> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/enum/web-discovery/dirsearch.md).

# Dirsearch

dirsearch is an advanced web path brute-forcer

This package contains is a command-line tool designed to brute force directories and files in webservers.

As a feature-rich tool, dirsearch gives users the opportunity to perform a complex web content discovering, with many vectors for the wordlist, high accuracy, impressive performance, advanced connection/request settings, modern brute-force techniques and nice output.

## Directory/file enumeration mode <a href="#directory-file-enumeration-mode" id="directory-file-enumeration-mode"></a>

Scan for directories and files with specific extensions (`-e`), follow redirects (`-F`) and do a recursively scan (`-r`). The number of threads is set to 32 with `-t 32`.

```bash
dirsearch -w /usr/share/wordlists/dirbuster/directory-list-2.3-small.txt -F -r -t 32 -e php,txt,html -u http://$TARGET_IP
```

## Resources

Dirsearch - GitHub: <https://github.com/maurosoria/dirsearch>

Dirsearch - Kali Tools: <https://www.kali.org/tools/dirsearch/>