feroxbuster
Feroxbuster is a powerful command-line tool designed for directory and file discovery on web servers. It can be used to find hidden or unexpected files and directories on a website, which is useful for security testing, bug bounty hunting, and general website analysis.
Some key features of feroxbuster include:
-
Fast and efficient scanning: Feroxbuster is built to be highly performant, allowing quick scanning of websites for hidden content.
-
Recursive and non-recursive scanning: It offers both recursive and non-recursive directory scanning modes, allowing users to choose between searching only in the specified directory or exploring subdirectories as well.
-
Flexible wordlist-based enumeration: Feroxbuster relies on wordlists to generate potential paths and filenames for crawling. Users can provide custom wordlists or choose from a range of built-in wordlists, enabling them to tailor the tool to their specific needs.
-
Output customization: The output generated by feroxbuster can be customized to display only the desired information. This makes it easier to extract meaningful results from large scans.
-
Powerful filtering and exclusions: Feroxbuster provides multiple filtering options to exclude specific files, directories, or specific response codes. This allows users to focus on relevant content and avoid scanning unnecessary paths.
-
Multi-threaded scanning: To speed up the scanning process, feroxbuster utilizes multi-threading, allowing multiple requests to be made simultaneously.
Overall, feroxbuster is a versatile and efficient command-line tool that helps identify hidden files and directories on web servers, making it an invaluable asset for website security testing and reconnaissance tasks.
List of commands for feroxbuster:
-
feroxbuster:tldr:28740 feroxbuster: Discover specific directories and files that match in the wordlist with extensions and 100 threads and a random user-agent.$ feroxbuster --url "${https:--example-com}" --wordlist ${filename} --threads ${100} --extensions "${php,txt}" --random-agenttry on your machineexplain this command
-
feroxbuster:tldr:2997f feroxbuster: Filter by a specific status code and a number of chars.$ feroxbuster --url "${https:--example-com}" --filter-status ${301} --filter-size ${4092}try on your machineexplain this command
-
feroxbuster:tldr:65c59 feroxbuster: Find links in webpages.$ feroxbuster --url "${https:--example-com}" --extract-linkstry on your machineexplain this command
-
feroxbuster:tldr:f5f49 feroxbuster: Enumerate directories without recursion through a specific proxy.$ feroxbuster --url "${https:--example-com}" --wordlist ${filename} --no-recursion --proxy "${http:--127-0-0-1:8080}"try on your machineexplain this command