Feroxbuster

What it is

Feroxbuster is a free open-source content-discovery tool written in Rust by epi052 (github.com/epi052/feroxbuster). In authorised web assessments and Hack The Box Academy web and bug-bounty style modules, it recursively brute-forces directories and files to map hidden application surfaces beside peers such as Gobuster and ffuf.

What it helps with

- Recursively discovering directories, files and endpoints on authorised web targets.
- Using wordlists and filters tuned for modern web app enumeration workflows taught in HTB-style labs.
- Running high-throughput scans with a Rust implementation suited to longer content-discovery jobs.
- Complementing Nikto, WPScan and proxy tooling during structured web engagement phases.
- Supporting bug-bounty and pentest scoping when rules of engagement allow active enumeration.
- Installing via crates, packages or release binaries under the MIT licence without a commercial fee for the core tool.

Who it's for

Web penetration testers and HTB Academy students who need a free recursive content-discovery CLI as a peer to Gobuster and ffuf on authorised targets.

Worth knowing

Feroxbuster is free and open source (MIT). Official repository: github.com/epi052/feroxbuster. Authorised testing and lab use only; respect scope and rate limits.