dirsearch
Focused directory and file brute-forcer for web paths.
What it does
dirsearch systematically requests a large wordlist of directory and file names against your site to find pages and resources that are reachable but not linked anywhere — backups, config files, admin areas, and leftover artefacts.
What data you get
A clean list of paths that exist on your server, grouped by response code, so you can see exactly what is exposed beyond your intended navigation.
Why it matters to your site
Forgotten files are a classic source of leaks — a stray database backup or .env file can hand an attacker everything. This finds them before someone else does.
More in this category
Other fuzzers & brute forcers tools
ffuf
★ FeaturedFast web fuzzer for content discovery and input testing.
gobuster
Fast brute-forcer for directories, DNS names, and virtual hosts.
feroxbuster
Recursive content discovery that digs into every folder it finds.