Dirmap

中文

An advanced web directory scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian

Demand analysis

After a lot of research, summarizing an excellent web directory scanning tool has at least the following features:

• Concurrency engine
• Can use the dictionary
• Can be purely blasted
• Can crawl the page dynamically to generate a dictionary
• Can fuzz scan
• Custom request
• Custom response processing...

Then take a look at the features of Dirmap.

Features

1. Support n target*n payload concurrent
2. Support recursive scanning
3. Support custom status codes that require recursive scanning
4. Support (single | multi) dictionary scan
5. Support custom character set blasting
6. Support crawler dynamic dictionary scanning
7. Support custom label fuzz target url
8. Custom Request User-Agent
9. Custom request random delay
10. Custom request timeout
11. Custom Request Broker
12. Custom Regular Expressions Match False 404 Pages
13. Customize the response status code to process
14. Customize skipping pages of size x
15. Custom display content-type
16. Customize the display page size
17. Save the results by domain name and remove duplicates

Introduction

Environment and download

git clone https://github.com/H4ckForJob/dirmap.git && cd dirmap && python3 -m pip install -r requirement.txt

Quick use

Input target

Single target, default is http

python3 dirmap.py -i https://target.com -lcf

python3 dirmap.py -i 192.168.1.1 -lcf

Subnet(CIDR format)

python3 dirmap.py -i 192.168.1.0/24 -lcf

Network range

python3 dirmap.py -i 192.168.1.1-192.168.1.100 -lcf

Read from file

python3 dirmap.py -iF targets.txt -lcf

The above format is supported in targets.txt

Result save

1. The result will be automatically saved in the output folder in the project root directory.
2. Each target generates a txt with the naming format domain/ip.txt
3. The result is automatically deduplicated

Advanced

Customize the dirmap configuration and start exploring dirmap advanced features

Temporarily configure the configuration file by loading the configuration file. ** It is not supported to use the command line parameters for detailed configuration**!

Edit dirmap.conf in the root directory of the project to configure it.Detailed instructions for use in dirmap.conf

TODO

• command line parameter parsing global initialization
• Cngine Initialization
  • set the number of threads
• Target Initialization
  • automatic parsing of input formats( -i,inputTarget)
    • IP
    • Domain
    • URL
    • IP/MASK
    • IP Start-End
  • file reading(-iF,inputLocalFile)
• Bruter Initialization
  • Load Configuration Mode()
    • read command line parameter values
    • read configuration file(-lcf,loadConfigFile)

Default dictionary

The dictionary file is stored in the data folder in the project root directory.

1. dict_mode_dict.txt "dictionary mode" dictionary, using dirsearch default dictionary
2. crawl_mode_suffix.txt "crawler mode" dictionary, using the FileSensor default dictionary
3. fuzz_mode_dir.txt "fuzz mode" dictionary, using the DirBuster default dictionary
4. fuzz_mode_ext.txt "fuzz mode" dictionary, a dictionary made with common suffixes
5. dictmult This directory is the "dictionary mode" default multi-dictionary folder, including: BAK.min.txt (backup file small dictionary), BAK.txt (backup file large dictionary), LEAKS.txt (information leak file dictionary)
6. fuzzmult This directory is the default multi-dictionary folder of "fuzz mode", including: fuzz_mode_dir.txt (default directory dictionary), fuzz_mode_ext.txt (default suffix dictionary)

Known bug

1. "crawler mode" only crawls the current page of the target and is used to generate a dynamic dictionary. The project will separate the "crawler module" from the "generate dynamic dictionary function" in the future.
2. About bruter.py line 517 bar.log.start() error. Solution: Please install progressbar2. Uninstall the progressbar. Prevent the import of modules of the same name. Thanks to a brother for reminding.

python3 -m pip uninstall progressbar
python3 -m pip install progressbar2

Maintenance

1. If there is a problem during use, please feel free to issue an issue.
2. The project is under maintenance and new features will be added in the future. Please refer to the “TODO” list for details.

Acknowledgement

In the process of writing dirmap, I borrowed a lot of models and ideas from excellent open source projects. I would like to express my gratitude.

• Sqlmap
• POC-T
• Saucerframe
• gwhatweb
• dirsearch
• cansina
• weakfilescan
• FileSensor
• BBscan
• werdy

Contact

mail: [email protected]