this techniques is worth including anymore considering i haven't been able to update the database in several years. OffSec removed my access. I think it would be better if these modules were designed around providing your own list rather than using a built in one. I will likely remove the built in list at some point. Consider it deprecated.

[s0i37]

Actually even Yahoo dont provide good results. It seems it doesn't undrestand strict match "query".
But on the other hand I don't known better approach where don't need to solve captcha.

[lanmaster53]

Actually even Yahoo dont provide good results. It seems it doesn't undrestand strict match "query".
But on the other hand I don't known better approach where don't need to solve captcha.

Yeah, it's a problem that we encounter more and more as resources begin protecting their information. Bottom line is not everything can or should be automated. In the case of dorks, we might just have to resort to doing them manually. This isn't a stable enough module for merging at this point.

[s0i37]

It probable will have a bit false positives which can be verified manually.
It is more easy way then making each google/yahoo/bing query with browser.

[lanmaster53]

It probable will have a bit false positives which can be verified manually.
It is more easy way then making each google/yahoo/bing query with browser.

I don't disagree, but due to the false positives, I'm certain we will receive a ton of issues about it not working properly and I don't know that I want to take on that technical debt.