DIRB – Web Content Scanner!

January 26, 2010 11:10 am · 0 comments

by Black

in Open Source,Security Reconnaissance,Web Application Penetration Testing

DIRB is a Web Content Scanner. It looks for existing and/or hidden Web Objects. It basically works by launching a dictionary based attack against a web server and analizing the response.

DIRB comes with a set of preconfigured attack wordlists for easy usage but you can use your custom wordlists. Also DIRB sometimes can be used as a classic CGI scanner, but remember is a content scanner not a vulnerability scanner. We need to figure the vulnerability out and run the test manually.

DIRB

How does DIRB work?
URL Bruteforcer It looks for hidden Web Objects. It basically works by launching a dictionary based attack against a web server and analyzing the response. DIRB main purpose is to help in web application auditing.

DIRB main purpose is to help in professional web application auditing. Specially in security related testing. It covers some holes not covered by classic web vulnerability scanners. DIRB looks for specific web objects that other generic CGI scanners can’t look for. It doesn’t search vulnerabilities nor does it look for web contents that can be vulnerable.

This tool will only ease your work if you have conducted lots of audits on web applications or you have many experience do that . As looking at the result we need to conclude weather it is vulnerable or not.

Operating systems supported:
Windows XP sp2 and above 32 bit
*nix systems

Download DIRB here

Searches leading to this post:
dirb

If you enjoyed this article, you might also like:

Tagged as: , , , ,

Previous post:

Next post: