GO KALI FREE

Feroxbuster

Web Application

Intermediatemedium risk

Feroxbuster is a fast, recursive content discovery tool written in Rust. It is designed to perform forced browsing to find hidden directories and files on web servers using high-performance parallel execution.

Installation

sudo apt install feroxbuster

Basic Syntax

feroxbuster -u <url>

Quick Facts

Full Name
Feroxbuster
License
MIT License
Written In
Rust
Platforms
Linux, Windows, macOS
Category
Recursive Content Discovery
Speed
Very Fast (Rust-based)
First Release
2020
Author
Ben 'epi' Risher

Tool Overview

Feroxbuster is a fast, recursive content discovery tool written in Rust. It performs forced browsing to find hidden directories and files on web servers using high-performance parallel execution.

Unlike other directory scanners, Feroxbuster automatically recurses into discovered directories, mapping deep application structures without manual intervention. Its auto-calibration adjusts request rates based on server responsiveness.

Feroxbuster's combination of speed, automatic recursion, and ease of use has made it a favorite for both penetration testers and bug bounty hunters.

Common Commands

feroxbuster -u http://192.168.1.1Basic scan - Launch a standard recursive directory discovery scan using the default configuration
feroxbuster -u http://192.168.1.1 -w /usr/share/wordlists/dirb/common.txtCustom wordlist - Run the recursive discovery using a specific targeted path dictionary
feroxbuster -u http://192.168.1.1 -x php,html,txtTarget extensions - Scan for directories while explicitly checking for files matching these extensions
feroxbuster -u http://192.168.1.1 --depth 3Set recursion depth - Limit how many subdirectories deep the automatic scanner will traverse
feroxbuster -u http://192.168.1.1 -t 50Adjust thread count - Increase or decrease parallel request execution speed
feroxbuster -u http://192.168.1.1 --filter-status 404Filter status codes - Remove unhelpful HTTP 404 responses from clogging the output stream
feroxbuster -u http://target.comBasic scan
feroxbuster -u http://target.com -w /usr/share/wordlists/dirb/common.txtCustom wordlist
feroxbuster -u http://target.com -x php,html,txtWith extensions
feroxbuster -u http://target.com --depth 3Recursive depth
feroxbuster -u http://target.com -t 50Set threads
feroxbuster -u http://target.com --filter-status 404Filter status codes
feroxbuster -u http://target.com -x php,html,txt -rFollow redirects while probing for common file extensions
feroxbuster -u http://target.com -H 'Authorization: Bearer TOKEN'Send a custom header (e.g. auth token) with every request
feroxbuster -u http://target.com -C 404,403 -s 200,301Filter out 404/403 and only report 200/301 responses

Step-by-Step Guide

  1. 1Set target URL
  2. 2Choose wordlist
  3. 3Add file extensions
  4. 4Run feroxbuster
  5. 5Review discovered paths

Warnings

Use Cases

Recursive Content Discovery

Automatically discover and recurse into hidden directories to map deep application structures.

Fast Directory Scanning

High-speed directory brute forcing using Rust-based parallel execution.

Deep Application Mapping

Map entire web application directory trees with automatic recursion.

Bug Bounty Recon

Discover hidden endpoints, admin panels, and backup files in bug bounty programs.

Extension Scanning

Scan for specific file types like .php, .html, .txt alongside directories.

Large-Scale Scanning

Scan large web applications with auto-calibration and recursive depth control.

Key Features

Related Tools

FFUF

Web Application

Faster targeted fuzzing with advanced filtering.

Gobuster

Web Application

Simpler directory brute forcer with DNS modes.

DIRB

Web Application

Legacy web content scanner.

Nikto

Web Application

Web server scanner for vulnerabilities.

Frequently Asked Questions

What is Feroxbuster used for?

Feroxbuster is a fast, recursive content discovery tool used to find hidden directories and files on web servers through forced browsing with high-performance parallel execution.

How fast is Feroxbuster?

Feroxbuster is written in Rust and can send thousands of requests per second. Its auto-calibration feature adjusts the request rate based on server responsiveness for optimal performance.

What is recursive scanning in Feroxbuster?

Recursive scanning automatically follows discovered directories and fuzzes their subdirectories. This finds deeper content without manual intervention, making it excellent for mapping large applications.

What is the difference between Feroxbuster and FFUF?

Feroxbuster excels at automatic recursive scanning with minimal configuration. FFUF is better for targeted fuzzing with advanced filtering, regex, and custom payload injection.

How do I install Feroxbuster?

Install Feroxbuster using: sudo apt install feroxbuster on Kali Linux. On other systems, download from GitHub releases or install via cargo: cargo install feroxbuster.

How do I use Feroxbuster for directory scanning?

Run feroxbuster -u http://target.com to start a basic recursive scan. Use -w to specify a custom wordlist.

What are the most common Feroxbuster commands?

Common commands include: feroxbuster -u http://target.com (basic scan), feroxbuster -u http://target.com -x php,html (with extensions), feroxbuster -u http://target.com --depth 3 (recursive depth).

How does Feroxbuster compare to gobuster?

Feroxbuster is faster with automatic recursive scanning. gobuster is simpler with DNS and vhost modes. Use Feroxbuster for comprehensive directory discovery; gobuster for quick scans.

Is Feroxbuster legal to use?

Feroxbuster itself is legal software. However, scanning web servers without permission from the owner may violate laws. Always obtain written authorization before testing.

What is the --depth flag in Feroxbuster?

The --depth flag limits recursion depth: --depth 3 to only scan 3 levels deep. Prevents scanning too deep on large applications.

What is the -x flag in Feroxbuster?

The -x flag adds file extensions to scan: -x php,html,txt to also discover files with those extensions.

What is the --filter-status flag?

The --filter-status flag hides responses with specific status codes: --filter-status 404 to hide 404 Not Found responses.

How do I control scan speed in Feroxbuster?

Use -t flag for thread count: -t 50 for 50 threads. Higher thread counts are faster but may crash servers or trigger WAFs.

How do I save Feroxbuster results?

Use --output results.txt to save results to a file. Also supports JSON output with --json.

What wordlists work with Feroxbuster?

Feroxbuster works with any text-based wordlist. Use SecLists wordlists for comprehensive directory discovery.

How does auto-calibration work in Feroxbuster?

Auto-calibration adjusts the request rate based on server responsiveness. If the server slows down, Feroxbuster automatically reduces speed.

How long does a Feroxbuster scan take?

Feroxbuster scans complete faster than most alternatives due to Rust performance. A typical scan takes 2-15 minutes depending on target size.

Can Feroxbuster scan HTTPS targets?

Yes, Feroxbuster supports HTTPS targets. Enter the URL with https:// prefix. Use --insecure to skip SSL verification.

Tags

#web-application#directory-bruteforce#content-discovery#fuzzing#reconnaissance#rust

Output Explanation

Shows status codes, content length, and discovered URLs.

Ethical Usage Notice

This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.