Skip to content

froxbuster

install
sudo apt update && sudo apt install -y feroxbuster
update
./feroxbuster --update
Multiple Values
  • Options that take multiple values are very flexible.
  • Consider the following ways of specifying extensions: The command adds .pdf, .js, .html, .php, .txt, .json, and .docx to each url
  • All of the methods (multiple flags, space separated, comma separated, etc...) are valid and interchangeable. The same goes for urls, headers, status codes, queries, and size filters.
./feroxbuster -u http://127.1 -x pdf -x js,html -x php txt json,docx
Include Headers
./feroxbuster -u http://127.1 -H Accept:application/json "Authorization: Bearer {token}"
IPv6, non-recursive scan with INFO-level logging enabled
./feroxbuster -u http://[::1] --no-recursion -vv
Read urls from STDIN; pipe only resulting urls out to another tool
cat targets | ./feroxbuster --stdin --silent -s 200 301 302 --redirects -x js | fff -s 200 -o js-files
Proxy traffic through Burp
./feroxbuster -u http://127.1 --insecure --proxy http://127.0.0.1:8080
Proxy traffic through a SOCKS proxy (including DNS lookups)
./feroxbuster -u http://127.1 --proxy socks5h://127.0.0.1:9050
Pass auth token via query parameter
./feroxbuster -u http://127.1 --query token=0123456789ABCDEF