dirsearch
Web path scanner
Details
Category: Discovery
Publisher: trickest
Created Date: 6/23/2021
Container: quay.io/trickest/dirsearch:2d21d63
Source URL: https://github.com/maurosoria/dirsearch
Parameters
Command:
--ip - Server IP addressCommand:
--raw - Load raw HTTP request from file (use '--scheme' flag to set the scheme)Command:
--tor - Use Tor network as proxyCommand:
--url - Target URL(s), can use multiple flagsCommand:
--auth - Authentication credential (e.g. user:password or bearer token)Command:
--cidr - Target CIDRCommand:
--data - HTTP request dataCommand:
--crawl - Crawl for new paths in responsesCommand:
--delay - Delay between requestsCommand:
--proxy - Proxy URL (HTTP/SOCKS), can use multiple flagsCommand:
--config - Path to configuration fileCommand:
--cookie - CookieCommand:
--format - Report format (Available: simple,plain,json,xml,md,csv,html,sqlite,mysql,postgresql)Command:
--header - HTTP request header, can use multiple flagsCommand:
--scheme - Scheme for raw request or if there is no scheme in the URL (Default: auto-detect)Command:
--capital - Capital wordlistCommand:
--retries - Number of retries for failed requestsCommand:
--session - Session fileCommand:
--subdirs - Scan sub-directories of the given URL[s] (separated by commas)Command:
--threads - Number of threadsCommand:
--timeout - Connection timeoutCommand:
--full-url - Full URLs in the output (enabled automatically in quiet mode)Command:
--key-file - File contains client-side certificate private key (unencrypted)Command:
--max-rate - Max requests per secondCommand:
--max-time - Maximum runtime for the scanCommand:
--no-color - No colored outputCommand:
--prefixes - Add custom prefixes to all wordlist entries (separated by commas)Command:
--suffixes - Add custom suffixes to all wordlist entries, ignore directories (separated by commas)Command:
--wordlists - Wordlist fileCommand:
--auth-type - Authentication type (basic, digest, bearer, ntlm, jwt)Command:
--cert-file - File contains client-side certificateCommand:
--data-file - File contains HTTP request dataCommand:
--interface - Network interface to useCommand:
--lowercase - Lowercase wordlistCommand:
--recursive - Brute-force recursivelyCommand:
--uppercase - Uppercase wordlistCommand:
--urls-file - URL list fileCommand:
--wordlists - Wordlists folderCommand:
--extensions - Extension list separated by commas (e.g. php,asp)Command:
--proxy-auth - Proxy authentication credentialCommand:
--quiet-mode - Quiet modeCommand:
--user-agent - User agentCommand:
--http-method - HTTP method (default: GET)Command:
--nmap-report - Load targets from nmap report (Ensure the inclusion of the -sV flag during nmap scan for comprehensive results)Command:
--exclude-text - Exclude responses by text, can use multiple flagsCommand:
--headers-file - File contains HTTP request headersCommand:
--proxies-file - File contains proxy serversCommand:
--random-agent - Choose a random User-Agent for each requestCommand:
--replay-proxy - Proxy to replay with found pathsCommand:
--exclude-regex - Exclude responses by regular expressionCommand:
--exclude-sizes - Exclude responses by sizes, separated by commas (e.g. 0B,4KB)Command:
--exit-on-error - Exit whenever an error occursCommand:
--deep-recursive - Perform recursive scan on every directory depth (e.g. api/users -> api/)Command:
--exclude-status - Exclude status codes, separated by commas, support ranges (e.g. 301,500-599)Command:
--include-status - Include status codes, separated by commas, support ranges (e.g. 200,300-399)Command:
--skip-on-status - Skip target whenever hit one of these status codes, separated by commas, support rangesCommand:
--exclude-subdirs - Exclude the following subdirectories during recursive scan (separated by commas)Command:
--force-recursive - Do recursive brute-force for every found path, not only directoriesCommand:
--exclude-redirect - Exclude responses if this regex (or text) matches redirect URL (e.g. '/index.html')Command:
--exclude-response - Exclude responses similar to response of this page, path as input (e.g. 404.html)Command:
--follow-redirects - Follow HTTP redirectsCommand:
--force-extensions - Add extensions to the end of every wordlist entry. By default dirsearch only replaces the %EXT% keyword with extensionsCommand:
--recursion-status - Valid status codes to perform recursive scan, support ranges (separated by commas)Command:
--max-response-size - Maximum response lengthCommand:
--min-response-size - Minimum response lengthCommand:
--redirects-history - Show redirects historyCommand:
--remove-extensions - Remove extensions in all paths (e.g. admin.php -> admin)Command:
--exclude-extensions - Exclude extension list separated by commas (e.g. asp,jsp)Command:
--max-recursion-depth - Maximum recursion depthCommand:
--overwrite-extensions - Overwrite other extensions in the wordlist with your extensions (selected via `-e`)