DirBuster

DirBuster: Open Source Web Application Scanner

Discover hidden directories and files on web servers with DirBuster, an open source tool that brute forces directories and filenames using wordlists.

What is DirBuster?

DirBuster is an open source web application scanner used to find hidden directories and files on web servers. It is designed to brute force directories and filenames on web servers to uncover hidden files and directories that are not linked from the website itself.

DirBuster works by using wordlists containing common directory and file names which it uses to search the web server and find valid locations. For example, DirBuster will take a wordlist containing common directory names like /admin, /backup, /config, etc. and attempt to access each one on the target server to see if it exists. This allows it to discover directories that have not been linked on the public website.

Some key features and uses of DirBuster include:

• Finding hidden admin interfaces, log files, source code backups, and other undisclosed files/folders on servers
• Brute forcing directory structures for poorly configured web servers
• Web application security testing and vulnerability analysis
• Finding directories that website developers didn't intend to be public

DirBuster is intended to be used by web application testers, administrators, and security professionals to map out hidden areas of websites and find security issues around undisclosed files and folders. It is often one of the first tools used when performing black box web application security tests.

DirBuster Features

Official Links