| name | dirsearch |
| description | Web path scanner for finding hidden directories and files. Use when you need to brute-force discover accessible paths, admin panels, backup files, or hidden endpoints on a web server. |
| compatibility | Requires dirsearch to be installed on the system. |
| metadata | {"category":"reconnaissance","tool":"dirsearch"} |
Dirsearch Skill
When to use this skill
Use this skill when the task involves:
- Discovering hidden directories and files
- Finding admin panels or login pages
- Locating backup files or source code leaks
- Enumerating API endpoints
Basic usage
Scan a single URL:
dirsearch -u <target>
Scan with specific extensions:
dirsearch -u <target> -e php,html,js,txt,bak
Use a custom wordlist:
dirsearch -u <target> -w /path/to/wordlist.txt
Common flags
| Flag | Description |
|---|
-u <url> | Target URL |
-e <exts> | Extensions to scan (comma-separated) |
-w <file> | Custom wordlist |
-t <threads> | Number of threads |
-r | Follow redirects |
-x <codes> | Exclude status codes |
-o <file> | Output file |
--json-report | Output in JSON format |
Safety
- Only scan targets you own or have explicit permission to test.
- High thread counts may overwhelm the target server; start with conservative settings.
