DIRB – Domain Brute-forcing Tool


DIRB is a Web Content Scanner AKA a domain brute-forcing tool. It looks for existing (and/or hidden) Web Objects, it works by launching a dictionary based attack against a web server and analysing the responses.

DIRB - Domain Brute-forcing Tool


What is DIRB?

DIRB comes with a set of preconfigured attack word-lists for easy usage but you can use your custom word-lists. Also it can sometimes can be used as a classic CGI scanner, but do remember this is a content scanner not a vulnerability scanner.

There are other tools with similar functionalities such as:

Patator – Multi-threaded Service & URL Brute Forcing Tool
dirs3arch – HTTP File & Directory Brute Forcing Tool
DirBuster – Brute Force Directories & Files Names

And tools that can accomplish the same or similar things like:

Wfuzz v1.4 Released for Download – Bruteforcing & Fuzzing Web Applications

DIRB Usage For Domain Brute-forcing

You can download DIRB the domain brute force tool here:

dirb222.tar.gz

Or read more here.

Posted in: Hacking Tools

,


Latest Posts:


Karkinos - Beginner Friendly Penetration Testing Tool Karkinos – Beginner Friendly Penetration Testing Tool
Karkinos is a light-weight Beginner Friendly Penetration Testing Tool, which is basically a 'Swiss Army Knife' for pen-testing and/or hacking CTF's.
Aclpwn.Py - Exploit ACL Based Privilege Escalation Paths in Active Directory Aclpwn.Py – Exploit ACL Based Privilege Escalation Paths in Active Directory
Aclpwn.py is a tool that interacts with BloodHound< to identify and exploit ACL based privilege escalation paths.
Vulhub - Pre-Built Vulnerable Docker Environments For Learning To Hack Vulhub – Pre-Built Vulnerable Docker Environments For Learning To Hack
Vulhub is an open-source collection of pre-built vulnerable docker environments for learning to hack. No pre-existing knowledge of docker is required, just execute two simple commands.
LibInjection - Detect SQL Injection (SQLi) and Cross-Site Scripting (XSS) LibInjection – Detect SQL Injection (SQLi) and Cross-Site Scripting (XSS)
LibInjection is a C library to Detect SQL Injection (SQLi) and Cross-Site Scripting (XSS) through lexical analysis of real-world Attacks.
Grype - Vulnerability Scanner For Container Images & Filesystems Grype – Vulnerability Scanner For Container Images & Filesystems
Grype is a vulnerability scanner for container images and filesystems with an easy to install binary that supports the packages for most major *nix based OS.
APT-Hunter - Threat Hunting Tool via Windows Event Log APT-Hunter – Threat Hunting Tool via Windows Event Log
APT-Hunter is a threat hunting tool for windows event logs made from the perspective of the purple team mindset to provide detection for APT movements hidden in the sea of windows event logs.


3 Responses to DIRB – Domain Brute-forcing Tool

  1. a_servant March 8, 2016 at 1:31 am #

    And the difference with DirBuster would be… ?

    • Darknet March 8, 2016 at 1:41 am #

      There are lots of tools with similar functionalities (port scanners, vuln scanners, dir scanners etc etc etc), I’m here to provide options. If you want to start a blog comparing similar tools, please go ahead and let me know – I’d be interested to read it :)

  2. droppin dimeZ March 12, 2016 at 11:53 am #

    it’s the same tool…DirBuster is the gui version