All Projects → stefanoj3 → Dirstalk

stefanoj3 / Dirstalk

Licence: mit
Modern alternative to dirbuster/dirb

Programming Languages

go
31211 projects - #10 most used programming language

Projects that are alternatives of or similar to Dirstalk

Payloadsallthethings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Stars: ✭ 32,909 (+15570.95%)
Mutual labels:  hacktoberfest, pentest, enumeration
Feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
Stars: ✭ 1,314 (+525.71%)
Mutual labels:  hacktoberfest, pentest, enumeration
AzureAD Autologon Brute
Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/
Stars: ✭ 90 (-57.14%)
Mutual labels:  bruteforce, enumeration, pentest
Bugbounty Starter Notes
bug bounty hunters starter notes
Stars: ✭ 85 (-59.52%)
Mutual labels:  hacktoberfest, enumeration
Dirsearch
Web path scanner
Stars: ✭ 7,246 (+3350.48%)
Mutual labels:  bruteforce, enumeration
Cloudfail
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
Stars: ✭ 1,239 (+490%)
Mutual labels:  pentest, bruteforce
Thc Hydra
hydra
Stars: ✭ 5,645 (+2588.1%)
Mutual labels:  pentest, bruteforce
Bruteforce Http Auth
Bruteforce HTTP Authentication
Stars: ✭ 107 (-49.05%)
Mutual labels:  pentest, bruteforce
Web Brutator
Fast Modular Web Interfaces Bruteforcer
Stars: ✭ 97 (-53.81%)
Mutual labels:  pentest, bruteforce
Awesome Vulnerable
A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
Stars: ✭ 133 (-36.67%)
Mutual labels:  hacktoberfest, pentest
Mida Multitool
Bash script purposed for system enumeration, vulnerability identification and privilege escalation.
Stars: ✭ 144 (-31.43%)
Mutual labels:  pentest, enumeration
Opendoor
OWASP WEB Directory Scanner
Stars: ✭ 586 (+179.05%)
Mutual labels:  pentest, bruteforce
Pyrdp
RDP man-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Stars: ✭ 567 (+170%)
Mutual labels:  hacktoberfest, pentest
Nosqlmap
Automated NoSQL database enumeration and web application exploitation tool.
Stars: ✭ 1,928 (+818.1%)
Mutual labels:  hacktoberfest, enumeration
Asnlookup
Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
Stars: ✭ 163 (-22.38%)
Mutual labels:  pentest, enumeration
Ssrfmap
Automatic SSRF fuzzer and exploitation tool
Stars: ✭ 1,344 (+540%)
Mutual labels:  hacktoberfest, pentest
Intrec Pack
Intelligence and Reconnaissance Package/Bundle installer.
Stars: ✭ 177 (-15.71%)
Mutual labels:  pentest, enumeration
Justtryharder
JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)
Stars: ✭ 450 (+114.29%)
Mutual labels:  hacktoberfest, pentest
Dictionary Of Pentesting
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
Stars: ✭ 492 (+134.29%)
Mutual labels:  pentest, bruteforce
O365spray
Username enumeration and password spraying tool aimed at Microsoft O365.
Stars: ✭ 133 (-36.67%)
Mutual labels:  pentest, enumeration

Dirstalk

codecov Scrutinizer Code Quality Docker Pulls GitHub

Dirstalk is a multi threaded application designed to brute force paths on web servers.

The tool contains functionalities similar to the ones offered by dirbuster and dirb.

Here you can see it in action: asciicast

Contents

How to use it

The application is self-documenting, launching dirstalk -h will return all the available commands with a short description, you can get the help for each command by doing distalk <command> -h.

EG dirstalk result.diff -h

Scan

To perform a scan you need to provide at least a dictionary and a URL:

dirstalk scan http://someaddress.url/ --dictionary mydictionary.txt

As mentioned before, to see all the flags available for the scan command you can just call the command with the -h flag:

dirstalk scan -h
Example of how you can customize a scan:
dirstalk scan http://someaddress.url/ \
--dictionary mydictionary.txt \
--http-methods GET,POST \
--http-timeout 10000 \
--scan-depth 10 \
--threads 10 \
--socks5 127.0.0.1:9150 \
--cookie name=value \
--use-cookie-jar \
--user-agent my_user_agent \
--header "Authorization: Bearer 123"
Currently available flags:
      --cookie stringArray             cookie to add to each request; eg name=value (can be specified multiple times)
  -d, --dictionary string              dictionary to use for the scan (path to local file or remote url)
      --header stringArray             header to add to each request; eg name=value (can be specified multiple times)
  -h, --help                           help for scan
      --http-cache-requests            cache requests to avoid performing the same request multiple times within the same scan (EG if the server reply with the same redirect location multiple times, dirstalk will follow it only once) (default true)
      --http-methods strings           comma separated list of http methods to use; eg: GET,POST,PUT (default [GET])
      --http-statuses-to-ignore ints   comma separated list of http statuses to ignore when showing and processing results; eg: 404,301 (default [404])
      --http-timeout int               timeout in milliseconds (default 5000)
      --out string                     path where to store result output
      --scan-depth int                 scan depth (default 3)
      --socks5 string                  socks5 host to use
  -t, --threads int                    amount of threads for concurrent requests (default 3)
      --use-cookie-jar                 enables the use of a cookie jar: it will retain any cookie sent from the server and send them for the following requests
      --user-agent string              user agent to use for http requests
Useful resources
  • here you can find dictionaries that can be used with dirstalk
  • tordock is a containerized Tor SOCKS5 that you can use easily with dirstalk (just docker run -d -p 127.0.0.1:9150:9150 stefanoj3/tordock:latest and then when launching a scan specify the following flag: --socks5 127.0.0.1:9150)

Dictionary generator

Dirstalk can also produce it's own dictionaries, useful for example if you want to check if a specific set of files is available on a given web server.

Example:
dirstalk dictionary.generate /path/to/local/files --out mydictionary.txt

The result will be printed to the stdout if no out flag is specified.

Download

You can download a release from here or you can use a docker image. (eg docker run stefanoj3/dirstalk dirstalk <cmd>)

If you are using an arch based linux distribution you can fetch it via AUR: https://aur.archlinux.org/packages/dirstalk/

Example:

yay -S aur/dirstalk

Development

All you need to do local development is to have make and golang available and the GOPATH correctly configured.

Then you can just clone the project, enter the folder and:

make dep                                     # to fetch dependencies
make tests                                   # to run the test suite
make check                                   # to check for any code style issue
make fix                                     # to automatically fix the code style using goimports
make build                                   # to build an executable for your host OS (not tested under windows) 
make help

will print a description of every command available in the Makefile.

Wanna add a functionality? fix a bug? fork and create a PR.

Plans for the future

  • Add support for rotating SOCKS5 proxies
  • Scan a website pages looking for links to bruteforce
  • Expose a webserver that can be used to launch scans and check their status
  • Introduce metrics that can give a sense of how much of the dictionary was found on the remote server
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].