Author: Gray
License: MIT License
Description: Easy to use async directory brute forcing tool with advanced capabilities. Dartbuster is a cross platform tool written in dart with significant performance enhancements that really make it an effective choice over pre-existing tools.
Dartbuster is available as an AUR package.
yay -S dartbuster# Download the repository with
$ git clone https://github.com/GrayWasTaken/dartbuster.git
# Option 1: Run using pre-built binary.
# By default Dartbuster comes with a prebuilt binary to execute.
$ ./dartbuster/bin/dartbuster
# Option 2: Build your own binary from source.
# Make sure you have the dart sdk installed and corresponding dependencies.
$ cd dartbuster/
$ pub get
$ dart2native ./bin/dartbuster.dart -o bin/dartbuster
- Real time scan progress and information
- 10 built in wordlists
- 4 built in extension lists
- Built in user agents
- Rotates user agent per request (optional)
- Supports custom wordlists, extensions, and user agents
- Multithreaded and option to specify threadcount
- Specify delay
- Specify timeout
- Supports output files
- Option to hide or show 404 responses
- Specify custom cookies
- Automatically skips common fuzzing traps such as endless redirects and optionally prints to screen
- Pre and post scan report
- Fully cross platform
- Asynchronous by nature so multiple requests will occur concurrently on a single thread
The help screen has all the information you'd need, but here are some hopefully useful examples:
# Prints help screen
$ dartbuster -h
# Starts fuzzing the "example.com" website, with 50 threads using wordlist apache-user-enum-1.0.txt
$ dartbuster scan -u https://example.com -T 50 -w apache-user-enum-1.0.txt
# Starts fuzzing the "example.com" website, with the extensions .pdf, .html, .css
$ dartbuster scan -u https://example.com -e .pdf,.html,.css
# Prints built in extension and word lists
$ dartbuster list
# Prints built in useragents
$ dartbuster useragents- Add recursion for directories.
- Add exclusion flags.
- Possibly stop get requests where the fetched content exceeds a certain size, ie: if webserver starts an endless file stream.
- Implement isolates 2.
MIT License
Copyright (c) 2020 Gray
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.