dirsearch

Advanced web path brute-forcer.

KaliParrotmedium

pkg: dirsearch

dirsearch brute-forces directories and files with smart extensions, recursion and filtering.

Syntax

dirsearch -u {url} -e {ext}

Example

dirsearch -u https://example.com -e php,bak,zip

Brute-forces paths trying php/bak/zip extensions.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-u <https://target.tld>Target URL.
-e <php,bak,zip>Extensions to test, e.g. php,asp,bak.
-w <wordlist.txt>Custom wordlist.
-x <404,403>Exclude these status codes.
-rRecursive scanning.
-t <30>Threads.
--cookie <SESSION=abc>Cookie for authenticated scans.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

dirsearch

Usage examples

dirsearch -u https://target.tld -e php,bak,zip

Scan trying common backup/source extensions.

dirsearch -u https://target.tld -r -x 404,403

Recursive scan hiding 404/403.

Advantages
  • Great defaults + wordlists
  • Recursion & filtering
Disadvantages
  • Noisy
  • Wordlist-dependent
Tags
#web#content-discovery

Official docs: dirsearch

Related commands

Frequently asked questions

What is dirsearch used for?
dirsearch brute-forces directories and files with smart extensions, recursion and filtering.
What is an example dirsearch command?
A common example is: dirsearch -u https://example.com -e php,bak,zip — Brute-forces paths trying php/bak/zip extensions.
Is dirsearch part of Kali Linux?
Yes. dirsearch ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install dirsearch.
What category of security tool is dirsearch?
dirsearch is a Web Application tool with a medium-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →