-
Notifications
You must be signed in to change notification settings - Fork 87
Help Text
Izzy Whistlecroft edited this page Sep 9, 2019
·
1 revision
dirble [FLAGS] [OPTIONS] <host|--uri-file <uri-file>...|--uri <uri>...> [--]
--burp
Sets the proxy to use the default burp proxy values
(http://localhost:8080)
--no-proxy
Disables proxy use even if there is a system proxy
-r, --disable-recursion
Disable discovered subdirectory scanning
-l, --scan-listable
Scan listable directories
--scrape-listable
Enable scraping of listable directories for urls, often produces large
amounts of output
-S, --silent
Don't output information during the scan, only output the report at
the end.
-v, --verbose
Increase the verbosity level. Use twice for full verbosity.
--disable-validator
Disable automatic detection of not found codes
--scan-401
Scan folders even if they return 401 - Unauthorized frequently
--scan-403
Scan folders if they return 403 - Forbidden frequently
-h, --help Prints help information
-k, --ignore-cert Ignore the certificate validity for HTTPS
--no-color
Disable coloring of terminal output
--show-htaccess
Enable display of items containing .ht when they return 403 responses
-V, --version Prints version information
-u, --uri <uri>...
Additional hosts to scan [aliases: url]
-U, --uri-file <uri-file>...
The filename of a file containing a list of URIs to scan - cookies and
headers set will be applied to all URIs [aliases: url-file]
--verb <http_verb>
Specify which HTTP verb to use
[default: Get] [possible values: Get, Head, Post]
-w, --wordlist <wordlist>...
Sets which wordlist to use, defaults to dirble_wordlist.txt in the same
folder as the executable
-X, --extension-file <extension-file>...
The name of a file containing extensions to extend queries with, one
per line
-x, --extensions <extensions>...
Provides comma separated extensions to extend queries with
-P, --prefix-file <prefix-file>...
The name of a file containing extensions to extend queries with, one
per line
-p, --prefixes <prefixes>...
Provides comma separated prefixes to extend queries with
--json-file <json_file>
Sets a file to write JSON output to [aliases: oJ]
-o, --output-file <output_file>
Sets the file to write the report to [aliases: oN]
--xml-file <xml_file>
Sets a file to write XML output to [aliases: oX]
--output-all <output_all>
Stores all output types respectively as .txt, .json and .xml [aliases: oA]
--proxy <proxy>
The proxy address to use, including type and port, can also include a
username and password in the form
"http://username:password@proxy_url:proxy_port"
-t, --max-threads <max-threads>
Sets the maximum number of request threads that will be spawned [default: 10]
-T, --wordlist-split <wordlist_split>
The number of threads to run for each folder/extension combo [default: 3]
-z, --throttle <milliseconds>
Time each thread will wait between requests, given in milliseconds
--username <username>
Sets the username to authenticate with
--password <password>
Sets the password to authenticate with
--max-recursion-depth <max_recursion_depth>
Sets the maximum directory depth to recurse to, 0 will disable
recursion
-c, --cookie <cookie>...
Provide a cookie in the form "name=value", can be used multiple times
-H, --header <header>...
Provide an arbitrary header in the form "header:value" - headers with
no value must end in a semicolon
-a, --user-agent <user_agent>
Set the user-agent provided with requests, by default it isn't set
-B, --code-blacklist <code_blacklist>...
Provide a comma separated list of response codes to not show in output
-W, --code-whitelist <code_whitelist>...
Provide a comma separated list of response codes to show in output,
also disables detection of not found codes
--hide-lengths <length_blacklist>...
Specify length ranges to hide, e.g. --hide-lengths 348,500-700
--max-errors <max_errors>
The number of consecutive errors a thread can have before it exits,
set to 0 to disable [default: 5]
--timeout <timeout>
Maximum time to wait for a response before giving up, given in seconds
[default: 5]
<uri>
The URI of the host to scan, optionally supports basic auth with
http://user:pass@host:port
+ [url] - File
D [url] - Directory
L [url] - Listable Directory
- Run against a website using the default dirble_wordlist.txt from the
current directory:
dirble [address]
- Run with a different wordlist and including .php and .html extensions:
dirble [address] -w example_wordlist.txt -x .php,.html
- With listable directory scraping enabled:
dirble [address] --scrape-listable
- Providing a list of extensions and a list of URIs:
dirble [address] -X wordlists/web.lst -U uri-list.txt
- Providing multiple hosts to scan via command line:
dirble [address] -u [address] -u [address]