# URLBrute | Tool to Brute Forcing Website Sub-Domains and Directories

**URL:** <https://onehack.st/t/urlbrute-tool-to-brute-forcing-website-sub-domains-and-directories/95469>\
**Category:** Tools & Scripts\
**Tags:** cracking\
**Created:** [July 7, 2020, 12:53pm UTC](https://onehack.st/t/urlbrute-tool-to-brute-forcing-website-sub-domains-and-directories/95469 "2020-07-07T12:53:46Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [July 7, 2020, 12:53pm UTC](https://onehack.st/t/urlbrute-tool-to-brute-forcing-website-sub-domains-and-directories/95469/1 "2020-07-07T12:53:46Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/d/5/d52c81a113f8999af6699588ed8a9d21939c897f.png)

Finding directory listing on system is very crucial, because with directory listing, maybe you can perform Local File Inclusion (LFI) attack. For sys-admin you have to check the permission on your system file to secure your important data. And also attacker can enter the system in sub-domains, if your main domain is not vulnerable, another options to enter the system is sub-domain. So, make sure your sub-domain is also secure.

## What is this URLBrute

**URLBrute** is a tool to help you brute forcing website sub-domains and dirs.  
Can be used with python3 and python2. This tool will help you to test your website security by perform brute forcing directories and sub-domains.

## Dependencies

urlbrute.py

- **requests** \>= 2.21.0
- **bs4** \>= 0.0.1
- **datetime** \>= 4.3

Read to :

[Local/Remote File Inclution (LFI/RFI) Payload List](https://xploitlab.com/local-remote-file-inclution-lfi-rfi-payload-list/)

## How to install

In Linux:

chmod +x install.sh sudo ./install.sh

In Windows, install [python 3.7](https://www.python.org/downloads/release/python-373/), then run cmd as administrator:

install.bat

### Demo

[https://asciinema.org/a/328894](https://asciinema.org/a/328894)

## GitHub:

> **[GitHub - ReddyyZ/urlbrute: Directory/Subdomain scanner developed in GoLang.](https://github.com/ReddyyZ/URLBrute)**
>
> Directory/Subdomain scanner developed in GoLang.

_EDUCATIONAL PURPOSES ONLY._