winget install --id=MyCode83.godirb -e godirb is a fast directory brute-forcer written in Go, designed to discover hidden files and directories while reducing false positives through per-directory and per-extension response calibration.
Fast, modern directory, file, port and FUZZ brute-forcer written in Go.
Built for quick scans where you want a modern dirb-like tool: run it, get useful results, tune the obvious flags, and avoid dragging a full fuzzing framework into a simple job.
go install github.com/MyCode83/godirb@latest
brew install MyCode83/godirb/godirb
Download the latest release for your platform from the
Releases page and add it to your PATH.
Basic scan
godirb -u https://example.com
Recursive
godirb -u https://example.com -r
Recursive with a depth limit
godirb -u https://example.com -r --depth 2
Custom wordlist
godirb -u https://example.com -w paths.txt
JSON output
godirb -u https://example.com --json -o results.json
godirb is designed for the common case: you want to enumerate directories and files quickly, without configuring a large fuzzing framework.
http://host:FUZZ)DirSearch is a mature and feature-rich web path scanner.
godirb intentionally focuses on the most common workflow: install, run and get useful results with minimal setup.
| Feature | godirb | DirSearch |
|---|---|---|
| Find files and folders | ✅ | ✅ |
| Recursive scan | ✅ | ✅ |
| Custom wordlists | ✅ | ✅ |
| Written in Go | ✅ | ❌ |
| Single binary | ✅ | ❌ |
| Embedded default wordlists | ✅ | ❌ |
| Works without runtime wordlist files | ✅ | ❌ |
Port fuzzing (http://host:FUZZ) | ✅ | ❌ |
-r, --recursive)--depth, default: 2)-x, --ext)-w, --wordlist)-t, --threads)-i, --ignore)404,400,405,408Basic scan
godirb -u https://example.com
Recursive
godirb -u https://example.com -r
Recursive with one nested level
godirb -u https://example.com -r --depth 1
Custom wordlist
godirb -u https://example.com -w paths.txt
Extensions
godirb -u https://example.com -x php,txt,bak
FUZZ parameter
godirb -u "https://example.com/search?q=FUZZ" -w payloads
Port fuzzing
godirb -u https://example.com:FUZZ
Export JSON
godirb -u https://example.com --json -o results.json
Export CSV
godirb -u https://example.com --csv -o results.csv
DIR 200 1234 B https://example.com/admin
FILE 200 842 B https://example.com/login.php
DIR 403 795 B https://example.com/uploads
📖 Embedded wordlists
| Name | Purpose |
|---|---|
| small | common.txt from SecLists |
| medium | Default raft-medium-directories |
| big | Larger enumeration DirBuster big |
| ports | Port fuzzing |
| payloads | Generic payloads |
| xss | XSS payloads |
| lfi | LFI payloads |
Use godirb only for authorized security testing, labs and CTFs.
You are responsible for obtaining permission before scanning any target.
Licensed under the MIT License. See LICENSE for details.