Searchit is a fast, flexible, and powerful web directory scanner and fuzzer. It helps you discover hidden paths, perform adaptive fuzzing, and analyze web applications with ease.
You can build Searchit from source using Go or Make:
# Using Go
go build -o searchit main.go
# Using Make
make buildScan a target for directories:
searchit scan -u http://target.com/ -w common.txtFuzz a parameter:
searchit fuzz -u "http://target.com/page?id=FUZZ" -w common.txt
List available profiles:
searchit profile listDiscover directories and files on a web server.
searchit scan -u http://example.com -w ~/wordlists/rockyou.txt
Discover directories deeply by setting a recursion depth.
searchit scan -u http://example.com -r --max-depth 3 -w ~/wordlists/rockyou.txt
Automatically detect the technology stack of the target and adaptively inject high-probability paths on the fly.
searchit scan -u http://127.0.0.1:8080 -w ~/wordlists/rockyou.txt --adaptive
Fuzz request parameters, headers, and bodies seamlessly.
searchit fuzz -u http://127.0.0.1:8080/FUZZ -w ~/wordlists/rockyou.txt
Profiles allow you to bundle configurations, extensions, and targets for specific tasks (like WordPress or Laravel scanning).
searchit profile list
Searchit supports various structured output formats for downstream pipeline integrations.
| Format | Description | Example Command |
|---|---|---|
text | Plain text output | --format text |
json | Single-line JSON | --format json |
ndjson | Newline-delimited JSON | --format ndjson |
csv | Comma-separated values | --format csv |
markdown | Markdown table | --format markdown |
For more detailed documentation, check out the docs/ directory.