Sep 11, 2013 02:01 PM
(This post was last modified: Sep 11, 2013 02:16 PM by azihak.)
Hi 👍
I would like to tell you about an awesome tool that comes with Kali Linux. DIRBUSTER
This tool is a crawler that can find directories and files hidden by website admins trough brute-force.
Can find admin pages, hidden pages, hidden directories, etc.
So i make a small and simple tutorial about it. Hope you like it 🙂
--
First open tool, it's in Applications->Kali Linux->Web applications->Web crawlers->dirbuster
Spoiler (Click to View)
next we advance to the scan
Spoiler (Click to View)
(1) insert website to scan and chose number of threads (how good is your machine?)
(2) in this example i used a name list. don't worry, there's some lists in usr/share/dirbuster/wordlists. just chose one that best fits you.
(3) Select your options here. if you point mouse above each option, you'll get more info about them
now we click start and wait for results
Spoiler (Click to View)
Spoiler (Click to View)
DONE 😎
NOTES: Keep in mind that the success of this method depends of the name list. you can make or download better ones or use pure brute-force
✌
I would like to tell you about an awesome tool that comes with Kali Linux. DIRBUSTER
This tool is a crawler that can find directories and files hidden by website admins trough brute-force.
Can find admin pages, hidden pages, hidden directories, etc.
So i make a small and simple tutorial about it. Hope you like it 🙂
--
First open tool, it's in Applications->Kali Linux->Web applications->Web crawlers->dirbuster
Spoiler (Click to View)
next we advance to the scan
Spoiler (Click to View)
(1) insert website to scan and chose number of threads (how good is your machine?)
(2) in this example i used a name list. don't worry, there's some lists in usr/share/dirbuster/wordlists. just chose one that best fits you.
(3) Select your options here. if you point mouse above each option, you'll get more info about them
now we click start and wait for results
Spoiler (Click to View)
Spoiler (Click to View)
DONE 😎
NOTES: Keep in mind that the success of this method depends of the name list. you can make or download better ones or use pure brute-force
✌


![[Image: EUAKZxH.png]](https://i.imgur.com/EUAKZxH.png)
![[Image: 7Xvk73L.png]](https://i.imgur.com/7Xvk73L.png)
![[Image: lJg3U3X.png]](https://i.imgur.com/lJg3U3X.png)
![[Image: 3YIXTKD.png]](https://i.imgur.com/3YIXTKD.png)