dirb
Scans web servers with dictionary-based wordlists to discover hidden directories and files, revealing potential attack surfaces.
Instructions
Classic web content scanner using dictionary-based attacks to find hidden directories and files. Simpler than gobuster — good for quick scans with built-in wordlists. Use when you want a straightforward directory scan without configuring many options. Output: list of found paths with HTTP response codes. Non-recursive by default.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| opts | No | Additional dirb options (e.g. '-X .php,.txt' for specific extensions) | |
| target | Yes | Target URL (e.g. http://192.168.1.10) | |
| wordlist | No | Wordlist path. Default: /usr/share/wordlists/dirb/common.txt |