|
|
|
|
@@ -322,7 +322,7 @@ built-in defaults.
|
|
|
|
|
`feroxbuster` searches for `ferox-config.toml` in the following locations (in the order shown):
|
|
|
|
|
|
|
|
|
|
- `/etc/feroxbuster/` (global)
|
|
|
|
|
- `CONFIG_DIR/ferxobuster/` (per-user)
|
|
|
|
|
- `CONFIG_DIR/feroxbuster/` (per-user)
|
|
|
|
|
- The same directory as the `feroxbuster` executable (per-user)
|
|
|
|
|
- The user's current working directory (per-target)
|
|
|
|
|
|
|
|
|
|
@@ -435,34 +435,47 @@ FLAGS:
|
|
|
|
|
too much)
|
|
|
|
|
|
|
|
|
|
OPTIONS:
|
|
|
|
|
--debug-log <FILE> Output file to write log entries (use w/ --json for JSON entries)
|
|
|
|
|
-d, --depth <RECURSION_DEPTH> Maximum recursion depth, a depth of 0 is infinite recursion (default: 4)
|
|
|
|
|
-x, --extensions <FILE_EXTENSION>... File extension(s) to search for (ex: -x php -x pdf js)
|
|
|
|
|
-N, --filter-lines <LINES>... Filter out messages of a particular line count (ex: -N 20 -N 31,30)
|
|
|
|
|
-X, --filter-regex <REGEX>... Filter out messages via regular expression matching on the response's body
|
|
|
|
|
(ex: -X '^ignore me$')
|
|
|
|
|
-S, --filter-size <SIZE>... Filter out messages of a particular size (ex: -S 5120 -S 4927,1970)
|
|
|
|
|
-C, --filter-status <STATUS_CODE>... Filter out status codes (deny list) (ex: -C 200 -C 401)
|
|
|
|
|
-W, --filter-words <WORDS>... Filter out messages of a particular word count (ex: -W 312 -W 91,82)
|
|
|
|
|
-H, --headers <HEADER>... Specify HTTP headers (ex: -H Header:val 'stuff: things')
|
|
|
|
|
-o, --output <FILE> Output file to write results to (use w/ --json for JSON entries)
|
|
|
|
|
-p, --proxy <PROXY> Proxy to use for requests (ex: http(s)://host:port, socks5(h)://host:port)
|
|
|
|
|
-Q, --query <QUERY>... Specify URL query parameters (ex: -Q token=stuff -Q secret=key)
|
|
|
|
|
-R, --replay-codes <REPLAY_CODE>... Status Codes to send through a Replay Proxy when found (default: --status-
|
|
|
|
|
codes value)
|
|
|
|
|
-P, --replay-proxy <REPLAY_PROXY> Send only unfiltered requests through a Replay Proxy, instead of all
|
|
|
|
|
requests
|
|
|
|
|
--resume-from <STATE_FILE> State file from which to resume a partially complete scan (ex. --resume-from
|
|
|
|
|
ferox-1606586780.state)
|
|
|
|
|
-L, --scan-limit <SCAN_LIMIT> Limit total number of concurrent scans (default: 0, i.e. no limit)
|
|
|
|
|
-s, --status-codes <STATUS_CODE>... Status Codes to include (allow list) (default: 200 204 301 302 307 308 401
|
|
|
|
|
403 405)
|
|
|
|
|
-t, --threads <THREADS> Number of concurrent threads (default: 50)
|
|
|
|
|
--time-limit <TIME_SPEC> Limit total run time of all scans (ex: --time-limit 10m)
|
|
|
|
|
-T, --timeout <SECONDS> Number of seconds before a request times out (default: 7)
|
|
|
|
|
-u, --url <URL>... The target URL(s) (required, unless --stdin used)
|
|
|
|
|
-a, --user-agent <USER_AGENT> Sets the User-Agent (default: feroxbuster/VERSION)
|
|
|
|
|
-w, --wordlist <FILE> Path to the wordlist
|
|
|
|
|
--debug-log <FILE> Output file to write log entries (use w/ --json for JSON entries)
|
|
|
|
|
-d, --depth <RECURSION_DEPTH>
|
|
|
|
|
Maximum recursion depth, a depth of 0 is infinite recursion (default: 4)
|
|
|
|
|
|
|
|
|
|
-x, --extensions <FILE_EXTENSION>... File extension(s) to search for (ex: -x php -x pdf js)
|
|
|
|
|
-N, --filter-lines <LINES>... Filter out messages of a particular line count (ex: -N 20 -N 31,30)
|
|
|
|
|
-X, --filter-regex <REGEX>...
|
|
|
|
|
Filter out messages via regular expression matching on the response's body (ex: -X '^ignore me$')
|
|
|
|
|
|
|
|
|
|
--filter-similar-to <UNWANTED_PAGE>...
|
|
|
|
|
Filter out pages that are similar to the given page (ex. --filter-similar-to http://site.xyz/soft404)
|
|
|
|
|
|
|
|
|
|
-S, --filter-size <SIZE>... Filter out messages of a particular size (ex: -S 5120 -S 4927,1970)
|
|
|
|
|
-C, --filter-status <STATUS_CODE>... Filter out status codes (deny list) (ex: -C 200 -C 401)
|
|
|
|
|
-W, --filter-words <WORDS>... Filter out messages of a particular word count (ex: -W 312 -W 91,82)
|
|
|
|
|
-H, --headers <HEADER>... Specify HTTP headers (ex: -H Header:val 'stuff: things')
|
|
|
|
|
-o, --output <FILE> Output file to write results to (use w/ --json for JSON entries)
|
|
|
|
|
-p, --proxy <PROXY>
|
|
|
|
|
Proxy to use for requests (ex: http(s)://host:port, socks5(h)://host:port)
|
|
|
|
|
|
|
|
|
|
-Q, --query <QUERY>... Specify URL query parameters (ex: -Q token=stuff -Q secret=key)
|
|
|
|
|
-R, --replay-codes <REPLAY_CODE>...
|
|
|
|
|
Status Codes to send through a Replay Proxy when found (default: --status-codes value)
|
|
|
|
|
|
|
|
|
|
-P, --replay-proxy <REPLAY_PROXY>
|
|
|
|
|
Send only unfiltered requests through a Replay Proxy, instead of all requests
|
|
|
|
|
|
|
|
|
|
--resume-from <STATE_FILE>
|
|
|
|
|
State file from which to resume a partially complete scan (ex. --resume-from ferox-1606586780.state)
|
|
|
|
|
|
|
|
|
|
-L, --scan-limit <SCAN_LIMIT> Limit total number of concurrent scans (default: 0, i.e. no limit)
|
|
|
|
|
-s, --status-codes <STATUS_CODE>...
|
|
|
|
|
Status Codes to include (allow list) (default: 200 204 301 302 307 308 401 403 405)
|
|
|
|
|
|
|
|
|
|
-t, --threads <THREADS> Number of concurrent threads (default: 50)
|
|
|
|
|
--time-limit <TIME_SPEC> Limit total run time of all scans (ex: --time-limit 10m)
|
|
|
|
|
-T, --timeout <SECONDS> Number of seconds before a request times out (default: 7)
|
|
|
|
|
-u, --url <URL>... The target URL(s) (required, unless --stdin used)
|
|
|
|
|
-a, --user-agent <USER_AGENT> Sets the User-Agent (default: feroxbuster/VERSION)
|
|
|
|
|
-w, --wordlist <FILE> Path to the wordlist
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## 📊 Scan's Display Explained
|
|
|
|
|
@@ -813,7 +826,6 @@ few of the use-cases in which feroxbuster may be a better fit:
|
|
|
|
|
| | feroxbuster | gobuster | ffuf |
|
|
|
|
|
|------------------------------------------------------------------------------|---|---|---|
|
|
|
|
|
| fast | ✔ | ✔ | ✔ |
|
|
|
|
|
| easy to use | ✔ | ✔ | |
|
|
|
|
|
| allows recursion | ✔ | | ✔ |
|
|
|
|
|
| can specify query parameters | ✔ | | ✔ |
|
|
|
|
|
| SOCKS proxy support | ✔ | | |
|
|
|
|
|
|