目录扫描工具dirsearch-master

资源内容介绍

目录扫描工具Dirsearch是一款基于Python开发的强大工具，专门用于扫描网站中的潜在敏感目录和文件。该工具能够自动化地执行攻击，提高渗透测试人员的工作效率。Dirsearch支持多线程扫描，能够快速地识别出目标网站中的目录结构，从而帮助用户发现潜在的安全漏洞。Dirsearch的主要功能包括：1. 支持多种协议：Dirsearch支持HTTP、HTTPS和SOCKET等协议，能够针对不同类型的网站进行扫描。2. 自定义字典：Dirsearch允许用户使用自定义字典进行扫描，提高扫描的准确性和效率。用户可以根据目标网站的目录结构，定制专用的字典文件。3. 多线程扫描：Dirsearch支持多线程扫描，能够快速地识别出目标网站中的目录结构。用户可以根据自己的需求，设置合适的线程数。4. 扫描结果保存：Dirsearch可以将扫描结果保存为文本、XML、JSON等多种格式，方便用户对扫描结果进行分析和整理。5. 目录递归扫描：Dirsearch支持目录递归扫描，能够深入挖掘目标网站中的子目录，提高扫描的全面性。6. 扫描状态显示：Dirsearch在扫描过程中会实时显示

<img src="static/logo.png" alt="dirsearch" width="675px">dirsearch - Web path discovery=========<a href="https://twitter.com/intent/tweet?text=dirsearch - Web path scanner by @_maurosoriahttps://github.com/maurosoria/dirsearch"> </a>**Current Release: v0.4.2 (2021.9.12)**An advanced command-line tool designed to brute force directories and files in webservers, AKA web path scanner**dirsearch** is being actively developed by [@maurosoria](https://twitter.com/_maurosoria) and [@shelld3v](https://twitter.com/shells3c_)Table of Contents------------* [Installation](#installation--usage)* [Wordlists](#wordlists-important)* [Options](#options)* [Configuration](#configuration)* [How to use](#how-to-use) * [Simple usage](#simple-usage) * [Pausing progress](#pausing-progress) * [Recursion](#recursion) * [Threads](#threads) * [Prefixes / Suffixes](#prefixes--suffixes) * [Blacklist](#blacklist) * [Filters](#filters) * [Raw request](#raw-request) * [Wordlist formats](#wordlist-formats) * [Exclude extensions](#exclude-extensions) * [Scan sub-directories](#scan-sub-directories) * [Proxies](#proxies) * [Reports](#reports) * [More example commands](#more-example-commands)* [Support Docker](#support-docker) * [Install Docker Linux](#install-docker-linux) * [Build Image dirsearch](#build-image-dirsearch) * [Using dirsearch](#using-dirsearch)* [References](#references)* [Tips](#tips)* [Contribution](#contribution)* [License](#license)Installation & Usage------------**Requirement: python 3.7 or higher**Choose one of these installation options:- Install with git: `git clone https://github.com/maurosoria/dirsearch.git` (RECOMMENDED)- Install with ZIP file: [Download here](https://github.com/maurosoria/dirsearch/archive/master.zip)- Install with Docker: `docker build -t "dirsearch:v0.4.1"` (more information can be found [here](https://github.com/maurosoria/dirsearch#support-docker))- Install with PyPi: `pip3 install dirsearch`- Install with Kali Linux: `sudo apt-get install dirsearch` (deprecated)**All in one:**```git clone https://github.com/maurosoria/dirsearch.gitcd dirsearchpip3 install -r requirements.txtpython3 dirsearch.py -u <URL> -e <EXTENSIONS>```Wordlists (IMPORTANT)---------------**Summary:** - Wordlist is a text file, each line is a path. - About extensions, unlike other tools, dirsearch only replaces the `%EXT%` keyword with extensions from **-e** flag. - For wordlists without `%EXT%` (like [SecLists](https://github.com/danielmiessler/SecLists)), **-f | --force-extensions** switch is required to append extensions to every word in wordlist, as well as the `/`. - To apply your extensions to wordlist entries that have extensions already, use **-O** | **--overwrite-extensions** (Note: some extensions are excluded from being overwritted such as *.log*, *.json*, *.xml*, ... or media extensions like *.jpg*, *.png*) - To use multiple wordlists, you can separate your wordlists with commas. Example: `wordlist1.txt,wordlist2.txt`.**Examples:**- *Normal extensions*:```index.%EXT%```Passing **asp** and **aspx** as extensions will generate the following dictionary:```indexindex.aspindex.aspx```- *Force extensions*:```admin```Passing **php** and **html** as extensions with **-f**/**--force-extensions** flag will generate the following dictionary:```adminadmin.phpadmin.htmladmin/```- *Overwrite extensions*:```login.html```Passing **jsp** and **jspa** as extensions with **-O**/**--overwrite-extensions** flag will generate the following dictionary:```login.htmllogin.jsplogin.jspa```Options-------```Usage: dirsearch.py [-u|--url] target [-e|--extensions] extensions [options]Options: --version show program's version number and exit -h, --help show this help message and exit Mandatory: -u URL, --url=URL Target URL(s), support multiple flags -l PATH, --url-file=PATH URL list file --stdin Read URL(s) from STDIN --cidr=CIDR Target CIDR --raw=PATH Load raw HTTP request from file &#40;use `--scheme` flag to set the scheme&#41; -s SESSION_FILE, --session=SESSION_FILE Session file --config=PATH Full path to config file, see 'default.conf' for example (Default: default.conf) Dictionary Settings: -w WORDLIST, --wordlists=WORDLIST Customize wordlists (separated by commas) -e EXTENSIONS, --extensions=EXTENSIONS Extension list separated by commas (e.g. php,asp) -f, --force-extensions Add extensions to the end of every wordlist entry. By default dirsearch only replaces the %EXT% keyword with extensions -O, --overwrite-extensions Overwrite other extensions with your extensions (selected via `-e`) --exclude-extensions=EXTENSIONS Exclude extension list separated by commas (e.g. asp,jsp) --remove-extensions Remove extensions in all paths (e.g. admin.php -> admin) --prefixes=PREFIXES Add custom prefixes to all wordlist entries (separated by commas) --suffixes=SUFFIXES Add custom suffixes to all wordlist entries, ignore directories (separated by commas) -U, --uppercase Uppercase wordlist -L, --lowercase Lowercase wordlist -C, --capital Capital wordlist General Settings: -t THREADS, --threads=THREADS Number of threads -r, --recursive Brute-force recursively --deep-recursive Perform recursive scan on every directory depth (e.g. api/users -> api/) --force-recursive Do recursive brute-force for every found path, not only directories -R DEPTH, --max-recursion-depth=DEPTH Maximum recursion depth --recursion-status=CODES Valid status codes to perform recursive scan, support ranges (separated by commas) --subdirs=SUBDIRS Scan sub-directories of the given URL[s] (separated by commas) --exclude-subdirs=SUBDIRS Exclude the following subdirectories during recursive scan (separated by commas) -i CODES, --include-status=CODES Include status codes, separated by commas, support ranges (e.g. 200,300-399) -x CODES, --exclude-status=CODES Exclude status codes, separated by commas, support ranges (e.g. 301,500-599) --exclude-sizes=SIZES Exclude responses by sizes, separated by commas (e.g. 0B,4KB) --exclude-texts=TEXTS Exclude responses by texts, separated by commas (e.g. 'Not found', 'Error') --exclude-regex=REGEX Exclude responses by regex (e.g. '^Error$') --exclude-redirect=STRING Exclude responses if this regex (or text) matches redirect URL (e.g. '/index.html') --exclude-response=PATH Exclude responses