skills.rest
AeonDave
AeonDaveCOMMUNITY
Explore all skills by this author →
GitHub

dirsearch

Scan web servers for hidden directories and files with recursive scanning.

15|1|Updated Feb 12, 2026
Search Tags:#penetration testing#reconnaissance#endpoint discovery#web scanning#dirsearch#directory brute-force
One-click install
npx skills add https://github.com/AeonDave/malskill --skill dirsearch
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dirsearch
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/recon/dirsearch
Command: npx skills add https://github.com/AeonDave/malskill --skill dirsearch

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify hidden directories, files, and endpoints on web servers that are not linked through standard navigation, aiding in security assessments and content discovery.

Core Features & Use Cases

  • Directory Brute-forcing: Scans web servers for common and custom directory and file names.
  • Recursive Scanning: Explores subdirectories to uncover deeper structures.
  • Multi-extension Support: Checks for various file types (e.g., .php, .bak, .txt).
  • Use Case: When assessing a web application, use this Skill to find administrative panels, backup files, or configuration files that might be exposed.

Quick Start

Run a basic scan against https://target.com using the dirsearch skill.

Frequently Asked Questions about dirsearch

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find hidden directories and files on a web server?▼

Web path scanning and directory brute-forcing uncovers hidden directories, files, and endpoints on web servers that are not linked through standard navigation to aid security assessments.

Can I scan for specific file extensions like backup or config files during endpoint discovery?▼

Yes, endpoint discovery supports multi-extension scanning to check for various file types like .php, .bak, and .txt, allowing you to find exposed backup or configuration files.

Does recursive scanning explore subdirectories to uncover deeper structures?▼

Recursive scanning explores subdirectories during web path scanning to uncover deeper directory structures and hidden endpoints beyond the initial top-level paths.

Do I need Python 3 to run directory brute-force scans?▼

Yes, you need Python 3 and the dirsearch package installed to execute directory brute-force scans and perform web path enumeration tasks.

What is the best way to discover exposed administrative panels during web reconnaissance?▼

Directory brute-forcing is the best way to discover exposed administrative panels by scanning web servers for common and custom directory and file names not visible in standard navigation.

Related Skills

Explore More Software Engineering Skills→
consigcody94consigcody94

Wsdiscovery

Discover WS-Discovery devices and output metadata in text, JSON, or XML.

Community
Intermediate
uphiagouphiago
1.1k

web-enumeration

Scan web servers for exposed sensitive files and hidden endpoints.

Community
Advanced
amano--amano--

burp-suite

Intercept HTTP traffic and test web applications for security vulnerabilities.

Community
Advanced
wgpsecwgpsec
1.6k

subdomain-deep

Enumerate subdomains via DNS brute-force, OSINT, and web crawling.

Official
Intermediate