recon_directory_bruteforce
Discover hidden directories and files on web servers by systematically testing common paths and extensions with parallel HTTP requests for security testing and reconnaissance.
Instructions
Directory brute-force using parallel curl requests. Returns results (path/status/length), found_count, and paths_tested. Read-only GET requests, sends one request per wordlist entry per extension.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | Base URL, e.g. https://example.com | |
| wordlist | No | Path to wordlist file. Uses built-in common paths if not provided. | |
| threads | No | Concurrent request count | |
| extensions | No | Comma-separated extensions to append, e.g. 'php,html,txt' |