Kali Linux Web Penetration Testing Cookbook - Second Edition

How it works...

DirBuster is a mixture of a crawler and brute forcer; it follows all links in the pages it finds but also tries different names for possible files. These names may be in a file similar to the one we used or may be automatically generated by DirBuster using the option of Pure Brute Force and setting the character set and minimum and maximum lengths for the generated words.

To determine if a file exists or not, DirBuster uses the response codes from the server. The most common responses are listed as follows:

• 200 OK: The file exists and the user can read it
• 404 File not found: The file does not exist in the server
• 301 Moved permanently: This is a redirect to a given URL
• 401 Unauthorized: Authentication is required to access ...