Alternatives to Feroxbuster
Discover web content during an authorized application assessment. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Feroxbuster
Discover web content during an authorized application assessment.
Replacements
Listings that take over the same core job as Feroxbuster.
Gobuster
Check candidate web paths and network names during security testing.
Gobuster adds network name discovery modes alongside web path checks, and is licensed Apache-2.0 instead of MIT.
dirsearch
Web path scanner for discovering hidden directories and files.
dirsearch is a Python web path scanner with recursion, extension templates and several report formats, licensed GPL-2.0 instead of MIT.
ffuf
Test variations in HTTP requests with a command-line fuzzer.
ffuf fuzzes arbitrary parts of HTTP requests with configurable matching and filtering, so content discovery is one use of a more general tool.
Similar software
Related functionality, not a direct replacement.
SecLists
Find reusable test data for authorized security assessments.
Nikto
Web server scanner for risky files, outdated software and misconfigurations.
Burp Suite Community Edition
PortSwigger's free web security testing toolkit, for intercepting, inspecting and modifying HTTP traffic by hand.
Caido
Web security testing proxy for auditing web applications.
Wapiti
Check web applications with a Python-based vulnerability scanner.
ZAP
Open-source web application security scanner and intercepting proxy.
