https://github.com/sha0coder/dirscan
Web directory scanner
https://github.com/sha0coder/dirscan
Last synced: 8 months ago
JSON representation
Web directory scanner
- Host: GitHub
- URL: https://github.com/sha0coder/dirscan
- Owner: sha0coder
- Created: 2015-07-19T23:17:54.000Z (over 10 years ago)
- Default Branch: master
- Last Pushed: 2020-09-21T19:50:58.000Z (over 5 years ago)
- Last Synced: 2025-03-30T14:41:56.333Z (9 months ago)
- Language: Go
- Homepage:
- Size: 3.45 MB
- Stars: 5
- Watchers: 3
- Forks: 6
- Open Issues: 0
-
Metadata Files:
- Readme: README
Awesome Lists containing this project
README
== intro ==
Fast web resources identificator, combines crawling with bruteforcing.
This can open attack vectors, and is very useful for pentests.
==credits==
@sha0coder
== usage ==
$ ./dirscan --help
Usage of ./dirscan:
-dict="": the wordlist
-go=5: num of concurrent goroutines
-lang="": language (java, asp or php)
-proxy="": set proxy ip:port
-url="": the url
== examples ==
./dirscan -url http://site.com/ -dict wordlists/big.txt -lang php -go 20
== todo ==
- audodetect operative system, and if is windows avoid com,com1,prn,nul,aux ... and be case insensitive
- if crawler detects test1.php the bruter should test other numbers test2.php, test3.php ...
== dificult situations ==
- two or more balanced ws, give different response against non existent file, this confuse dirscan's output
- how to differentiate a file than a directory? some times this seems impossible