DirDictionaryBruter Directory and Files Brute Forcer

This simple python application will help to find the unlinked files in server.
You need a best Dictionary and save it as "DirList" in same directoty of python file.

Run it by,

python ./DirBrute.py

Input  the URL which you need to brute force direcories.

It will save the founded files and directories logs in "DirLogs.log"

Open it and read that. It will help you to find hidden juicy files such as admin pages, text files, Uploaded PHP Shells, etc.

Fun with it...

Source Code

# # Greets to TOF members Coded32, null void, X-Hund, Evis, John, Alex and all Unkown members # Love to AMSTECK COLLEGE, Kalliasseri : Dheeraj, Ashwin, Jhelai, Arjun, Vipin, Jitendra # Special Thanqs to Vishnu_Nath # import time import urllib2 from urllib2 import Request, urlopen, URLError import socket import sys scan=0 found=0 n_found=0 create=open("DirLogs.log", "w") timeout = 10 socket.setdefaulttimeout(timeout) try: print "\t################################################################" print "\t# TerminalCoders.BlogSpot.iN OpenFire-Security.Net #" print "\t# ############### ######## ############ #" print "\t# # # ## ## # # #" print "\t# ###### ###### ## ## # ######## #" print "\t# # # ## ## # # #" print "\t# # # ## ## # ##### #" print "\t# # # ## ## # ##### #" print "\t# # # ## ## # # #" print "\t# # # ## ## # # #" print "\t# ##### [#] ######## [#] ##### #" print "\t# #" print "\t# coded by Ajith KP DirDictionaryBruter #" print "\t# Greets to Coded32 and T.O.F members #" print "\t################################################################" var1=0 var2=0 try: dirlist = open("DirList", "r") except(IOError): print "DirList Not Found!" exit() dirs = dirlist.read().split('\n') try: site = raw_input("\nURL: ") print ("\tChecking website " + site + "...") conn = urllib2.Request(site) urllib2.urlopen(site) print "\t[$] Yes... Server is Online." except (urllib2.HTTPError) as Exit: print("\t[!] Oops Error occured") raw_input("\t[!] Possible problems: Server offline, Invalid URL,Internet offline") exit() print("\t[+] Scanning " + site + "...\n\n") for dirz in dirs: dirz.replace("\n", "") dirz="/"+dirz url_z=site+dirz print("[#] Checking " + url_z+"...") req=Request(url_z) time.sleep(5) # For Bypass BOT TEST & DDOS TEST try: response = urlopen(req) except URLError, e: if hasattr(e, 'reason'): print("\t[x] Not Found") n_found=n_found+1 elif hasattr(e, 'code'): print("\t[x] Not Found") n_found-=n_found+1 else: try: logs=open("DirLogs.log", "a+") except(IOError): print "\t[x] Failed to create DirLogs.log" found_url=url_z print("\t>>> Found "+found_url) logs.writelines(found_url+"\n") found=found+1 tot=n_found+found logs.close() print "\t\nTotal scanned:",tot print "\tFound:",found print "\nFounded Logs are saved in DirLogs.log, Read it" except (urllib2.HTTPError, socket.error): print "\n\t[!] Session Cancelled; Error occured. Check internet settings" except (KeyboardInterrupt, SystemExit): print "\n\t[!] Session cancelled"