+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TUT-MINI] How to find hidden files/folders on a web server (/showthread.php?tid=6044126)
[TUT-MINI] How to find hidden files/folders on a web server - Dhoroty - Jan 26, 2020
This mini tutorial will help you find some hidden gems in a web server, that may come in handy.
There is a great tool for this task, called DirBuster. It is included in Kali Linux. This is designed to brute force web and application servers. The tool can brute force directories and files.
So if you start the app, you'll see a lot of options to play with.
If you're not a pro, who wants to tweak stuff, just enter the target URL and hit start.
Then It'll use a list, and the findings will shown to you.
![[Image: YtFbzWS]](https://imgur.com/download/YtFbzWS)
Some options, you can tweak:
Number of threads. If you got a good internet connection, you can set it a bit up, if there is no defense on the server against brute forcing.
Scanning type. You can go with pre defined lists, or you can chose pure brute force. The last will give more result, but will took way longer.
Be Recursive. This option will let the app scan in subdirs like they were the root. This will took longer, but could give more results. I usually tick this in.
File extension. If you're looking for a specific stuff, you can filter for the extensions.
RE: [TUT-MINI] How to find hidden files/folders on a web server - Shisho - Jan 26, 2020
DirBuster has not been updated in near to 7 years. How about recommending something more modern like Dirstalk?
RE: [TUT-MINI] How to find hidden files/folders on a web server - Dhoroty - Jan 26, 2020
You're right.
Use dirstalk, this way:
Code
dirstalk scan http://someaddress.url/ --dictionary mydictionary.txt