DIRB

Classic recursive web content scanner.

KaliParrotmedium

pkg: dirb

DIRB brute-forces web content using wordlists with built-in recursion — a simple, dependable directory scanner.

Syntax

dirb {url} [wordlist]

Example

dirb https://example.com

Scans the site recursively with the default wordlist.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-X <.php,.bak>File extensions to test, e.g. .php,.bak.
-o <out.txt>Save output to a file.
-c <SESSION=abc>Set a cookie for authenticated scans.
-H <Header: value>Add a custom header.
-p <127.0.0.1:8080>Use a proxy host:port.
-rDo not recurse into found directories.
-SSilent mode (do not show tested words).

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

dirb URL

Usage examples

dirb https://target.tld

Recursive scan with the default wordlist.

dirb https://target.tld wordlist.txt -X .php,.bak

Use a custom list and extensions.

Advantages
  • Recursion out of the box
  • No flags needed to start
  • Bundled wordlists
Disadvantages
  • Slower than Go-based tools
  • Dated; less maintained
  • Limited response filtering
Tags
#web#content-discovery

Official docs: DIRB

Related commands

Frequently asked questions

What is DIRB used for?
DIRB brute-forces web content using wordlists with built-in recursion — a simple, dependable directory scanner.
What is an example DIRB command?
A common example is: dirb https://example.com — Scans the site recursively with the default wordlist.
Is DIRB part of Kali Linux?
Yes. DIRB ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install dirb.
What category of security tool is DIRB?
DIRB is a Web Application tool with a medium-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →