Finding unlisted files on a web server

There is a popular program called DirBuster, which penetration testers use for finding unlisted files. DirBuster is an OWASP project that comes preinstalled on Kali, the popular penetration testing Linux distribution. With nothing but the standard library, we can create a fast, concurrent, and simple clone of DirBuster with just a few lines. More information about DirBuster is available at https://www.owasp.org/index.php/Category:OWASP_DirBuster_Project.

This program is a simple clone of DirBuster that searches for unlisted files based on a word list. You will have to create your own word list. A small list of example filenames will be provided here to give you some ideas and to use as a starting list. ...

Get Security with Go now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.