# @phra/nodebuster

> dirbuster clone for nodejs

Latest version **1.3.5** (published 2019-03-21) · GPL-3.0 license · 0 weekly downloads

## Install

```sh
npm install @phra/nodebuster
pnpm add @phra/nodebuster
yarn add @phra/nodebuster
bun add @phra/nodebuster
```

Provides the command `nodebuster`.

## Health

**Score 15/100 (F)** — status: abandoned.

Positive: no vulnerabilities.

Warnings: low downloads; no types; no esm support.

Negative: abandoned; low maintenance score.

## Facts

| | |
|---|---|
| Version | 1.3.5 |
| Published | 2019-03-21 |
| First published | 2018-04-14 |
| Weekly downloads | 0 |
| License | GPL-3.0 |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 6 |
| Unpacked size | 44.6 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 20 |
| Author | phra |
| Maintainers | phra |

## Links

- npm: https://www.npmjs.com/package/@phra/nodebuster
- Repository: https://github.com/phra/nodebuster
- npm.io page: https://npm.io/package/@phra/nodebuster

## Dependencies (6)

- [chalk](https://npm.io/package/chalk.md) ^2.4.1
- [caporal](https://npm.io/package/caporal.md) ^0.10.0
- [colorette](https://npm.io/package/colorette.md) ^1.0.6
- [wappalyzer](https://npm.io/package/wappalyzer.md) ^5.6.3
- [cli-progress](https://npm.io/package/cli-progress.md) ^2.1.0
- [chalk-animation](https://npm.io/package/chalk-animation.md) ^1.6.0

## Recent versions

- 1.3.5 (latest) — 2019-03-21
- 1.3.4 — 2018-10-19
- 1.3.2 — 2018-10-19
- 1.3.1 — 2018-10-19
- 1.3.0 — 2018-10-08
- 1.2.0 — 2018-08-28
- 1.1.0 — 2018-06-13
- 1.0.9 — 2018-06-02
- 1.0.8 — 2018-06-01
- 1.0.7 — 2018-06-01
- 1.0.6 — 2018-06-01
- 1.0.5 — 2018-06-01
- 1.0.4 — 2018-06-01
- 1.0.3 — 2018-04-20
- 1.0.2 — 2018-04-20
- … 2 more at https://npm.io/package/@phra/nodebuster/versions

## README

# NodeBuster

## Description

NodeBuster, or yet another DirBuster clone, is a Node.js application to bruteforce directories and files on HTTP(S) servers.

[![asciicast](https://asciinema.org/a/VFKMpmV7URVPpjk9odcEaSsW4.png)](https://asciinema.org/a/VFKMpmV7URVPpjk9odcEaSsW4)

## Prerequisites

- Node.js 8+

## Install

- Using npx:

```bash
npx @phra/nodebuster -h
```

- Global install:

```bash
npm i -g @phra/nodebuster # install it globally (onetime and updates)
nodebuster -h
```

## Example

- Using npx:

```bash
npx @phra/nodebuster dir --extensions php,txt,old --cookies "asd=lol","lol=asd" --user-agent "nodebuster" http://localhost:8000/
```

- Global install:

```bash
nodebuster dir --extensions php,txt,old --cookies "asd=lol","lol=asd" --user-agent "nodebuster" http://localhost:8000/
```

## Wappalyzer
[Wappalyzer](https://github.com/AliasIO/Wappalyzer) was integrated to automagically guess the extensions to bruteforce based on the detected technologies. In order to use it the `--extensions` (`-e`) parameters must be omitted.

- Example with Wappalyzer:

```bash
nodebuster dir http://localhost:8000/
```

## Synopsis


```
   nodebuster.js 1.3.0 

   USAGE

     nodebuster.js dir <url>

   ARGUMENTS

     <url>      <url> to attack      required      

   OPTIONS

     -w, --workers <workers>            Use n <workers>                     optional      default: 10                                                            
     -W, --wordlist <wordlist>          <wordlist> to use                   optional      default: "/usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt"
     -U, --user-agent <user-agent>      <user-agent> to use                 optional      default: "nodebuster"                                                  
     -e, --extensions <extensions>      <extensions> to use                 optional      default: []                                                            
     -C, --cookies <cookies>            Set <cookies>                       optional      default: []                                                            
     -H, --headers <headers>            <headers> to use                    optional      default: []                                                            
     -f, --consecutive-fails            Stop after <consecutive-fails>      optional      default: 15                                                            

   GLOBAL OPTIONS

     -h, --help         Display help                                      
     -V, --version      Display version                                   
     --no-color         Disable colors                                    
     --quiet            Quiet mode - only displays warn and error messages
     -v, --verbose      Verbose mode - will also output debug messages  
```

---
_Source: https://npm.io/package/@phra/nodebuster · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._