Description
Feroxbuster is a fast, simple, recursive content discovery tool written in Rust. It performs forced browsing to find hidden files and directories. It excels at recursive scanning, automatically discovering new directories and scanning deeper.
Installation
BASH
# Using Cargo
cargo install feroxbuster
# Debian/Kali
sudo apt install feroxbuster
# Homebrew
brew install feroxbuster
Basic Usage
BASH
# Basic scan
feroxbuster -u https://target.com -w wordlist.txt
# With extensions
feroxbuster -u https://target.com -w wordlist.txt -x php,html,txt
Advanced Usage
BASH
# Recursive with depth control
feroxbuster -u https://target.com -w wordlist.txt --depth 3
# Filter by status codes
feroxbuster -u https://target.com -w wordlist.txt -C 404,403
# Filter by response size
feroxbuster -u https://target.com -w wordlist.txt -S 1234
# Set threads
feroxbuster -u https://target.com -w wordlist.txt -t 100
# With cookies
feroxbuster -u https://target.com -w wordlist.txt -b "session=abc123"
# JSON output
feroxbuster -u https://target.com -w wordlist.txt --json -o results.json
# Auto-tune (dynamic rate limiting)
feroxbuster -u https://target.com -w wordlist.txt --auto-tune
Common Workflows
BASH
# Deep recursive scan
feroxbuster -u https://target.com -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt -x php,html --depth 4 -t 100
# Quiet mode with output
feroxbuster -u https://target.com -w wordlist.txt -q -o results.txt