epi052/feroxbuster
Feroxbuster
Feroxbuster is an HTTP directory brute forcer and web resource enumerator designed to discover hidden files and directories on web servers. It functions as a recursive URL scanner that identifies unlinked endpoints and API resources by combining wordlist-based scanning with automated crawling.
The tool operates as a proxy-aware fuzzer, allowing network requests to be routed through HTTP or SOCKS proxies for traffic interception or anonymity. It utilizes recursive directory crawling to automatically queue discovered paths and find nested content.
The system includes capabilities for discovery result filtering based on HTTP status codes, content size, and file extensions. It supports integration with security toolchains by reading targets from standard input and piping results to other command line utilities. Request customization is available for modifying headers, query parameters, and data payloads.
Features
- Web Resource Discovery Scanners - Automates the mapping of web server structures to discover undocumented endpoints and hidden content.
- Web Enumeration - Identifies unlinked URLs and endpoints by recursively scanning and analyzing HTTP response codes.
- Web Security Testing - Scans for unlinked resources and sensitive files to identify vulnerabilities in web applications and APIs.
- Asynchronous Request Execution - Implements a high-performance asynchronous request pipeline to manage thousands of concurrent network requests.
- Resource Discovery Brute-Forcing - Uses pre-defined wordlists to iteratively guess and discover hidden files and directories on web servers.
- Web Directory Enumeration Tools - Discovers hidden files and directories on web servers using recursive wordlist-based brute-force scanning.
- Web Path Scanners - Crawls web servers to find hidden content and API endpoints using high-performance HTTP probing.
- Web Directory Crawlers - Automatically queues discovered directories to recursively find nested files and folders on web servers.
- Search Result Filtering - Isolates relevant discovery targets by filtering results based on status codes, extensions, and content size.
- Proxy-Aware Fuzzers - Routes network discovery requests through SOCKS or HTTP proxies for anonymity and traffic interception.
- HTTP Request Customization - Provides capabilities to customize HTTP request headers, query parameters, and payloads for specific API requirements.
- Network Traffic Proxying - Routes discovery traffic through proxies to anonymize requests and capture network communication.
- Proxy Routing - Supports routing outgoing traffic through configurable HTTP or SOCKS proxies to avoid IP-based restrictions.
- Standard Stream Piping - Reads target lists from standard input and writes discovery results to standard output for shell pipeline integration.
- Traffic Proxying - Redirects network requests through HTTP or SOCKS proxies to intercept and analyze traffic.
- Response Analysis Filters - Evaluates HTTP status codes and content lengths in real time to filter out irrelevant discovery results.
- Content Discovery - Fast, recursive content discovery tool.
- Directory Scanning Tools - High-speed recursive content discovery tool written in Rust.
- Fuzzing Tools - Fast, recursive content discovery tool.
- Reconnaissance and Discovery - Fast, simple, recursive content discovery tool.
- Utility and Fuzzing Tools - Recursive content discovery tool for web applications.
- Directory Bruteforcing - Fast, recursive content discovery tool built in Rust.
- Fuzzers and Brute Forcers - Fast, recursive directory and file brute-forcing tool.
- Sécurité et confidentialité - Recursive content discovery tool.
