Asalamu alaikum guys my name is Mr robot Ng hacker today I will going to show you how to install and use dirb find hidden files and directories.
What is dirb ?
Dirb is a web content scanner and directory brute-forcing tool commonly used by security professionals and penetration testers to discover hidden directories and files on web servers. It's a command-line tool that is designed to help identify vulnerabilities and security issues in web applications and websites.
Dirb works by sending HTTP requests to a target web server and analyzing the server's responses. It does this by attempting to access a list of common directories and files that are often used in web applications. If Dirb receives a positive response from the server (e.g., a "200 OK" HTTP status code), it indicates that the directory or file exists, which can be valuable information for security assessments.
Some common use cases for Dirb include:
Directory Enumeration:
Dirb can be used to discover hidden or unlinked directories and files on a web server, which might contain sensitive information or provide access to vulnerable areas of a website.
Security Auditing:
Security professionals and penetration testers use Dirb to identify potential security vulnerabilities in web applications. It helps in identifying unprotected or improperly configured directories and files.
Information Gathering:
Dirb can be part of the reconnaissance phase in security assessments, where the goal is to gather as much information as possible about a target web server.
Tested on
TermuxUbuntuKali-LinuxRed HatCentOS
Installation
To install Dirb on a Linux computer, you can use the following steps. Dirb is a web content scanner and directory brute-forcing tool, so it can be useful for finding hidden directories and files on web servers.
For Debian/Ubuntu based systems
$ sudo apt update
For Red Hat/CentOS based systems
$ sudo yum update
For Termux android
$ pkg update
Install Dirb:
Once your package lists are updated, you can install Dirb using your system's package manager. Here are commands for a few popular Linux distributions:
Debian/Ubuntu:
$ sudo apt install dirb
Red Hat/CentOS:
$ sudo yum install dirb
Termux android
$ pkg install dirb
Verify Installation:
After the installation is complete, you can verify that Dirb was installed correctly by running:
$ dirb -h
This command should display the help message for Dirb, indicating that it's installed and working.
Here's how you can use Dirb:
Basic Usage:
To use Dirb, open a terminal and run the following command:
$ dirb <target_url>
Replace <target_url> with the URL of the website or web server you want to scan. Dirb will use a default dictionary of common directory and file names to perform the scan.
Custom Dictionaries:
You can use custom dictionaries to improve the effectiveness of your scans. Create a text file with a list of directory and file names you want to test and use it with the -w flag:
$ dirb <target_url> -w <wordlist.txt>
Recursive Scanning:
By default, Dirb performs a non-recursive scan, which means it only scans the specified URL without exploring subdirectories. To perform a recursive scan, use the -r flag:
$ dirb <target_url> -r
Specifying Output:
You can specify the output directory and filename for the scan results using the -o flag:
$ dirb <target_url> -o <output_directory>