DIRB Directory ScannerStep-by-step reference: find hidden web objects with DIRB wordlists. Lab use only.FAQ

What is DIRB?

DIRB is a free, open-source web content scanner on Kali. It dictionary-attacks web paths with wordlists, reporting interesting status codes, with extension appending, cookies, and auth support.

Is using DIRB legal?

DIRB itself is legitimate open-source software. Scanning sites without explicit written permission is illegal. Use it only on lab apps or signed targets with gentle settings.

How do I install DIRB?

It ships with Kali. Elsewhere run sudo apt install dirb -y. Bundled wordlists live under /usr/share/dirb/wordlists.

How do I scan a lab app?

Run dirb against the authorized URL with defaults. Read codes: 200 to open, 301 to follow, 403 to revisit with new techniques.

How do I scan behind a login?

Pass the lab session with -c cookie string or HTTP auth with -u user:pass. Refresh expired cookies and rerun.

What is the difference between DIRB and Feroxbuster?

DIRB is the single-threaded classic ideal for first passes and learning. Feroxbuster adds recursion, speed, and filtering for deep professional runs.

Why is everything 200?

Wildcard responses. Filter by baseline content length mentally and verify each survivor by actual content.

How do defenders respond?

Remove unneeded files, block directory listing, monitor for wordlist bursts, and rate-limit or challenge enumeration patterns.

All tools · Sitemap · Games