maurosoria / dirsearch

Web path scanner
11.76k stars 2.29k forks source link

Add directory listing detection #314

Open futex opened 3 years ago

futex commented 3 years ago

A directory listing detection can be useful when you work mostly in CLI and also time saving if it's removed from the folders listing when you do a recursive scan.

Output example: direc

shelld3v commented 3 years ago

The fact that usually, after a dirsearch scan, hackers can only found around 1-10 interesting endpoints, so I think that it was too easy to can check all of them from their browsers. Thank you for your help but I didn't see anything useful in this detector. Moreover, a lot of pages contain the Index of keyword but isn't a directory listing page:

Thank you again, and if you have any idea for a new feature, don't feel afraid to open a new issue, we will glad for that help. But now, I don't think that it's a good thing to add this feature

shelld3v commented 3 years ago

Hi, if you agreed with me, then I hope you can close this issue

futex commented 3 years ago

Hi, if you agreed with me, then I hope you can close this issue

Hi, no prob

shelld3v commented 3 years ago

Hi, I decided to actually implement this:))))) But the workflow is gonna different: The user will be able to create a template, and whenever the response matches that regex, the user will be notified!! I am still fighting for a beautiful output with this feature, but will be soon! I had thought that the user can visit the link directly, but the fact that when you brute-force a huge list of websites, it's not going to be easy.

You can reopen this now!

shelld3v commented 2 years ago

Hi @futex, dirsearch now has the --crawl option, do you think it replaced what you wanted to do?

futex commented 2 years ago

Hi @shelld3v the option is great, but it didn't detect the directory listing on my tests.

shelld3v commented 2 years ago

What is the purpose of detecting directory listing? Isn't it to discover new paths and dirsearch --crawl option can do it for you?