Fast web directory bruteforce
To use this package, put the following dependency into your project's dependencies section:
DirDuster is a web directory bruteforcing tool similar to DirBuster. It allows you to quickly check for the presence of files or directories in order to detect potential flaws in the way the web server is configured.
The main tool used for this task is DirBuster_ which is written in Java and uses a graphical interface. This makes it hard enough to use for me to prefer writting another tool with a more proper interface.
.. DirBuster: https://www.owasp.org/index.php/Category:OWASPDirBuster_Project
There also exist dirb_ but it doesn't allow the user to specify the number of threads which means a massive slowdown on my machine which wasn't acceptable anymore.
.. _dirb: http://dirb.sourceforge.net/
How can I change the user-agent or use basic authentication?
Setup custom headers using the --header option:
dirduster -H "User-Agent=Whatever,Basic=YTphCg==" -f pathlist.txt test.com
For basic authentication you can also use the --auth option.
Usage: dirduster [options] -f FILE URL... Arguments: URL Urls to bruteforce Options: -h, --help Print this help and exit -v, --version Print the version and exit -a, --auth CREDS Basic authentication in the format login:password -c, --cookies COOKIES User-defined cookies in the format a1=v1,a2=v2 -d, --directories Identify and search directories -f, --file FILE Entries file -H, --headers HEADERS User-defined headers in the format a1=v1,a2=v2 -i, --ignore CODES List of comma separated invalid codes -I, --list-ignore List the default invalid codes -p, --proxy PROXY_URL Proxy url; may contain authentication data -s, --singlepass Disable recursion on findings -t, --threads NUM Number of threads to use, default is 10
Allow using other methods -> unlikely to be soon as dlang-requests doesn't support any besides GET and POST.
Use dub with the safe-prod build that optimizes the code without disabling safety features.
dub build -b safe-prod
This program is under the GPLv3 License.
You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.
Main developper: Cédric Picard Email: firstname.lastname@example.org
- Registered by Cédric Picard
- 1.1.0 released 2 years ago
- Copyright © 2016, Cédric Picard