Web Directory Enum

Usage Tips:

Click on a keyword to enable inline editing.
Click inside a code block to copy (excludes comments).
Use the button to view examples.
Click outside to collapse all examples.

HTTP


feroxbuster -u '<TARGET>' --depth 1 --methods=GET,POST -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt --dont-extract-links
Sample Output:
TO-DO

HTTPS


feroxbuster -u '<TARGET>' -k --depth 1 --methods=GET,POST -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt --dont-extract-links
Sample Output:
TO-DO

Specify Extension


feroxbuster -u '<TARGET>' --methods=GET,POST --depth=1 -w /usr/share/seclists/Discovery/Web-Content/raft-medium-words.txt -x <EXTENSION>
Sample Output:
feroxbuster -u '<TARGET>' --methods=GET,POST --depth=1 -w /usr/share/seclists/Discovery/Web-Content/raft-medium-words.txt -x html, asp, aspx

Add Trailing Slash '/' to Each Request


feroxbuster -u <TARGET> -f --depth 1 --methods=GET,POST -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt
Sample Output:
TO-DO

API Fuzzing


feroxbuster -u <TARGET> --force-recursion -C 404,405 --methods=GET,POST -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt
Sample Output:
TO-DO

Fuzzing Number Range


wfuzz -z range,<RANGE> '<TARGET>/FUZZ'
Sample Output:
wfuzz -z range,0-99 'http://127.0.0.1/FUZZ'

HTTP


gobuster dir -u '<TARGET>' -w /usr/share/seclists/Discovery/Web-Content/raft-medium-words.txt -t 10
Sample Output:
TO-DO

HTTPS


gobuster dir -u '<TARGET>' -k -w /usr/share/seclists/Discovery/Web-Content/raft-medium-words.txt -t 10
Sample Output:
TO-DO

Specify Extension


gobuster dir -u '<TARGET>' -w /usr/share/seclists/Discovery/Web-Content/raft-medium-words.txt -t 10 -x <EXTENSION>
Sample Output:
TO-DO


# BFAC (Backup File Artifacts Checker)
bfac --url '<TARGET>'
Sample Output:
TO-DO

Ref: BFAC


python3 ds_walk.py -u '<TARGET>'
Sample Output:
TO-DO

Ref: DS_WALK