dirsearch

No entries match these filters. Clear filters

1. docs update Oct 10, 2026 · issue 101

   dirsearch wordlist docs surface template placeholders, --wordlist-categories, --wordlist-status, --wordlist-max-size, and backend selection⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Run WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server.-triggering payloads explicitly against a target without polluting your default scan.
   copy

   $ python3 dirsearch.py -u https://target --wordlist-categories aggressive

   Dry-run a templated wordlist to verify entry count before a long scan — useful when %CRUD_OP% and %SUBJECT% produce a large Cartesian product.
   copy

   $ python3 dirsearch.py -u https://target --wordlist-status --wordlist-max-size 500000

   Enumerate a REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. by combining a template wordlist with version and CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. placeholders, capping generation to avoid runaway expansion.
   copy

   $ python3 dirsearch.py -e json -u https://api.target --wordlist-max-size 200000 --wordlist-categories all

   • Adds --wordlist-categories flag to select bundled wordlist sets stored in db/categories/, including extensions, conf, vcs, backups, db, logs, keys, web, common, and the opt-in aggressive category (also reachable via the all selector).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds --wordlist-status flag to preview resolved wordlist files and generated entry count before a scan runs.
   • Adds --wordlist-max-size flag to cap the number of generated wordlist entries.
   • Adds --wordlist-backend flag with values auto (default), python (built-in), and native (requires a native backend build) to control wordlist generation.
   • Adds template wordlists in db/templates/ supporting placeholders: %EXT%, %SUBJECT%, %CRUD_OP%, %AUTH_OP%, %ADMIN_OP%, %ENV%, %SEP%, %DB% / %DB_ENGINE%, %ARCHIVE% / %ARCHIVE_EXT%, %BACKUP% / %BACKUP_EXT%, %API_VERSION%, %YYYY%, %YY%, %MM%, %DD%, %DATE%, %DATE_COMPACT%, and %CATEGORY:name%.

   +5 more show less

   • Adds --overwrite-extensions flag to replace existing extensions on wordlist entries with those supplied via -e.
   • Adds --exclude-extensions flag to strip all wordlist paths that carry specified extensions before scanning.
   • Adds --prefixes flag to prepend custom prefix strings to every wordlist entry.
   • Adds --suffixes flag to append custom suffix strings to every wordlist entry.
   • Supports multiple simultaneous wordlists by separating paths with commas (e.g. wordlist1.txt,wordlist2.txt).

   10 details in Everything

2. docs update Oct 10, 2026 · issue 101

   dirsearch exposes a Python API (DirsearchFuzzer, FuzzerConfig, FuzzerResult, Wordlist*) and adds a --wordlist-status inspection mode⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Exports DirsearchFuzzer, FuzzerConfig, FuzzerResult, Wordlist, WordlistState, and WordlistTemplate from lib.core.api for programmatic use.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Enforces Python 3.11 as the minimum required runtime, rejecting older interpreters at startup.
   • Exports DirsearchFuzzer, FuzzerConfig, FuzzerResult, Wordlist, WordlistState, and WordlistTemplate from lib.core.api for programmatic use.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !dirsearch now requires Python 3.11 or higher and will exit immediately on older Python versions.
3. docs update Aug 31, 2026 · issue 060

   dirsearch gains a Python API with DirsearchFuzzer, FuzzerConfig, Wordlist, and WordlistTemplate for programmatic and agent-driven scans.

   └──▷ USE IT
   Run an authenticated scan through a proxy, filtering to actionable status codes, using a pre-configured session.
   python copy

   import requests
   from dirsearch import DirsearchFuzzer, FuzzerConfig
   
   def session_factory():
       session = requests.Session()
       session.headers.update({"authorization": "Bearer TOKEN"})
       session.proxies.update({"https": "http://127.0.0.1:8080"})
       return session
   
   results = DirsearchFuzzer(
       FuzzerConfig(
           url="https://example.com",
           wordlist=["admin", "api/users"],
           session_factory=session_factory,
           include_status_codes={200, 401, 403},
       )
   ).run()
   
   for r in results:
       print(r.status, r.url)

   Generate a focused API wordlist from a built-in template with target-specific subjects, capped to avoid agent runaway expansion.
   python copy

   from dirsearch import DirsearchFuzzer, FuzzerConfig, Wordlist, WordlistTemplate, WordlistLimitError
   
   template = WordlistTemplate.from_builtin(
       "api",
       placeholders={"SUBJECT": ["users", "orders", "invoices", "health"]},
   )
   
   try:
       wordlist = Wordlist.from_template(template, extensions=("json",), max_entries=10_000)
   except WordlistLimitError:
       raise RuntimeError("Template too broad — narrow subjects or extensions")
   
   results = DirsearchFuzzer(
       FuzzerConfig(
           url="https://api.example.com",
           wordlist=wordlist,
           include_status_codes={200, 204, 401, 403},
       )
   ).run()

   Replay a proxy-captured request as the scan base, so method, headers, and body are preserved exactly as the browser sent them.
   python copy

   from dirsearch import DirsearchFuzzer, FuzzerConfig
   
   config = FuzzerConfig.from_raw_request(
       raw_file="tmp/request.txt",
       scheme="https",
       wordlist=["admin", "api/users", "api/orders"],
       include_status_codes={200, 401, 403},
   )
   
   results = DirsearchFuzzer(config).run()
   for r in results:
       print(r.status, r.url)

   • Adds DirsearchFuzzer and FuzzerConfig Python classes — call DirsearchFuzzer(config).run() to run a scan and receive a list of FuzzerResult objects without touching the CLI.
   • Adds FuzzerConfig fields headers, user_agent, http_method, timeout, follow_redirects, verify_tls, include_status_codes, and exclude_status_codes to control request behavior per scan.
   • Adds session_factory parameter on FuzzerConfig to supply a pre-configured requests.Session for authenticated scans, proxy routing, client certificates, or custom retry adapters.
   • Adds raise_on_error parameter on FuzzerConfig to abort a scan immediately on any request error instead of continuing.
   • Adds result_predicate parameter on FuzzerConfig for custom per-result match logic that runs after status-code filtering — enables response-body inspection such as detecting OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. documents.

   +8 more show less

   • Adds on_result, on_not_found, and on_error callbacks on DirsearchFuzzer to stream findings in real time while still returning the final list from run().
   • Adds FuzzerConfig.from_raw_request() class method accepting a raw HTTP request via raw_request (bytes or str) or raw_file (path), preserving method, headers, query string, and body for proxy-captured or fixture-based scans.
   • Adds Wordlist class with deduplication, comment/blank-line stripping, and slash normalization; supports Wordlist.from_file() to load a path list from disk and wordlist.state(index=N) to checkpoint and shard a list.
   • Adds WordlistTemplate with built-in placeholders (%EXT%, %SUBJECT%, %CRUD_OP%, %AUTH_OP%, %ADMIN_OP%, %ENV%, %SEP%, %DB%, %DB_ENGINE%, %ARCHIVE%, %ARCHIVE_EXT%, %BACKUP%, %BACKUP_EXT%, %API_VERSION%, %YYYY%, %YY%, %MM%, %DD%, %DATE%, %DATE_COMPACT%, %CATEGORY:name%) that expand as a Cartesian product into concrete paths.
   • Adds WordlistTemplate.from_builtin(name, placeholders=...) to load named templates from db/templates/ and WordlistTemplate.from_file(path) for custom template files.
   • Adds Wordlist.from_template(template, extensions=..., max_entries=N) to materialise a WordlistTemplate into a Wordlist, raising WordlistLimitError when the expansion exceeds max_entries.
   • Adds %CATEGORY:name% placeholder backed by db/categories/name.txt, with broad categories common, web, conf, vcs, backups, db, logs, keys, extensions and technology categories such as python/fastapi, python/django, node/express, java/spring, php/wordpress, php/laravel, infra/aws, infra/docker, infra/k8s.
   • Each FuzzerResult exposes url, path, status, length, content_type, redirect, elapsed, headers, and body for downstream processing or LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-assisted analysis.

   13 details in Everything

4. docs update Aug 31, 2026 · issue 060

   dirsearch adds JSON-based scan session save/resume with --session, --list-sessions, and --sessions-dir flags

   └──▷ TRY IT
   Resume a long-running scan that was interrupted mid-way through a large wordlist.
   copy

   $ python3 dirsearch.py -s sessions/my_session

   List all saved sessions stored in a non-default location to find a session to resume.
   copy

   $ python3 dirsearch.py --list-sessions --sessions-dir /path/to/sessions

   • Adds -s/--session flag to resume a previously saved scan session from a named directory.
   • Adds --list-sessions flag to enumerate all resumable sessions, showing target URL, remaining targets and directories, jobs processed, error count, and last modified time.
   • Adds --sessions-dir flag to specify a custom directory when listing or loading sessions.
   • Sessions are now stored in JSON format as a directory bundle with meta.json, controller.json, dictionary.json, and options.json files for human-readable inspection.
   • Sessions maintain an output history across resumes, appending timestamped results from each interrupted scan.

   +1 more show less

   • Default session storage is <dirsearch>/sessions/ for source installs and $HOME/.dirsearch/sessions/ for bundled binaries.

   6 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Legacy .pickle and .pkl session files are no longer supported; existing saved sessions in those formats cannot be resumed.
5. docs update Aug 30, 2026 · issue 059

   dirsearch adds backup file discovery, split help views, and dual response-saving formats (--save-response, --save-response-jsonl).

   └──▷ TRY IT
   Save raw response files during a scan for offline analysis or evidence collection.
   copy

   $ dirsearch -u https://example.com -w /usr/share/wordlists/dirb/common.txt --save-response ./responses/

   Capture versioned JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. records of all matched responses to feed into a SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. or log pipeline.
   copy

   $ dirsearch -u https://example.com -w /usr/share/wordlists/dirb/common.txt --save-response-jsonl ./results.jsonl

   Explore the full set of available dirsearch options beyond the default abbreviated help.
   copy

   $ dirsearch -hh

   • Adds --save-response flag to save raw response files for matched results.
   • Adds --save-response-jsonl flag to save versioned JSONL records of matched responses.
   • Splits CLI help into a common view (-h / --help) and a complete view (-hh / --help-all).
   • Adds opt-in backup file discovery for files matched during a scan.
   • Documents the complete template wordlist placeholder reference.

   5 details in Everything

6. docs update Aug 22, 2026 · issue 053

   dirsearch v0.5.0 adds async/Rust backends, category wordlists, MySQL/PostgreSQL reporting, a Python API, and resumable JSON sessions.

   └──▷ TRY IT
   Run a scan using the Rust native backend for maximum throughput on a target.
   copy

   $ dirsearch -u https://example.com --request-backend native --wordlist-backend native

   Scan a target using PHP- and framework-specific wordlist categories to focus on relevant paths.
   copy

   $ dirsearch -u https://example.com --wordlist-categories php,infrastructure

   Resume a previous scan by listing saved sessions and continuing by ID.
   copy

   $ dirsearch --list-sessions

   • Adds --request-backend native and --wordlist-backend native flags to enable a Rust native backend for GET scans and native wordlist generation.
   • Adds --wordlist-categories flag with built-in categories (PHP, Python, Java, .NET, Node, ColdFusion, infrastructure) for targeted discovery.
   • Adds --wordlist-status and --wordlist-max-size flags, plus selectable wordlist backends (auto, python, native).
   • Adds --sync flag to keep the legacy threaded scanning stack; async scanning is now the default runtime on supported Python versions.
   • Adds --disable-cli flag as a new scan control option.

   +14 more show less

   • Adds --verbose output for response elapsed time and content type.
   • Adds --list-sessions flag and session resume by ID for resumable scan sessions.
   • Adds MySQL and PostgreSQL report targets, installable via dirsearch[mysql], dirsearch[postgresql], or dirsearch[db] extras.
   • Adds a Python API with FuzzerConfig, DirsearchFuzzer, structured results, wordlist helpers, and template wordlist support.
   • Template wordlists now support placeholders: %SUBJECT%, %CRUD_OP%, %AUTH_OP%, %DATE%, %API_VERSION%, %CATEGORY:name%, and %EXT%.
   • Supports multiple output formats written from a single run, with report paths and SQL table names accepting variables.
   • Adds Nmap XML target import for scan target specification.
   • Adds maximum runtime per target and non-default network interface selection as new scan controls.
   • Resumable sessions now use JSON controller state instead of pickle, with Windows-safe timestamps in session paths.
   • Expands bundled discovery data with new framework paths, WordPress/WooCommerce entries, API/Ollama/OpenAI endpoints, and traversal-oriented entries.
   • Publishes Linux x64 Docker images to GitHub Container Registry in async, threaded, and native-rust variants.
   • PyInstaller release builds now cover Windows x64, Linux x64, Linux ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead., macOS Intel, and macOS Apple Silicon.
   • Python support now targets Python 3.11–3.14, with release builds prepared on Python 3.14.
   • Provides portable CPython archives with compiled dependencies as an alternative for users affected by PyInstaller antivirus false positives.

   19 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Legacy pickle session files are no longer loaded directly; existing pickle sessions will produce a warning and cannot be resumed without recreation.
   • !Optional DB dependencies (MySQL, PostgreSQL) are now explicit extras (dirsearch[mysql], dirsearch[postgresql], dirsearch[db]) rather than mandatory runtime dependencies.
   • !The old dependency installer path was removed.
7. docs update Aug 22, 2026 · issue 053

   dirsearch exposes a public Python API and adds a --wordlist-status inspection mode requiring Python 3.11+

   └──▷ USE IT
   Use dirsearch's fuzzing engine programmatically inside a custom Python script.
   python copy

   from dirsearch import DirsearchFuzzer, FuzzerConfig, Wordlist

   • Exports a public Python API via dirsearch.py — DirsearchFuzzer, FuzzerConfig, FuzzerResult, Wordlist, WordlistState, and WordlistTemplate are now importable from lib.core.api and listed in __all__.
   • Adds a wordlist_status mode (driven by options['wordlist_status']) that prints the loaded wordlist files, total generated entries, and the wordlist_max_size generation limit, then exits — useful for auditing dictionary configuration before a scan.
   • Raises minimum supported Python version to 3.11; dirsearch now exits with an error message if run on Python 3.10 or lower.

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !dirsearch now requires Python 3.11 or higher; installations running Python 3.10 or below will receive 'Sorry, dirsearch requires Python 3.11 or higher' and exit immediately.
8. docs update Aug 22, 2026 · issue 053

   dirsearch config.ini now documents full default configuration including ffuf/wfuzz-style matchers, SQL output backends, and wordlist controls

   └──▷ USE IT
   Route all matched findings into a MySQL database for team-shared reporting across multiple scan sessions.
   config.ini copy

   # In config.ini
   mysql-url = mysql://scanner:secret@dbhost/dirsearch
   output-sql-table = {scheme}_{host}:{port}
   output-formats = plain

   Apply ffuf-style response filtering to drop junk responses (0-byte or not found bodies) and match only substantive content during discovery.
   config.ini copy

   # In config.ini
   filter-mode = or
   filter-size = 0
   filter-regex = "not found"
   matcher-mode = or
   match-size = 100-2000
   match-status = 200-299,401,403

   Generate per-host JSON reports with dynamic filenames and automatically skip rate-limited targets during large-scale scans.
   config.ini copy

   # In config.ini
   output-formats = json
   output-file = reports/{host}/{scheme}_{port}.{extension}
   skip-on-status = 429
   target-max-time = 300

   • Adds matcher-mode and filter-mode keys (values: or) to config.ini, enabling ffuf/wfuzz-inspired match/filter logic for responses.
   • Adds match-status, filter-status, match-size, filter-size, match-words, filter-words, match-lines, filter-lines, match-regex, filter-regex, match-time, and filter-time keys to config.ini for granular response filtering and matching.
   • Adds mysql-url and postgres-url keys to config.ini (e.g. mysql://user:password@localhost/database) enabling SQL database output alongside the existing SQLite backend.
   • Adds output-sql-table key to config.ini (default: {scheme}_{host}:{port}) controlling the table name used for SQLite, MySQL, and PostgreSQL output.
   • Adds output-formats key to config.ini supporting simple, plain, json, xml, md, csv, html, and sqlite output formats.

   +14 more show less

   • Adds output-file key to config.ini with template variables {extension}, {format}, {host}, {scheme}, {port}, {date}, and {datetime} for dynamic report file naming.
   • Adds wordlist-backend (default: auto) and wordlist-max-size (default: 500000) keys to config.ini to control wordlist loading behavior.
   • Adds wordlist-categories key to config.ini (e.g. common,conf,web) for selecting predefined wordlist categories.
   • Adds target-max-time key to config.ini to set a per-target time limit distinct from the global max-time limit.
   • Adds skip-on-status key to config.ini (default: 429) to automatically skip targets returning specific HTTP status codes.
   • Adds network-interface key to config.ini (e.g. eth0) to bind scans to a specific network interface.
   • Adds log-file and log-file-size keys to config.ini for configuring log output path and maximum log file size.
   • Adds recursion-status key to config.ini (default: 200-399,401,403) to define which HTTP status codes trigger recursive scanning.
   • Adds auto-calibration key to config.ini to force wildcard calibration from scan start, supplementing automatic fallback calibration.
   • Adds filter-threshold key to config.ini for controlling response filter sensitivity.
   • Adds request-backend key to config.ini (default: python) to select the HTTP request backend.
   • Adds replay-proxy key to config.ini (e.g. localhost:8000) for replaying matched requests through a secondary proxy.
   • Adds disable-cli key to config.ini to suppress interactive CLI output.
   • Adds show-redirects-history key to config.ini to display redirect chains in output.

   19 details in Everything

9. docs update Aug 22, 2026 · issue 053

   dirsearch exposes a public Python API with DirsearchFuzzer, FuzzerConfig, FuzzerResult, Wordlist, and related classes.

10. docs update Aug 14, 2026 · issue 045

    dirsearch config.ini now documents defaults and advanced options for recursion, calibration, matchers, output formats, and SQL backends.

    └──▷ USE IT
    Write scan results to PostgreSQL and an HTML report simultaneously, using dynamic file naming based on host and date.
    config.ini copy

    # config.ini
    output-formats = html
    output-file = reports/{host}/{date}.{extension}
    postgres-url = postgres://user:password@localhost/dirsearch

    Enable ffuf-style response matching to surface only responses with 100-2000 bytes and 10-100 words, filtering noise from large or empty replies.
    config.ini copy

    # config.ini
    matcher-mode = or
    match-size = 100-2000
    match-words = 10-100
    filter-size = 0

    Automatically skip rate-limited targets and cap total scan time per host to avoid stalling CI pipelines.
    config.ini copy

    # config.ini
    skip-on-status = 429
    target-max-time = 120
    auto-calibration = True

    • Adds skip-on-status default of 429 in config.ini to automatically skip targets returning rate-limit responses.
    • Adds target-max-time key to config.ini to set a per-target maximum scan time (separate from global max-time).
    • Adds auto-calibration key to config.ini to force extra wildcard calibration from the start of a scan.
    • Adds matcher-mode and filter-mode keys (values: or) to config.ini enabling ffuf/wfuzz-style advanced opt-in matching and filtering logic.
    • Adds match-status, filter-status, match-size, filter-size, match-words, filter-words, match-lines, filter-lines, match-regex, filter-regex, match-time, and filter-time keys to config.ini for fine-grained response matching and filtering.

    +14 more show less

    • Adds wordlist-backend (default: auto) and wordlist-max-size (default: 500000) keys to config.ini for wordlist source and size control.
    • Adds wordlist-categories key to config.ini accepting values such as common, conf, web to select built-in wordlist sets.
    • Adds request-backend key (default: python) to config.ini to select the HTTP request engine.
    • Adds output-formats key to config.ini supporting simple, plain, json, xml, md, csv, html, and sqlite report formats.
    • Adds output-file key to config.ini with template variables {extension}, {format}, {host}, {scheme}, {port}, {date}, and {datetime} for dynamic report file naming.
    • Adds mysql-url and postgres-url keys to config.ini enabling scan results to be written directly to MySQL or PostgreSQL databases.
    • Adds output-sql-table key to config.ini (default: {scheme}_{host}:{port}) controlling the table name for SQLite, MySQL, and PostgreSQL output.
    • Adds log-file and log-file-size keys to config.ini for persistent scan logging with a configurable size cap.
    • Adds network-interface key to config.ini (e.g. eth0) to bind scans to a specific network interface.
    • Adds replay-proxy key to config.ini to forward matched responses through a secondary proxy.
    • Adds filter-threshold key to config.ini for numeric response-filtering thresholds.
    • Adds exclude-redirect and exclude-response keys to config.ini for filtering results by redirect pattern or reference response file.
    • Adds exclude-texts key to config.ini accepting a list of strings (e.g. 'Not found', '404') to exclude responses containing those bodies.
    • Adds recursion-status (default: 200-399,401,403) and max-recursion-depth (default: 0) keys to config.ini for controlling recursive scan scope.

    19 details in Everything

11. docs update Aug 14, 2026 · issue 045

    dirsearch native backend gains HTTP proxy support and redirect following

    • Adds HTTP proxy support to native scans, allowing native-backend scans to route requests through an HTTP proxy.
    • Adds redirect following for native scans, enabling the native backend to honor HTTP redirects during directory enumeration.
    • Bounds native response body memory usage, preventing unbounded memory consumption during large native scans.
    • Adds native backend parity guardrails and CI integration to ensure the native scanner matches the behaviour of the standard backend.

    4 details in Everything

12. v0.5.0 Aug 14, 2026 · issue 045

    dirsearch v0.5.0 adds async/Rust-native backends, category wordlists, template placeholders, a Python API, resumable JSON sessions, and multi-format reporting.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.5.0 https://github.com/maurosoria/dirsearch.git
    # already have the repo? check out this version:
    $ git checkout v0.5.0

    └──▷ TRY IT
    Run a scan using the Rust native backend for maximum throughput on a large wordlist.
    copy

    $ dirsearch -u https://target -e php,html,js --request-backend native --wordlist-backend native -w /path/to/wordlist

    Scan a target using category-based wordlists to focus on PHP and Node.js paths without maintaining a manual wordlist.
    copy

    $ dirsearch -u https://target -e php,js --wordlist-categories php,node

    • Adds --request-backend native and --wordlist-backend native flags to enable a Rust native backend for GET scans and wordlist generation.
    • Adds --sync flag to fall back to the legacy threaded stack when async is not desired.
    • Adds --wordlist-categories flag to select category-based wordlists (PHP, Python, Java, .NET, Node, ColdFusion, and infrastructure).
    • Adds --wordlist-status and --wordlist-max-size flags and selectable wordlist backends (auto, python, native).
    • Adds template wordlist placeholders: %SUBJECT%, %CRUD_OP%, %AUTH_OP%, %DATE%, %API_VERSION%, %CATEGORY:name%, and %EXT%.

    +15 more show less

    • Adds --list-sessions flag and session resume by ID; sessions now store JSON controller state instead of pickle.
    • Adds --disable-cli flag as a new scan control option.
    • Adds Nmap XML target import as a new scan input source.
    • Adds --verbose enhancements to optionally show response elapsed time and content type.
    • Adds MySQL and PostgreSQL report backends, available as optional extras dirsearch[mysql], dirsearch[postgresql], and dirsearch[db].
    • Supports writing multiple output formats in a single run, with report paths and SQL table names accepting variables.
    • Adds a Python API with FuzzerConfig, DirsearchFuzzer, structured results, wordlist helpers, and template wordlist support.
    • Adds python -m dirsearch entrypoint support.
    • Expands bundled discovery data with new framework paths, WordPress and WooCommerce entries, API/Ollama/OpenAI endpoints, and traversal-oriented entries.
    • Adds advanced match/filter controls for status, size, word count, line count, regex, and elapsed time.
    • Adds maximum runtime per target and non-default network interface selection as scan controls.
    • PyInstaller release builds now cover Windows x64, Linux x64, Linux ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead., macOS Intel, and macOS Apple Silicon across async, threaded, and native-rust stack variants.
    • Publishes Linux x64 Docker images to GitHub Container Registry for each release stack.
    • Provides portable CPython archives with compiled dependencies as an alternative for users affected by PyInstaller antivirus false positives.
    • Hardens XML parsing with safe XML handling to protect against malicious input.

    20 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Resumable sessions now use JSON controller state; legacy pickle sessions are no longer loaded directly and will produce a warning on upgrade.
    • !Optional DB dependencies (MySQL, PostgreSQL) are now explicit extras (dirsearch[mysql], dirsearch[postgresql], dirsearch[db]) rather than mandatory runtime dependencies — existing installs that relied on auto-installed DB drivers must reinstall with the appropriate extra.
    • !The old dependency installer path was removed.
13. docs update Aug 9, 2026 · issue 040

    dirsearch exposes a public Python API and adds a --wordlist-status inspection mode; now requires Python 3.11+.

    └──▷ USE IT
    Embed dirsearch fuzzing logic directly in a Python script using the new public API.
    python copy

    from lib.core.api import DirsearchFuzzer, FuzzerConfig, FuzzerResult, Wordlist

    • Exports a public Python API via from lib.core.api import DirsearchFuzzer, FuzzerConfig, FuzzerResult, Wordlist, WordlistState, WordlistTemplate — enabling programmatic embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. of dirsearch fuzzing in other tools.
    • Adds wordlist_status mode (driven by options['wordlist_status']) that prints wordlist file count, individual file paths, generated entry count, and the wordlist_max_size generation limit, then exits — useful for verifying wordlist configuration before a scan.
    • Warns users when loading a session file via options['session_file'] that it will override current options, requiring explicit [c]ontinue confirmation.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !dirsearch now requires Python 3.11 or higher; any environment running Python 3.10 or older will receive an error and exit on startup.
14. docs update Jul 24, 2026 · issue 024

    dirsearch v0.4.3 adds SQLite reports, progress save/resume, client cert support, and built-in web crawler.

    • Automatically detects HTTP or HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. URI scheme when no scheme is provided in the target URL.
    • Adds SQLite as a new report output format.
    • New option to overwrite unwanted extensions with a selected set of extensions.
    • New option to view redirect history when following redirects.
    • New option to crawl web paths discovered in HTTP responses.

    +4 more show less

    • Saves all HTTP traffic to the log file for offline review.
    • Adds capability to save scan progress and resume it later.
    • Supports client certificate authentication.
    • Configurable maximum log file size via configuration.

    9 details in Everything

15. docs update Jul 24, 2026 · docs issue 004

    dirsearch v0.4.3 adds SQLite reports, progress save/resume, client cert support, and built-in web crawler.

    • Automatically detects HTTP or HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. URI scheme when no scheme is provided in the target URL.
    • Adds SQLite as a new report output format.
    • New option to overwrite unwanted extensions with a selected set of extensions.
    • New option to view redirect history when following redirects.
    • New option to crawl web paths discovered in HTTP responses.

    +4 more show less

    • Saves all HTTP traffic to the log file for offline review.
    • Adds capability to save scan progress and resume it later.
    • Supports client certificate authentication.
    • Configurable maximum log file size via configuration.

    9 details in Everything

16. v0.4.3 Oct 5, 2022 · release notes

    dirsearch v0.4.3 adds SQLite reports, CRLD support, client certs, and progress resume.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.4.3 https://github.com/maurosoria/dirsearch.git
    # already have the repo? check out this version:
    $ git checkout v0.4.3

    └──▷ TRY IT
    Export scan results to a local SQLite database for querying with SQL.
    copy

    $ dirsearch -u https://target.com -f sqlite --output-dir ./reports

    • -f sqlite enables SQLite report format for scan results
    • --crawl-depth <N> supports crawling web paths in responses (CRLD)
    • --scheme auto automatically detects HTTP or HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. scheme

    3 details in Everything

17. v0.4.2 Sep 13, 2021 · release notes

    New CLI flags for HTTP behavior control: raw requests, auth types, recursion limits, and status code filters

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.4.2 https://github.com/maurosoria/dirsearch.git
    # already have the repo? check out this version:
    $ git checkout v0.4.2

    • --scheme <http|https> configures the default URL scheme when none is provided in targets
    • -s <code[,code...]> skips requests matching specified status codes during scanning
    • --max-duration <time> sets maximum runtime for a scan session
    • --rate-limit <n> caps the maximum request rate per second
    • --recursive --recursion-status <codes> enables deep recursive scanning based on response status codes

    5 details in Everything

18. v0.4.1 Dec 9, 2020 · release notes

    dirsearch v0.4.1 adds CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. brute-forcing, SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access. proxy, XML/Markdown/CSV reports, and range-based status filtering.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.4.1 https://github.com/maurosoria/dirsearch.git
    # already have the repo? check out this version:
    $ git checkout v0.4.1

    └──▷ TRY IT
    Scan all IPs in a /24 subnet using a CIDR notation target.
    copy

    $ dirsearch -t '192.168.1.0/24' --cidr

    Export results as CSV and filter for 2xx status codes using range syntax.
    copy

    $ dirsearch -u https://example.com -f csv --status-codes-range '200-299'

    Route traffic through a local SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy while loading headers from a file.
    copy

    $ dirsearch -u https://example.com --socks-proxy socks5://127.0.0.1:9050 --headers-file headers.txt

    • --cidr argument added to scan all hosts in a CIDR block instead of a single IP
    • --socks-proxy argument enables traffic through a SOCKS proxy
    • --response-sizes flag supports human-readable size exclusion (e.g., 1KB, 5MB)
    • --headers-file flag loads custom headers from a file
    • --status-codes-range flag allows filtering by status code ranges (e.g., 200-299)

    +7 more show less

    • Automatic detection of HTTP 429 Too Many Requests responses
    • --output-format supports xml, markdown, and csv report formats
    • --capital-wordlist option enables capitalization in wordlists
    • --replay-proxy flag forwards found paths to a replay proxy
    • --remove-extensions flag removes all extensions from the wordlist
    • --no-color flag disables colored output
    • -v or --debug enables debug mode

    12 details in Everything

19. v0.4.0 Sep 26, 2020 · release notes

    dirsearch v0.4.0 adds HTTP data support, custom prefix/suffix filters, and new output formatting options

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.4.0 https://github.com/maurosoria/dirsearch.git
    # already have the repo? check out this version:
    $ git checkout v0.4.0

    └──▷ USE IT
    Scan a directory while only returning results with HTTP body content, filtering by status code 200 or 404.
    shell copy

    dirsearch -u https://example.com/admin --http-method POST -d 'key=value' --include-status-codes 200,404

    Filter scan results to only include URLs with specific prefixes/suffixes and exclude certain file extensions.
    shell copy

    dirsearch -u https://example.com --prefix '/api/' --suffix '.json' --exclude-extensions php,aspx

    Use clean output view and filter responses by length to focus on specific content types.
    shell copy

    dirsearch -u https://example.com --clean-view --minimal-response-length 100 --maximal-response-length 500

    • --exclude-extensions argument added to exclude specific extensions during scanning
    • --clean-view option added to provide cleaner console output
    • Added option to print the full URL in the output
    • Support HTTP request data for POST requests and other methods with body content
    • --minimal-response-length and --maximal-response-length arguments added to filter responses by size

    +2 more show less

    • --include-status-codes and --exclude-status-codes arguments added to filter results by status code
    • Added custom prefix and suffix support for target URLs

    7 details in Everything

20. 0.2.4 Jul 17, 2014 · release notes

    dirsearch 0.2.4 adds Windows support, subdirectory scan controls, custom headers, and Dirbuster dictionaries.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.2.4 https://github.com/maurosoria/dirsearch.git
    # already have the repo? check out this version:
    $ git checkout 0.2.4

    • --scan-subdirs argument added to control recursive directory scanning
    • --exclude-subdirs argument added to specify directories to skip during scans
    • --header argument added to inject custom HTTP headers into requests
    • Added Windows OS support for execution
    • Dirbuster dictionaries added as default wordlists

    5 details in Everything