# Dirb

> Use for classic directory and file brute forcing during authorized web assessments. Trigger on hidden content discovery, low-complexity web path review, and quick coverage of approved web targets with conservative wordlists.

- Skill: `timsonner/dirb` (Agent Skill)
- Install (CLI): `npx skillmds@latest add timsonner/dirb`
- Raw SKILL.md: https://api.skillmd.com/api/skills/timsonner/dirb/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Product & Planning
- License: MIT
- Author: timsonner (https://skillmd.com/u/timsonner)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/timsonner/dirb

---


# Dirb

## Purpose

Use this skill for simple, classic web content discovery when a straightforward directory brute-force workflow is sufficient.

## Phase Fit

- Primary: Discovery and Reconnaissance, Vulnerability Analysis
- Secondary: Retest and Closure

## Use When

- Need quick path discovery on a confirmed web target.
- Need a lightweight classic workflow familiar to certification-trained analysts.
- Need a repeatable content retest.

## Avoid When

- Broad wordlist use would exceed the approved impact level.
- The target is fragile or heavily rate-sensitive.

## Inputs

- Approved base URL
- Narrow wordlist and extension set
- Rate and exclusion constraints

## Procedure

1. Start with a small wordlist aligned to the hypothesis.
2. Review only material responses, not every hit.
3. Escalate interesting paths to manual validation.
4. Record the exact wordlist and target used.
5. Preserve the path set for retest.

## Command Syntax

Replace sample targets with approved in-scope URLs.

```bash
# Basic scan with built-in common wordlist
dirb https://portal.contoso.com

# Scan with custom wordlist and file extensions
dirb https://portal.contoso.com /usr/share/wordlists/dirb/common.txt -X .php,.aspx,.html

# Output to file
dirb https://portal.contoso.com /usr/share/wordlists/dirb/common.txt -o contoso-dirb.txt

# Authenticated scan with session cookie
dirb https://portal.contoso.com /usr/share/wordlists/dirb/common.txt -c "session=<token>"

# Ignore certain response codes
dirb https://portal.contoso.com common.txt -N 403

# Non-recursive scan
dirb https://portal.contoso.com common.txt -r
```

## Evidence to Capture

- Hidden paths or files that materially expand exposure
- Exact wordlist and extension set used
- Minimal path set for retest

## Safety Boundaries

- Keep the wordlist and extension scope minimal.
- Stop if the application shows instability or rate-limit effects.