
Security News
NVD Quietly Sweeps 100K+ CVEs Into a “Deferred” Black Hole
NVD now marks all pre-2018 CVEs as "Deferred," signaling it will no longer enrich older vulnerabilities, further eroding trust in its data.
.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png
|
.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/pip-rating-badge/pip-rating-badge.svg :target: https://github.com/Nekmo/dirhunt/actions/workflows/pip-rating.yml :alt: pip-rating badge
.. image:: https://img.shields.io/github/actions/workflow/status/Nekmo/dirhunt/test.yml?style=flat-square&maxAge=2592000&branch=develop :target: https://github.com/Nekmo/dirhunt/actions?query=workflow%3ATests :alt: Latest Tests CI build status
.. image:: https://img.shields.io/pypi/v/dirhunt.svg?style=flat-square :target: https://pypi.org/project/dirhunt/ :alt: Latest PyPI version
.. image:: https://img.shields.io/pypi/pyversions/dirhunt.svg?style=flat-square :target: https://pypi.org/project/dirhunt/ :alt: Python versions
.. image:: https://img.shields.io/codeclimate/maintainability/Nekmo/dirhunt.svg?style=flat-square :target: https://codeclimate.com/github/Nekmo/dirhunt :alt: Code Climate
.. image:: https://img.shields.io/codecov/c/github/Nekmo/dirhunt/master.svg?style=flat-square :target: https://codecov.io/github/Nekmo/dirhunt :alt: Test coverage
.. image:: https://img.shields.io/github/stars/Nekmo/dirhunt?style=flat-square :target: https://github.com/Nekmo/dirhunt :alt: Github stars
Dirhunt #######
.. image:: https://asciinema.org/a/xPJXT0MhrvlZ8lJYJYkjxlice.png :target: https://asciinema.org/a/xPJXT0MhrvlZ8lJYJYkjxlice :align: center :alt: Dirhunt Demo Video
Dirhunt is a web crawler optimize for search and analyze directories. This tool can find interesting things if the server has the "index of" mode enabled. Dirhunt is also useful if the directory listing is not enabled. It detects directories with false 404 errors, directories where an empty index file has been created to hide things and much more.
.. code-block:: console
$ dirhunt http://website.com/
Dirhunt does not use brute force. But neither is it just a crawler. This tool is faster than others because it minimizes requests to the server. Generally, this tool takes between 5-30 seconds, depending on the website and the server.
Read more about how to use Dirhunt in the documentation <http://docs.nekmo.org/dirhunt/usage.html>
_.
If you have Pip installed on your system, you can use it to install the latest Dirhunt stable version::
$ sudo pip3 install dirhunt
Python 2.7 & 3.7-3.12 are supported but Python 3.x is recommended. Use pip2
on install for Python2.
There are other installation methods <http://docs.nekmo.org/dirhunt/installation.html>
_ available.
This software must not be used on third-party servers without permission. Dirhunt has been created to be used by audit teams with the consent of the owners of the website analyzed. The author is not responsible for the use of this tool outside the law.
This software is under the MIT license. The author does not provide any warranty. But issues and pull requests are welcome.
FAQs
Find web directories without bruteforce
We found that dirhunt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
NVD now marks all pre-2018 CVEs as "Deferred," signaling it will no longer enrich older vulnerabilities, further eroding trust in its data.
Research
Security News
Lazarus-linked threat actors expand their npm malware campaign with new RAT loaders, hex obfuscation, and over 5,600 downloads across 11 packages.
Security News
Safari 18.4 adds support for Iterator Helpers and two other TC39 JavaScript features, bringing full cross-browser coverage to key parts of the ECMAScript spec.