MENU
What tool would you use to search for hidden directories or files?
DIRB is a specialized web content scanning tool used in ethical hacking and penetration testing to discover hidden directories and files on web servers. It operates by performing a dictionary-based brute-force attack against a target website, attempting to access directories and files that are not publicly linked but may still be accessible. This makes option A the correct answer.
DIRB is typically used during the web application reconnaissance and enumeration phases of penetration testing. Ethical hackers rely on it to uncover misconfigurations such as exposed admin panels, backup files, configuration files, or outdated directories that could lead to further compromise. These hidden resources often exist due to poor security practices or improper cleanup during development.
Option B, Shodan, is incorrect because Shodan is a search engine used to discover internet-connected devices and services, not hidden directories within a specific website. Option C, Ping, is also incorrect because it is a network utility used only to test host reachability and does not interact with web servers at the application layer.
From a defensive security perspective, DIRB helps organizations identify unnecessary exposure in web environments. Discovering hidden directories allows administrators to remove, restrict, or secure them before attackers exploit them. When used ethically and with authorization, DIRB is a powerful tool for improving web application security and reducing attack surfaces.