evilsocket / dirsearch

A Go implementation of dirsearch.

DirSearch

This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth :)

Purpose

DirSearch takes an input URL ( -url parameter ) and a wordlist ( -wordlist parameter ), it will then perform concurrent HEAD requests using the lines of the wordlist as paths and files eventually bruteforcing folders and files on a web server.

It supports a custom file extension ( -ext, default to php ) and other optional arguments:

Usage of dirsearch:
  -200only
        If enabled, will only display responses with 200 status code.
  -consumers int
        Number of concurrent consumers. (default 8)
  -ext string
        File extension. (default "php")
  -maxerrors int
        Maximum number of errors to get before killing the program. (default 20)
  -url string
        Base URL to start enumeration from.
  -wordlist string
        Wordlist file to use for enumeration. (default "dict.txt")

Compilation

go get github.com/evilsocket/dirsearch
cd dirsearch
make get_glide
make install_dependencies
make build

License

This project is copyleft of Simone Margaritelli and released under the GPL 3 license.

dirsearch's Issues

invalid memory address or nil pointer dereference

Hey!

I ran the following command:

$ ./dirsearch -url https://localhost -wordlist /tmp/dotdotpwn.txt

Wordlist available @ https://raw.githubusercontent.com/foospidy/payloads/master/other/traversal/dotdotpwn.txt

Got:

panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x38 pc=0x1221602]

goroutine 36 [running]:
main.DoRequest(0xc00100a7a0, 0x17, 0x1289001, 0xc001112fc0)
	/Users/Shaked/.go/src/github.com/evilsocket/dirsearch/cmd/dirsearch/main.go:65 +0x242
github.com/evilsocket/dirsearch/vendor/github.com/evilsocket/brutemachine.(*Machine).inputConsumer(0xc00012c000)
	/Users/Shaked/.go/src/github.com/evilsocket/dirsearch/vendor/github.com/evilsocket/brutemachine/machine.go:78 +0xa7
created by github.com/evilsocket/dirsearch/vendor/github.com/evilsocket/brutemachine.(*Machine).Start
	/Users/Shaked/.go/src/github.com/evilsocket/dirsearch/vendor/github.com/evilsocket/brutemachine/machine.go:97 +0x55

Any ideas?

Exceeded 20 errors, quitting ...

HI,

I get following error message: Exceeded 20 errors, quitting ...
What does it mean? Which errors does it talk about?

Recursive scan ?

Hey, it this support recursive scan ?

how can i exploit /ivt/ivtservlet.jsp ?

i find a /ivt/ivtservlet.jsp with dirsearch
but i cant google how can i exploit it

by the way.
dirsearch is the beeeeeeest dir scan i have ever use.
why it's only 82 star