A web application is suspected to have hidden directories and files. Which tool would you use to confirm their existence?

The correct answer is D. Dirb. Dirb is a web content scanner specifically designed to brute-force directories and filenames on web servers by testing URLs against a wordlist - making it the right tool when the goal is discovering hidden paths and files. Nikto (A) is a web server vulnerability scanner focused…

Question

Options

ANikto
BSQLmap
CBurp Suite
DDirb

How the community answered

(34 responses)

A
15% (5)
B
3% (1)
C
9% (3)
D
74% (25)

Explanation

Dirb is a web content scanner specifically designed to brute-force directories and filenames on web servers by testing URLs against a wordlist - making it the right tool when the goal is discovering hidden paths and files. Nikto (A) is a web server vulnerability scanner focused on misconfigurations and known CVEs, not directory enumeration. SQLmap (B) is an automated SQL injection tool and has no relevance to finding hidden directories. Burp Suite (C) is a powerful proxy-based web testing platform, but while it has some directory-scanning capability (via extensions like Intruder), it is not purpose-built for this task the way Dirb is.

Memory tip: Think of "Dirb = Directory buster" - the name literally starts with "Dir," which is a cue that it finds directories.

Community Discussion

No community discussion yet for this question.

Full GWAPT Practice