DirDar – A Tool That Searches For (403-Forbidden) Directories To Break It And Get Dir Listing On It

Click the icon to Follow me:- twitterTelegramRedditDiscord
DirDar 5 windows

bypass forbidden directories – find and identify dir listing – you can use it as directory brute-forcer as well


This tool is compatible with all kind of operating systems as long as you have GO compiler installed


You can use this command if you have Go installed and configured.

go get -u github.com/m4dm0e/dirdar

Or you can download a release. To make it easier to execute you can put the directory to the binary in your environment variable %PATH%.

Tool screen:

  • Linux

    DirDar 4 firstScreen
  • Windows

    DirDar 5 windows 1


  -threads int
Number of threads (Defaulf 40)
If you want to show errors!(Includes 404 errors) [True-False]
Print out only OK (Bypassed and dir listing)
-single string
Only scan single target e.g (-single https://example.com/)
-t int
Set the timeout of the requests (default 10000)
-wl string
Forbidden directories WordList

  • Screenshot

    DirDar 6 help

Bugs found by DirDar: (Will share the write up ASAP)

  • BackUp files at MTN Group (Triaged)
  • OLD php scripts to SQLi at MTN Group (Triaged)
  • OLD Files to information disclosure at BOSCH (Triaged)



Download DirDar

If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.


Original Source