Skip to content

πŸ”’A Python script for efficiently brute-forcing directories and files on a target website using asynchronous programming with aiohttp. It supports custom headers, status code filtering, response size matching, and more.

License

Notifications You must be signed in to change notification settings

calc1f4r/Async-DirBuster

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

7 Commits
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

πŸ”₯ Asynchronous Directory Buster

⚑ Description

Asynchronous Directory Buster is a Python script that allows you to efficiently perform directory and file brute-forcing on a target website. The script leverages the power of asynchronous programming with aiohttp to perform multiple HTTP requests simultaneously, making the process faster and more efficient.

Directory.Bruteforcing.using.asynchronous.Programming.mp4
πŸ’£ Key Features
  • Asynchronous HTTP requests for improved speed.
  • Customizable User-Agent and HTTP headers.
  • Ability to follow redirects.
  • Filter and match HTTP status codes.
  • Filter and match response sizes.
  • Output results to a file.
  • Custom wordlist support.
🧾 Requirements
pip install aiohttp beautifulsoup4 termcolor
Usage

πŸ“Œ Basic one

python directory_buster.py -u <target_url> -w <path_to_wordlist>

πŸ“Œ Other examples

Custom Header

python directory_buster.py -u https://example.com -w wordlist.txt -H 'Authorization: Bearer token'

Extensions

python directory_buster.py -u https://example.com -w wordlist.txt -x php asp

Saving results to the file

python directory_buster.py -u https://example.com -w wordlist.txt -o output.txt
Supported flags
  • -x : Specify a list of file extensions to append to the directories in the wordlist (e.g., -x php asp).
  • -r: Follow redirects. If this flag is set, the script will follow HTTP redirects (3xx status codes).
  • -H : Specify custom HTTP headers in the format 'Header1: value1' 'Header2: value2'.
  • -a <user_agent>: Set a custom User-Agent string. The default is directorybuster/1.0.
  • -ht: Hide response title in output.
  • -m c <status_codes>: Include status codes to match, separated by space (e.g., -m c 200 404).
  • -ms <response_sizes>: Match response sizes, separated by space.
  • -fc <status_codes>: Filter status codes, separated by space (default is filtering 404).
  • -fs <response_sizes>: Filter response sizes, separated by space.
  • -o <output_file>: Path to the output file to save the results
πŸ”΄ Note
  • Matching and Filtering Response Length together is not available at the moment. Choose one of them in the command-line arguments.
  • Matching and Filtering Response Status Code together is not available at the moment. Choose one of them in the command-line arguments.

Contributions

Contributions are welcome! If you find a bug or have suggestions for improvements, feel free to open an issue or submit a pull request.

Happy directory busting!

About

πŸ”’A Python script for efficiently brute-forcing directories and files on a target website using asynchronous programming with aiohttp. It supports custom headers, status code filtering, response size matching, and more.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages