# Dirbuster

> Use for GUI-driven directory and file discovery during authorized web assessments. Trigger on manual content review, curated wordlist-driven discovery, and situations where analysts need visual control over enumeration depth and threading.

- Skill: `timsonner/dirbuster` (Agent Skill)
- Install (CLI): `npx skillmds@latest add timsonner/dirbuster`
- Raw SKILL.md: https://api.skillmd.com/api/skills/timsonner/dirbuster/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Product & Planning
- License: MIT
- Author: timsonner (https://skillmd.com/u/timsonner)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/timsonner/dirbuster

---


# DirBuster

## Purpose

Use this skill when GUI-based content discovery is preferable to a pure CLI workflow.

## Phase Fit

- Primary: Discovery and Reconnaissance, Vulnerability Analysis
- Secondary: Retest and Closure

## Use When

- Need to drive directory discovery manually in a GUI.
- Need tighter human control over depth, recursion, and thread settings.
- Need a visual workflow for reviewing discovered content.

## Avoid When

- A headless or automation-friendly tool is a better fit.
- The target cannot tolerate broad or recursive enumeration.

## Inputs

- Confirmed base URL
- Approved wordlist and extension set
- Thread limit and recursion boundaries

## Procedure

1. Launch the tool and set the exact approved target.
2. Use the smallest useful wordlist and thread count.
3. Review interesting hits as they appear instead of waiting for maximum depth.
4. Hand credible findings to manual validation.
5. Save the final settings so the same discovery can be retested later.

## Command Syntax

Launch syntax varies by installation. Enumeration settings are applied in the UI.

```bash
# Launch DirBuster GUI
dirbuster
java -jar /path/to/DirBuster.jar

# Preferred CLI alternatives for scripted scanning:
# gobuster
gobuster dir -u https://portal.contoso.com -w /usr/share/seclists/Discovery/Web-Content/common.txt -o contoso-dirs.txt

# feroxbuster
feroxbuster -u https://portal.contoso.com -w /usr/share/seclists/Discovery/Web-Content/common.txt -o contoso-ferox.txt
```

## Evidence to Capture

- Newly identified directories and files
- Discovery settings used during the session
- High-value paths selected for follow-up validation

## Safety Boundaries

- Keep recursion and thread settings conservative.
- Stop if the application shows performance degradation or lockout behavior.