com.sittinglittleduck.DirBuster.Help.FAQ.html Maven / Gradle / Ivy
Show all versions of dirbuster Show documentation
FAQ
I wish to test an appliction that requires authentication can DirBuster do this?
Yes
If the application is using basic, digest or NTLM auth, you can add the required credentials via Options -> Advanced Options -> Authentication Options
If the application auth is done via a HTML form, the session cookie set by the applicaiton can be added. This can be done via Options -> Advanced Options -> Scan Options -> Add Custom Header
Why do the DirBuster lists contain explicit words?
It will come as no surprise to you all that the internet is full of porn, thus it not surprising that the spider used to generate the lists visited a few along the way. Thus there are explicit words contained within the lists. My stand point on this is simple, this tool was designed to used as part of legitimate security testing, and if there are directories/files based on explicit words, clients would want to know!!
DirBuster is finding too much stuff, how do I make it more managable(sp?)
This is normally due to the HTML parsing find lots of links. If DirBuster is finding too much trun off the HTML parsing, this can be done via Options -> Parse HTML.