Web Directory Enum

Usage Tips:

Click on a keyword to enable inline editing.
Click inside a code block to copy (excludes comments).
Use the button to view examples.
Click outside to collapse all examples.

HTTP


feroxbuster -u <TARGET> --depth 1 --methods=GET,POST -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt --dont-extract-links
Sample Output:
TO-DO

HTTPS


feroxbuster -u <TARGET> -k --depth 1 --methods=GET,POST -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt --dont-extract-links
Sample Output:
TO-DO

Specify Extension


feroxbuster -u <TARGET> --methods=GET,POST --depth=1 -w /usr/share/seclists/Discovery/Web-Content/raft-medium-words.txt -x html, asp, aspx
Sample Output:
TO-DO

Add trailing slash '/' to each request


feroxbuster -u <TARGET> -f --depth 1 --methods=GET,POST -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt
Sample Output:
TO-DO

API Fuzzing


feroxbuster -u <TARGET> --force-recursion -C 404,405 --methods=GET,POST -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt
Sample Output:
TO-DO

Fuzzing Number Range


wfuzz -z range,1-99 <TARGET>/FUZZ
Sample Output:
TO-DO


gobuster dir -u <TARGET> -w /usr/share/seclists/Discovery/Web-Content/raft-medium-words.txt -t 40 -x php
Sample Output:
TO-DO


# BFAC (Backup File Artifacts Checker)
bfac --url <TARGET>
Sample Output:
TO-DO

Ref: BFAC


python3 ds_walk.py -u <TARGET>
Sample Output:
TO-DO

Ref: DS_WALK