root@kali:~# man dirb
DIRB(1) General Commands Manual DIRB(1)
NAME
dirb - Web Content Scanner
SYNOPSIS
dirb <url_base> <url_base> [<wordlist_file(s)>] [options]
DESCRIPTION
DIRB IS a Web Content Scanner. It looks for existing (and/or hidden) Web
Objects. It basically works by launching a dictionary basesd attack
against a web server and analizing the response.
OPTIONS
-a <agent_string>
Specify your custom USER_AGENT. (Default is: "Mozilla/4.0 (compat-
ible; MSIE 6.0; Windows NT 5.1)")
-b Don't squash or merge sequences of /../ or /./ in the given URL.
-c <cookie_string>
Set a cookie for the HTTP request.
-E <certificate>
Use the specified client certificate file.
-f Fine tunning of NOT_FOUND (404) detection.
-H <header_string>
Add a custom header to the HTTP request.
-i Use case-insensitive Search.
-l Print "Location" header when found.
-N <nf_code>
Ignore responses with this HTTP code.
-o <output_file>
Save output to disk.
-p <proxy[:port]>
Use this proxy. (Default port is 1080)
-P <proxy_username:proxy_password>
Proxy Authentication.
-r Don't Search Recursively.
-R Interactive Recursion. (Ask in which directories you want to scan)
-S Silent Mode. Don't show tested words. (For dumb terminals)
-t Don't force an ending '/' on URLs.
-u <username:password>
Username and password to use.
-v Show Also Not Existent Pages.
-w Don't Stop on WARNING messages.
-x <extensions_file>
Amplify search with the extensions on this file.
-X <extensions>
Amplify search with this extensions.
-z <milisecs>
Amplify search with this extensions.
SEE ALSO
brain(x)
The Dark Raver 27/01/2009 DIRB(1)
root@kali:~# dirb-gendict -h
Usage: dirb-gendict -type pattern
type: -n numeric [0-9]
-c character [a-z]
-C uppercase character [A-Z]
-h hexa [0-f]
-a alfanumeric [0-9a-z]
-s case sensitive alfanumeric [0-9a-zA-Z]
pattern: Must be an ascii string in which every 'X' character wildcard
will be replaced with the incremental value.
Example: dirb-gendict -n thisword_X
thisword_0
thisword_1
[...]
thisword_9
root@kali:~# man html2dic
HTML2DIC(1) General Commands Manual HTML2DIC(1)
NAME
html2dic - Dump word dictionary from html input file
SYNOPSIS
html2dic <file>
DESCRIPTION
html2dic extract all words from an HTML page, generating a dictionary of
all word found, one word per line. Output is printed on stdout.
SEE ALSO
dirb(1),dirb-gendict(1)
Philippe Thierry 15/06/2017 HTML2DIC(1)
dirb Usage Example
root@kali:~# dirb http://192.168.1.224/ /usr/share/wordlists/dirb/common.txt ----------------- DIRB v2.21 By The Dark Raver ----------------- START_TIME: Fri May 16 13:41:45 2014 URL_BASE: http://192.168.1.224/ WORDLIST_FILES: /usr/share/wordlists/dirb/common.txt ----------------- GENERATED WORDS: 4592 ---- Scanning URL: http://192.168.1.224/ ---- ==> DIRECTORY: http://192.168.1.224/.svn/ + http://192.168.1.224/.svn/entries (CODE:200|SIZE:2726) + http://192.168.1.224/cgi-bin/ (CODE:403|SIZE:1122) ==> DIRECTORY: http://192.168.1.224/config/ ==> DIRECTORY: http://192.168.1.224/docs/ ==> DIRECTORY: http://192.168.1.224/external/