dirsx：比dirsearch好用的目录扫描工具

dirsx -u https://www.baidu.com -w words.txt

dirsx -u https://www.baidu.com -w words.txt --split# https://www.baidu.com/a/b/# -> https://www.baidu.com/a/# -> https://www.baidu.com/a/b/

dirsx -u https://www.baidu.com -w words.txt --bak

dirsx -u https://www.baidu.com -w words.txt --suffix h5# https://www.baidu.com/admin# -> https://www.baidu.com/adminh5

# --cookiedirsx -u https://www.baidu.com -w words.txt --cookie "session=admin"# --headersdirsx -u https://www.baidu.com -w words.txt --headers "Authorization: bearer eyJ0eX..." --headers "X-Forwarded-For: 127.0.0.1"# --headers-filedirsx -u https://www.baidu.com -w words.txt --headers-file headers.txt

常见目录字典dirsearch 的自带字典长度为 1-5 的字母组合... ...

~ kali$ dirsx -u http://127.0.0.1/    ██████╗ ██╗██████╗ ███████╗██╗  ██╗                  ██╔══██╗██║██╔══██╗██╔════╝╚██╗██╔╝      ██║  ██║██║██████╔╝███████╗ ╚███╔╝     ██║  ██║██║██╔══██╗╚════██║ ██╔██╗     ██████╔╝██║██║  ██║███████║██╔╝ ██╗    ╚═════╝ ╚═╝╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝                                       1.1.0                        xboy@遥遥领先[+] You have not appoint payloads, so you can select from the list: [0] fuzzing-dirs-common.txt[1] fuzzing-dirs-dirsearch.txt[2] fuzzing-files-php.txt[3] fuzzing-letter-len1.txt[4] fuzzing-letter-len2.txt[5] fuzzing-letter-len3.txt[6] fuzzing-letter-len4.txt... ...[+] Select payloads with number: 1

dirsx -u https://www.baidu.com --httpx

# Fuzzing dirsdirsx --ffuf -u http://127.0.0.1/FUZZ -w words.txtdirsx --ffuf -u http://127.0.0.1/FUZZ.php -w words.txtdirsx --ffuf -u http://127.0.0.1/FUZZ/index.php -w words.txt# Fuzzing headersdirsx --ffuf -u http://127.0.0.1/ -H "x-forwarded-for: FUZZ"

~ kali$ dirsx -h    ██████╗ ██╗██████╗ ███████╗██╗  ██╗                  ██╔══██╗██║██╔══██╗██╔════╝╚██╗██╔╝      ██║  ██║██║██████╔╝███████╗ ╚███╔╝     ██║  ██║██║██╔══██╗╚════██║ ██╔██╗     ██████╔╝██║██║  ██║███████║██╔╝ ██╗    ╚═════╝ ╚═╝╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝1.1.0                        xboy@遥遥领先Usage:  dirsx [OPTIONS]Application Options:  -u, --url=          input url of target  -l, --list=         input file containing list of target  -w, --wordlist=     appoint wordlist for scanning directory      --title-len=    set title display length (default: 30)  -t, --threads=      number of threads to use (default: 20)      --timeout=      timeout inseconds (default: 5)  -o, --output=       file to write output results      --prefix=       add prefix of payloads      --suffix=       add suffix of payloads  -e, --extension=    add extension eg: -e php,html      --remove-ext=   remove extension eg: --remove-ext php | admin.php -> admin      --upper-title   capitalize the first letter eg: admin -> Admin      --upper-all     capitalize the all letter eg: admin -> ADMIN      --bak           enable scanning backup file (default:false)      --split         enable spliting the url path, eg: /a/b -> /a/, /a/b (default: false)  -X=                 method of http requests (default: GET)  -x, --excode=       specify the status codes that be filtered eg: 400,404 (default:400,404,406,416,501,502,503)      --cookie=       set request cookies, eg: --cookie "session=admin"  -H, --headers=      set request headers, string[] eg: -H "Token: admin=true" -H "Cookie:                      login=true"      --headers-file= set request headers file, eg: --headers-file headers.txt      --proxy=        set request proxy, eg: --proxy http://127.0.0.1:8080      --no-smart      disable smart mode (automated filtering)Help Options:  -h, --help          Show this help message

dirsx $ tree.├── dicts│   ├── fuzzing-dirs-common.txt│   ├── fuzzing-dirs-dirsearch.txt│   ├── fuzzing-files-php.txt│   ├── fuzzing-letter-len1.txt│   ├── fuzzing-letter-len2.txt│   ├── fuzzing-letter-len3.txt│   ├── fuzzing-letter-len4.txt│   ├── fuzzing-months-1-12.txt│   ├── fuzzing-numbers-0-9.txt│   ├── fuzzing-payloads-aspx.txt│   ├── fuzzing-payloads-bakfile.txt│   ├── fuzzing-payloads-common.txt│   ├── fuzzing-payloads-java.txt│   ├── fuzzing-payloads-null.txt│   ├── fuzzing-payloads-php.txt│   ├── fuzzing-routers-common.txt│   ├── fuzzing-words-len1-5.txt│   └── fuzzing-years-1990-2024.txt├── dirsx