pyDirBusted is a multi-session python utility used to brute-force and enumerate web directories and filenames on web and application servers. This utlitiy attempts to find both visible and hidden files located on a server, and outputs the results both to the screen with the verbose option on and active directories/files may be stored in a file of your choosing.
run python3 -m pip install -r requirements.txt
to install dependencies
After cloning the repo to your system, go into the pyDirBusted directory and run python3 -m pip install -r requirements.txt
. After dependencies are installed, you can run ./pyDirBusted -h
to view options. This utility requires a wordlist of possible web directories and a URL to start with.
Syntax is as follows:
./pyDirBusted -u https://yoursite.com -w wordlists/wordlist.wordlist -o outfile.txt -v
Thanks to coldfusion39 and zeroSteiner for some help and advice with this project. I pulled the wordlists from here so they're not all mine.
pyDirBusted is released under the GNU General Public License. Check it out here.