dirsearch
dirsearch is a free web path scanner used to discover hidden directories and files on web servers for pentesters assessing authorized targets.
0 upvotes · 0 downvotes
No ratings yet
- Pricing
- Free
- Platforms
- LinuxWindowsmacOS
- License
- Open source
- Reviewed
- Last reviewed 25 October 2026
- Links
- GitHub
What it is
A command-line brute-forcing tool that requests many paths from wordlists against a target site. Recent releases ship native binaries for Linux, Windows, and macOS as well as the classic Python entry point.
What it helps with
- Finding hidden admin panels and backup files
- Brute-forcing directories with custom wordlists
- Scanning many hosts in automated recon pipelines
- Exporting results for follow-up manual testing
Who it's for
Pentesters and bug bounty hunters assessing web apps they own or are authorized to test.
Worth knowing
There is no standalone LICENSE file in the repo root; source headers state GPL-2.0-or-later. Scans are noisy, so stay inside approved scope and rate limits.
Is it only a Python script now?
No, v0.5.0 also ships native Linux, Windows, and macOS binaries.
What should I use with it?
In our view Nuclei and Katana help after paths are found, and ZAP covers manual follow-up.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.