Web path scanner
Clone or download
Latest commit 37c54d1 Oct 5, 2018



Current Release: v0.3.8 (2017.07.25)


dirsearch is a simple command line tool designed to brute force directories and files in websites.

Operating Systems supported

  • Windows XP/7/8/10
  • GNU/Linux
  • MacOSX


  • Multithreaded
  • Keep alive connections
  • Support for multiple extensions (-e|--extensions asp,php)
  • Reporting (plain text, JSON)
  • Heuristically detects invalid web pages
  • Recursive brute forcing
  • HTTP proxy support
  • User agent randomization
  • Batch processing
  • Request delaying

About wordlists

Dictionaries must be text files. Each line will be processed as such, except that the special word %EXT% is used, which will generate one entry for each extension (-e | --extension) passed as an argument.


  • example/
  • example.%EXT%

Passing the extensions "asp" and "aspx" will generate the following dictionary:

  • example/
  • example.asp
  • example.aspx

You can also use -f | --force-extensions switch to append extensions to every word in the wordlists (like DirBuster).


Copyright (C) Mauro Soria (maurosoria at gmail dot com)

License: GNU General Public License, version 2


Special thanks for these people.

  • Bo0oM
  • liamosaur
  • redshark1802
  • FireFart
  • k2l8m11n2
  • vlohacks
  • r0p0s3c