> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/internal-and-external-network-sec/enumeration/web-enumeration/tools/fuzzing/feroxbuster.md).

# feroxbuster

`feroxbuster` is a fast, simple, recursive content discovery tool written in Rust. It is used to brute-force directories and files on web servers. It supports wildcard filtering, recursion, smart status code filtering, and works well in CI environments due to its clean JSON output option.

It is known for its **speed and efficiency**, especially when compared to similar tools.

***

#### Default Configuration

| Setting                | Default Value                                                                       |
| ---------------------- | ----------------------------------------------------------------------------------- |
| **Wordlist**           | `/usr/share/seclists/Discovery/Web-Content/raft-small-words.txt` (if not specified) |
| **Threads**            | 50                                                                                  |
| **Timeout**            | 7 seconds                                                                           |
| **Recursion**          | Enabled                                                                             |
| **Status Codes Shown** | 200, 204, 301, 302, 307, 308, 401, 403                                              |
| **User-Agent**         | `feroxbuster/VERSION`                                                               |
| **HTTP Method**        | GET                                                                                 |

#### Syntax

```bash
feroxbuster -u <URL> [options]
```

***

#### Examples:-

* **Scan a target with the default wordlist**

```bash
feroxbuster -u http://example.com
```

* **Use a custom wordlist**

```bash
feroxbuster -u http://example.com -w /path/to/wordlist.txt
```

* **Specify file extensions**

```bash
feroxbuster -u http://example.com -x php,html,js
```

* **Disable recursion**

```bash
feroxbuster -u http://example.com --no-recursion
```

* **Set the number of concurrent threads**

```bash
feroxbuster -u http://example.com -t 100
```

* **Filter specific status codes**

```bash
feroxbuster -u http://example.com --filter-status 403,404
```

* **Follow redirects**

```bash
feroxbuster -u http://example.com --follow-redirects
```

* **Output results to JSON**

```bash
feroxbuster -u http://example.com -o output.json -q -s
```

* **Use a proxy**

```bash
feroxbuster -u http://example.com --proxy http://127.0.0.1:8080
```