Directory Enumeration with Dirb in Kali Linux

Step 1: Open Terminal

Launch Kali Linux and open a terminal.

Step 2: Basic Dirb Scan

Run Dirb with a target website URL:

dirb http://TARGET_IP_OR_DOMAIN

This performs a basic directory scan using the default wordlist.

Step 3: Using a Custom Wordlist

If you want to use a specific wordlist, use:

dirb http://TARGET_IP_OR_DOMAIN /usr/share/wordlists/dirb/common.txt

Step 4: Recursive Scanning

To scan deeper directories found in the initial scan:

dirb http://TARGET_IP_OR_DOMAIN -r

Step 5: Saving the Output

To save results to a file:

dirb http://TARGET_IP_OR_DOMAIN -o results.txt

Step 6: Identifying Security Risks

Look for sensitive directories like:

• /admin → Admin panels
• /backup → Backup files
• /config → Configuration files
• /logs → System logs

Step 7: How Attackers Exploit These Directories

• Admin Panels → Brute-force attacks to gain unauthorized access.
• Backup Files → May contain credentials or source code leaks.
• Configuration Files → Can expose database credentials or API keys.