GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → Nekmo → Dirhunt

Nekmo / Dirhunt

Licence: mit
Find web directories without bruteforce

Programming Languages

python
139335 projects - #7 most used programming language

Labels

securitysecurity-toolspentestingcrawler

Projects that are alternatives of or similar to Dirhunt

Hashview
A web front-end for password cracking and analytics
Stars: ✭ 601 (-38.86%)
Mutual labels:  security-tools, pentesting
Social Analyzer
API, CLI & Web App for analyzing & finding a person's profile across +1000 social media \ websites (Detections are updated regularly by automated systems)
Stars: ✭ 8,449 (+759.51%)
Mutual labels:  pentesting, security-tools
Habu
Hacking Toolkit
Stars: ✭ 635 (-35.4%)
Mutual labels:  security-tools, pentesting
Stowaway
👻Stowaway -- Multi-hop Proxy Tool for pentesters
Stars: ✭ 500 (-49.14%)
Mutual labels:  security-tools, pentesting
Dumpsterfire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Stars: ✭ 775 (-21.16%)
Mutual labels:  security-tools, pentesting
Security Tools
Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.
Stars: ✭ 509 (-48.22%)
Mutual labels:  security-tools, pentesting
Exploitpack
Exploit Pack -The next generation exploit framework
Stars: ✭ 728 (-25.94%)
Mutual labels:  security-tools, pentesting
Hosthunter
HostHunter a recon tool for discovering hostnames using OSINT techniques.
Stars: ✭ 427 (-56.56%)
Mutual labels:  security-tools, pentesting
Ksubdomain
无状态子域名爆破工具
Stars: ✭ 976 (-0.71%)
Mutual labels:  security-tools, pentesting
Evillimiter
Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.
Stars: ✭ 764 (-22.28%)
Mutual labels:  security-tools, pentesting
Mxtract
mXtract - Memory Extractor & Analyzer
Stars: ✭ 499 (-49.24%)
Mutual labels:  security-tools, pentesting
Torbot
Dark Web OSINT Tool
Stars: ✭ 821 (-16.48%)
Mutual labels:  crawler, security-tools
Sn1per
Attack Surface Management Platform | Sn1perSecurity LLC
Stars: ✭ 4,897 (+398.17%)
Mutual labels:  pentesting, security-tools
Yasuo
A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network
Stars: ✭ 517 (-47.41%)
Mutual labels:  security-tools, pentesting
Fireelf
fireELF - Fileless Linux Malware Framework
Stars: ✭ 435 (-55.75%)
Mutual labels:  security-tools, pentesting
Spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Stars: ✭ 6,882 (+600.1%)
Mutual labels:  pentesting, security-tools
Packetwhisper
PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
Stars: ✭ 405 (-58.8%)
Mutual labels:  security-tools, pentesting
Otseca
Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.
Stars: ✭ 416 (-57.68%)
Mutual labels:  security-tools, pentesting
Diamorphine
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)
Stars: ✭ 725 (-26.25%)
Mutual labels:  security-tools, pentesting
Sprayingtoolkit
Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient
Stars: ✭ 802 (-18.41%)
Mutual labels:  security-tools, pentesting
View All Similar Projects ➔

.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png

|

.. image:: https://img.shields.io/github/workflow/status/Nekmo/dirhunt/Tests.svg?style=flat-square&maxAge=2592000 :target: https://github.com/Nekmo/dirhunt/actions?query=workflow%3ATests :alt: Latest Tests CI build status

.. image:: https://img.shields.io/pypi/v/dirhunt.svg?style=flat-square :target: https://pypi.org/project/dirhunt/ :alt: Latest PyPI version

.. image:: https://img.shields.io/pypi/pyversions/dirhunt.svg?style=flat-square :target: https://pypi.org/project/dirhunt/ :alt: Python versions

.. image:: https://img.shields.io/codeclimate/maintainability/Nekmo/dirhunt.svg?style=flat-square :target: https://codeclimate.com/github/Nekmo/dirhunt :alt: Code Climate

.. image:: https://img.shields.io/codecov/c/github/Nekmo/dirhunt/master.svg?style=flat-square :target: https://codecov.io/github/Nekmo/dirhunt :alt: Test coverage

.. image:: https://img.shields.io/requires/github/Nekmo/dirhunt.svg?style=flat-square :target: https://requires.io/github/Nekmo/dirhunt/requirements/?branch=master :alt: Requirements Status

Dirhunt #######

.. image:: https://asciinema.org/a/xPJXT0MhrvlZ8lJYJYkjxlice.png :target: https://asciinema.org/a/xPJXT0MhrvlZ8lJYJYkjxlice :align: center :alt: Dirhunt Demo Video

Dirhunt is a web crawler optimize for search and analyze directories. This tool can find interesting things if the server has the "index of" mode enabled. Dirhunt is also useful if the directory listing is not enabled. It detects directories with false 404 errors, directories where an empty index file has been created to hide things and much more.

.. code-block:: console

$ dirhunt http://website.com/

Dirhunt does not use brute force. But neither is it just a crawler. This tool is faster than others because it minimizes requests to the server. Generally, this tool takes between 5-30 seconds, depending on the website and the server.

Read more about how to use Dirhunt in the documentation <http://docs.nekmo.org/dirhunt/usage.html>_.

Features

  • Process one or multiple sites at a time.
  • Process 'Index Of' pages and report interesting files.
  • Detect redirectors.
  • Detect blank index file created on directory to hide things.
  • Process some html files in search of new directories.
  • 404 error pages and detect fake 404 errors.
  • Filter results by flags.
  • Analyze results at end. It also processes date & size of the Index Pages.
  • Get new directories using robots.txt, VirusTotal & Google.
  • Delay between requests.
  • One or multiple proxies option. It can also search for free proxies.
  • Save the results to a JSON file (NEW!)
  • Resume the aborted scans (NEW!)

Install

If you have Pip installed on your system, you can use it to install the latest Dirhunt stable version::

$ sudo pip3 install dirhunt

Python 2.7 & 3.5-3.8 are supported but Python 3.x is recommended. Use pip2 on install for Python2.

There are other installation methods <http://docs.nekmo.org/dirhunt/installation.html>_ available.

Disclaimer

This software must not be used on third-party servers without permission. Dirhunt has been created to be used by audit teams with the consent of the owners of the website analyzed. The author is not responsible for the use of this tool outside the law.

This software is under the MIT license. The author does not provide any warranty. But issues and pull requests are welcome.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].