dirbuster
Web server directory brute-forcer
Matches ATT&CK tactic: Reconnaissance ↗
Toolweb-scanningreconnaissanceredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden within. DirBuster attempts to find these.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
See the official Kali tool page and upstream homepage linked above for installation and usage details.
