Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[Tutorial] Find hidden web directories and files with dirsearch

Dirsearch is a powerful tool that automatically checks for the existence of directories/files on a server
It might discover admin logins, configuration files the admin forgot to remove and more!
When attacking a site during a penetration test, I used this tool numerous times and have also had success based on the things I found with it

Dirsearch does not only output files it found, but also files it got a 403 (Forbidden Access) or other interesting response codes from
This makes the tool even more powerful to me

You can find it's Github Repository here

To use it on Linux, first install Git

Code
apt -y install git

Then clone into the repository

Code
git clone https://github.com/maurosoria/dirsearch

A folder named dirsearch will appear within the directory you executed this command in
Switch into the directory by using
Code
cd dirsearch

You will need pip3 to install the requirements listed in requirements.txt
To install pip3 and afterwards install all the requirements using pip3 do

Code
apt install python3-pip
pip3 install -r requirements.txt

A basic usage of dirsearch could look like this

Code
python3 dirsearch.py -u https://example.com -e php,js,txt,conf

-u specifies the URL that you want to check for the files
-e specifies the file extensions that will be looked for, in this case: php,js,txt and .conf

In addition to that, there are some other useful flags you can use:
--cidr scans all hosts in the given cidr
-X Excludes specified extensions
-r Search directories recursively
--proxy Proxy your requests; good for circumventing IP blocks and privacy

As it is a tool I find myself using pretty often, I thought I would share that as well, hope you enjoyed this and learned something new
All my answers/posts are for educational purposes only. I am not in any way responsible for the actions you perform with the acquired knowledge.
[Image: ZjBA6fR.gif]
tysm, just used dirsearch on a website and found some very cool stuff.
(Jan 5, 2021 04:00 PM)ghostwalker47 Wrote:  tysm, just used dirsearch on a website and found some very cool stuff.

You're welcome bud, thanks for the feedback!
All my answers/posts are for educational purposes only. I am not in any way responsible for the actions you perform with the acquired knowledge.
[Image: ZjBA6fR.gif]
thanks dude awesome stuff
(Jan 7, 2021 01:47 AM)Choom Wrote:  thanks dude awesome stuff

Yw mate, thanks for the feedback
All my answers/posts are for educational purposes only. I am not in any way responsible for the actions you perform with the acquired knowledge.
[Image: ZjBA6fR.gif]
Thanks for sharing this, there's a few sites that I need to dig trough, gonna see if this helps out :3
(Jan 7, 2021 02:03 AM)HOMODIN Wrote:  Thanks for sharing this, there's a few sites that I need to dig trough, gonna see if this helps out :3

Np, you find something cool on 80% of websites I tried it on, sometimes even open stats panels lmao
All my answers/posts are for educational purposes only. I am not in any way responsible for the actions you perform with the acquired knowledge.
[Image: ZjBA6fR.gif]
I want to see how this works.


<"The illiterate of the 21st century will not be those who cannot read and write, but those who cannot learn, unlearn, and relearn.">
Thank you very much !! Very useful!!
Thanks for the guide mate, you gave a pretty good tutorial! Keep up the good work man!
[Image: thothsig1.png]
Dirsearch is very useful, i have tried it several times, its a powerful tool
Thanks for this! Almost exactly what I needed!
Thanks for this! Precisely what I needed
thanks sir apreciate it
This is great thank you so much for sharing!


Possibly Related Threads...
Thread / Author Replies Views Last Post
by GlowmanDec 16, 2023 02:50 AM 19 961 Dec 16, 2023 02:50 AM
Last Post: Glowman
by GlowmanDec 7, 2023 03:15 PM 27 1,731 Dec 7, 2023 03:15 PM
Last Post: larryhaskins05
by whitepearlNov 4, 2023 05:39 AM 0 103 Nov 4, 2023 05:39 AM
Last Post: whitepearl