How do I install the Dirbuster skill?

Run npx skillmds@latest add timsonner/dirbuster in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Dirbuster safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Dirbuster?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Dirbuster free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Dirbuster?

timsonner (@timsonner) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Dirbuster by timsonner — Agent Skill

Name: Dirbuster
Author: timsonner

Dirbuster

Use for GUI-driven directory and file discovery during authorized web assessments. Trigger on manual content review, curated wordlist-driven discovery, and situations where analysts need visual control over enumeration depth and threading.

timsonner 5096728 2.0 KB Updated Sep 17, 2026

File contents

DirBuster

Purpose

Use this skill when GUI-based content discovery is preferable to a pure CLI workflow.

Phase Fit

Primary: Discovery and Reconnaissance, Vulnerability Analysis
Secondary: Retest and Closure

Use When

Need to drive directory discovery manually in a GUI.
Need tighter human control over depth, recursion, and thread settings.
Need a visual workflow for reviewing discovered content.

Avoid When

A headless or automation-friendly tool is a better fit.
The target cannot tolerate broad or recursive enumeration.

Inputs

Confirmed base URL
Approved wordlist and extension set
Thread limit and recursion boundaries

Procedure

Launch the tool and set the exact approved target.
Use the smallest useful wordlist and thread count.
Review interesting hits as they appear instead of waiting for maximum depth.
Hand credible findings to manual validation.
Save the final settings so the same discovery can be retested later.

Command Syntax

Launch syntax varies by installation. Enumeration settings are applied in the UI.

# Launch DirBuster GUI
dirbuster
java -jar /path/to/DirBuster.jar

# Preferred CLI alternatives for scripted scanning:
# gobuster
gobuster dir -u https://portal.contoso.com -w /usr/share/seclists/Discovery/Web-Content/common.txt -o contoso-dirs.txt

# feroxbuster
feroxbuster -u https://portal.contoso.com -w /usr/share/seclists/Discovery/Web-Content/common.txt -o contoso-ferox.txt

Evidence to Capture

Newly identified directories and files
Discovery settings used during the session
High-value paths selected for follow-up validation

Safety Boundaries

Keep recursion and thread settings conservative.
Stop if the application shows performance degradation or lockout behavior.

---name: dirbusterdescription: Use for GUI-driven directory and file discovery during authorized web assessments. Trigger on manual content review, curated wordlist-driven discovery, and situations where analysts need visual control over enumeration depth and threading.license: MIT---# DirBuster## PurposeUse this skill when GUI-based content discovery is preferable to a pure CLI workflow.## Phase Fit- Primary: Discovery and Reconnaissance, Vulnerability Analysis- Secondary: Retest and Closure## Use When- Need to drive directory discovery manually in a GUI.- Need tighter human control over depth, recursion, and thread settings.- Need a visual workflow for reviewing discovered content.## Avoid When- A headless or automation-friendly tool is a better fit.- The target cannot tolerate broad or recursive enumeration.## Inputs- Confirmed base URL- Approved wordlist and extension set- Thread limit and recursion boundaries## Procedure1. Launch the tool and set the exact approved target.2. Use the smallest useful wordlist and thread count.3. Review interesting hits as they appear instead of waiting for maximum depth.4. Hand credible findings to manual validation.5. Save the final settings so the same discovery can be retested later.## Command SyntaxLaunch syntax varies by installation. Enumeration settings are applied in the UI.```bash# Launch DirBuster GUIdirbusterjava -jar /path/to/DirBuster.jar# Preferred CLI alternatives for scripted scanning:# gobustergobuster dir -u https://portal.contoso.com -w /usr/share/seclists/Discovery/Web-Content/common.txt -o contoso-dirs.txt# feroxbusterferoxbuster -u https://portal.contoso.com -w /usr/share/seclists/Discovery/Web-Content/common.txt -o contoso-ferox.txt```## Evidence to Capture- Newly identified directories and files- Discovery settings used during the session- High-value paths selected for follow-up validation## Safety Boundaries- Keep recursion and thread settings conservative.- Stop if the application shows performance degradation or lockout behavior.

Frequently asked questions