feroxbuster

Scan a URL for directories and files

$ feroxbuster --url [https://example.com]

$ feroxbuster --url [https://example.com] --wordlist [path/to/wordlist.txt]

$ feroxbuster --url [https://example.com] --extensions [php,html,txt]

$ feroxbuster --url [https://example.com] --depth [3]

$ feroxbuster --url [https://example.com] --threads [100]

$ feroxbuster --url [https://example.com] --filter-status [404,403]

$ feroxbuster --url [https://example.com] --output [results.txt]

$ feroxbuster --url [https://example.com] --proxy [http://127.0.0.1:8080]

feroxbuster [-u url] [-w wordlist] [-x extensions] [-t threads] [-d depth] [-o output] [options]

feroxbuster is a fast, recursive content discovery tool written in Rust. It brute-forces directories and files on web servers by sending HTTP requests from a wordlist, identifying hidden resources through response analysis.
Speed is a key feature: Rust's performance combined with asynchronous requests enables scanning thousands of paths per second. The tool supports recursive scanning, automatically continuing into discovered directories up to a configurable depth.
Advanced filtering options reduce false positives by hiding responses based on status code, response size, word count, line count, or regex patterns. This helps when servers return generic pages for non-existent paths.
The interactive mode provides real-time statistics and allows pausing, resuming, adding new URLs, and adjusting settings during the scan. Results are color-coded by status code for quick interpretation.
Feroxbuster integrates with tools like Burp Suite via proxy support and can save state to resume interrupted scans. Output formats include plain text, JSON, and formats compatible with other security tools.

-u, --url url

Target URL to scan.

Wordlist to use (default: built-in seclists).

File extensions to check (comma-separated).

Number of concurrent threads (default: 50).

Maximum recursion depth (default: 4, 0 for infinite).

Output file for results.

Disable recursive scanning.

Append / to each request.

Filter out specific HTTP status codes.

Filter out responses of specific size.

Filter out responses with specific word count.

Filter out responses with specific line count.

Proxy to use for requests.

Custom headers (can be used multiple times).

Disable TLS certificate verification.

Minimal output.

Output in JSON format.

Only use on systems you have permission to test. High thread counts may trigger rate limiting or IP bans. Large wordlists with recursion can generate enormous traffic. Some WAFs detect and block the tool's patterns.

feroxbuster was created by Ben "epi" Risher, with the first release around 2020. The name combines "ferox" (Latin for fierce/wild) with "buster." Written in Rust for performance, it quickly gained popularity as a modern alternative to tools like dirb, gobuster, and dirsearch.

gobuster(1), dirsearch(1), ffuf(1), dirb(1)