Tool
dirsearch
- First Reported
- Mar 18, 2025
- Latest Reported
- Oct 9, 2026
Reported Context (4)
- The actors use BBScan, dirsearch, Fscan, ksubdomain, masscan, Nmap, OneForAll, ShuiZe, and WPScan to identify potential targets. CISA Details How China-Linked Actors Steal Sensitive Data
- Flax Typhoon was also seen using BBScan, dirsearch, Fscan, ksubdomain, masscan, Nmap, OneForAll, ShuiZe, and WPScan for reconnaissance, and command-line exploit utilities and the EBurst Microsoft Exchange password US Disrupts Chinese State-Linked Hacking Tools Used Against Critical Infrastructure
- ScreenOS, Jenkins, and Apache Struts. The scanner is complemented by open-source tooling like BBScan, dirsearch, Fscan, ksubdomain, masscan, NMAP, OneForAll, ShuiZe, and wpscan that are used to find vulnerabilities FBI Disrupts Flax Typhoon Tools Used to Target Critical Infrastructure
- version of the popular penetration testing tool, we found instances of SQLMap, Web-SurvivalScan, and dirsearch, suggesting the actor leveraged open-source tools to identify and exploit vulnerable web applications. Rust Loaders Deliver Cobalt Strike Cat in Intrusions Targeting South Korean Organizations
Malware (5)
People (4)
Threat Actors (5)
MITRE ATT&CK (21)
Vendors (9)
Products (7)
Tools (21)
Industries (10)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.