https://github.com/maurosoria/dirsearch
Web path scanner
https://github.com/maurosoria/dirsearch
appsec brute bug-bounty bugbounty dirsearch enumeration fuzzer fuzzing hacking hacking-tool infosec penetration-testing pentest-tool pentesting python red-teaming redteam scanner security wordlist
Last synced: 23 days ago
JSON representation
Web path scanner
- Host: GitHub
- URL: https://github.com/maurosoria/dirsearch
- Owner: maurosoria
- Created: 2013-04-30T15:57:40.000Z (over 13 years ago)
- Default Branch: master
- Last Pushed: 2026-09-29T14:56:29.000Z (about 1 month ago)
- Last Synced: 2026-09-29T16:28:02.473Z (about 1 month ago)
- Topics: appsec, brute, bug-bounty, bugbounty, dirsearch, enumeration, fuzzer, fuzzing, hacking, hacking-tool, infosec, penetration-testing, pentest-tool, pentesting, python, red-teaming, redteam, scanner, security, wordlist
- Language: Python
- Homepage:
- Size: 23.1 MB
- Stars: 14,769
- Watchers: 310
- Forks: 2,442
- Open Issues: 19
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Funding: .github/FUNDING.yml
- Agents: AGENTS.md
Awesome Lists containing this project
- security-study-tutorial - Web path scanner
- awesome-python - maurosoria/dirsearch - Web path scanner (Security / Security Tools)
- awesome-bugbounty-tools - dirsearch - Web path scanner (Recon / Content Discovery)
- WebHackersWeapons - dirsearch
- awesome-data-analysis - Dirsearch - A web path scanner. (🕸️ Web Scraping & Crawling / Tools)
- penetration-testing - dirsearch - Web path scanner. (Web Exploitation / Web path discovery and bruteforcing tools)
- awesome-hacking-lists - maurosoria/dirsearch - Web path scanner (Python)
- awesome-pentest - dirsearch - Web path scanner. (Web Exploitation / Web path discovery and bruteforcing tools)
- Awesome-Security-Tool-List - dirsearch
- venom - `dirsearch` - Web path scanner. (Web / Web Path Discovery / Bruteforcing Tools)
- Awesome-OSINT-List - Dirsearch - Web path scanner and directory brute-forcing tool. (BUG BOUNTY / SECURITY RESEARCH / Content Discovery & Fuzzing)
- awesome-bbht - dirsearch - Web path scanner (Content Discovery / Directory Bruteforcers & Fuzzers)
- awesome-infosec - dirsearch
- awesome-cyber-ai-arsenal - dirsearch - forcer. | (🔴 Offensive Security (Red Team) / HTTP Probing / Crawling / Content Discovery)
- awesome-list - dirsearch - Web path scanner. (Hacking 💀 / Apps (Terminal))
- awesome-ctf-resources - dirsearch - Web path scanner. (Web)
- awesome-pentest - dirsearch - Web path scanner. (Web Exploitation / Web path discovery and bruteforcing tools)
- fucking-awesome-pentest - dirsearch - Web path scanner. (Web Exploitation / Web path discovery and bruteforcing tools)
- awesome-pentest-tools - dirsearch
- awesome-bbht - dirsearch - Web path scanner (Content Discovery / Directory Bruteforcers & Fuzzers)
- awesome-penetest - dirsearch - Web path scanner. (Web Exploitation / Web path discovery and bruteforcing tools)
README
# dirsearch - Web Path Discovery
[](https://github.com/maurosoria/dirsearch/releases)
[](https://github.com/sponsors/maurosoria)
[](https://discord.gg/2N22ZdAJRj)
[](https://twitter.com/_dirsearch)
> An advanced web path brute-forcer
**dirsearch** is being actively developed by [@maurosoria](https://twitter.com/_maurosoria) and [@shelld3v](https://twitter.com/shells3c_).
Join the [Discord server](https://discord.gg/2N22ZdAJRj) to communicate with the team.
## Quick Start
dirsearch requires Python 3.11 or higher.
```sh
git clone https://github.com/maurosoria/dirsearch.git --depth 1
cd dirsearch
python3 dirsearch.py -u https://example.com -e php,html,js
```
You can also install the latest Python stack directly from GitHub with pip:
```sh
pip3 install git+https://github.com/maurosoria/dirsearch.git
dirsearch -u https://example.com -e php,html,js
```
The Rust native backend is opt-in for source installs; see [Installation](docs/installation.md) for the native build steps.
Pre-built PyInstaller binaries and portable folder archives are available on the [Releases page](https://github.com/maurosoria/dirsearch/releases).
## Documentation
The full documentation now lives in [`docs/`](docs/index.md):
- [Installation](docs/installation.md): supported platforms, Python install, release artifacts, and Docker.
- [Usage Guide](docs/usage.md): common scans, recursion, filters, proxies, raw requests, reports, and tips.
- [Wordlists](docs/wordlists.md): `%EXT%`, categories, templates, prefixes, suffixes, and transformations.
- [CLI Options](docs/options.md): complete command-line reference.
- [Configuration](docs/configuration.md): `config.ini` reference.
- [Sessions](docs/sessions.md): save, list, and resume scan sessions.
- [Python API](docs/python-api.md): importable API examples.
- [Building](docs/building.md): PyInstaller, portable builds, Docker images, and GitHub Actions.
- [References](docs/references.md): external tutorials and articles.
## Minimal Examples
```sh
python3 dirsearch.py -u https://target
python3 dirsearch.py -u https://target -e php,html,js
python3 dirsearch.py -u https://target -e php,html,js -w /path/to/wordlist
python3 dirsearch.py -u https://target -r --max-recursion-depth 3
```
Use `python3 dirsearch.py -h` for common options or `python3 dirsearch.py -hh`
for the complete CLI help.
## Python API
dirsearch can also be used from Python code for local automation, MCP servers,
REST wrappers, and agent-controlled scans. The importable API keeps its
configuration in `FuzzerConfig`, so callers do not need to parse CLI flags or
mutate CLI globals.
See [Python API](docs/python-api.md) for examples covering templates, custom
wordlists, callbacks, authenticated sessions, and agent-oriented scan recipes.
## Contributing
Pull requests and feature requests are welcome. See [CONTRIBUTORS.md](CONTRIBUTORS.md) for the people who have helped improve dirsearch.
## License
Copyright (C) Mauro Soria (maurosoria@gmail.com)
License: GNU General Public License, version 2.