macOS
Homebrew已验证 · 100%
brew install feroxbusterlocal Homebrew formula metadata
安装
其他安装命令
Linux
Nix已验证 · 92%
nix profile install nixpkgs#feroxbusternixpkgs package indexes · pkgs/by-name/fe/feroxbuster/package.nix · 来源: api.github.com
openSUSE zypper已验证 · 92%
sudo zypper install feroxbusteropenSUSE Tumbleweed package metadata · feroxbuster · 来源: download.opensuse.org
Windows
Scoop已验证 · 92%
scoop install main/feroxbusterScoop official bucket manifest trees · bucket/feroxbuster.json · 来源: api.github.com
Windows Package Manager已验证 · 92%
winget install --id epi052.feroxbuster -eWindows Package Manager source index · epi052.feroxbuster · 来源: cdn.winget.microsoft.com
概览
软件包摘要
Fast, simple, recursive content discovery tool written in Rust
历史
项目历史与用法
feroxbuster is a Rust command-line tool for recursive web content discovery. Its README frames it as a forced-browsing tool: it combines brute force with wordlists to find unlinked resources, directories, files, and other predictable locations in web applications.
项目历史
The public GitHub repository was created in August 2020, and crates.io records the first `feroxbuster` crate release in October 2020. The project reached 1.0.0 within days of the initial crate publication and continued through a long 2.x line with regular releases.
The project documentation later moved from a very large README to a GitHub Pages documentation site, while the README retained quick-start installation and usage examples. The project also added an updater in the 2.x era and documents official distribution channels to avoid domain impersonation.
采用历史
feroxbuster's adoption path follows the Rust security-tool pattern: GitHub releases and crates.io for early users, then OS package managers and security distributions for everyday use. The README documents Kali, Homebrew, winget, Chocolatey, install scripts, and project docs for other platforms; the input package metadata also records Nix, Scoop, winget, and zypper packaging.
Crates.io metadata records more than 130,000 downloads and the repository README displays badges for GitHub and crates.io downloads. Those numbers support a real package-manager footprint for a specialized security CLI.
使用方式
Typical use passes a target URL, wordlist-derived extensions, filters for status codes or response sizes, recursion controls, headers, query parameters, proxy settings, and output options. The README examples show piping targets through standard input, proxying through Burp or SOCKS, passing authorization headers, and sending JSON or form bodies.
In practice feroxbuster is used during web application testing to enumerate hidden or unlinked resources. Package users care about fast installation, shell completions, a default config path on security distributions, and reproducible CLI behavior across Linux, macOS, and Windows.
为什么软件包爱好者会关心
feroxbuster is significant because it became one of the recognizable Rust replacements in the directory-enumeration and content-discovery space. It packages as a single CLI but has enough operational surface to matter: config files, completions, man pages, update behavior, and multiple binary distribution paths.
For maintainers, it is also a good example of security-tool packaging where provenance matters. The README explicitly warns about an unrelated impersonating domain and lists official download channels, which is unusually relevant package metadata for a pentesting tool.
时间线
- 2020: Public GitHub repository created.
- 2020: First crates.io release and 1.0.0 release published.
- 2023: 2.10.x release line appears on crates.io.
- 2025: crates.io records the 2.13.1 release.
Related projects
- feroxbuster is related to forced-browsing and directory-enumeration tools used in web security testing, and it is commonly paired with wordlists, proxies such as Burp Suite, and shell pipelines for target and result processing.
来源
安全态势
风险级别：绿色
narrow executable package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- narrow executable package without higher-risk signals
信号
- metadata:no-higher-risk-signals
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- Homebrew bottle 元数据适用于 6 个平台目标。
- 安装时包含 1 个运行时依赖。
- 构建元数据列出 2 个构建依赖。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Linux
/etc/feroxbuster/ferox-config.toml
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
feroxbuster | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-07-25
管理器版本2.13.1
管理器更新时间2026-06-22
本地数据OK
上游当前
检测到的最新版本v2.13.1
https://github.com/epi052/feroxbuster
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:feroxbuster |
|---|---|
| 版本 | 2.13.1 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/feroxbuster |
| 主页 | https://epi052.github.io/feroxbuster |
| 仓库 | https://github.com/epi052/feroxbuster |
| 上游文档 | https://epi052.github.io/feroxbuster |
| 许可证 | MIT |
| 源码归档 | https://github.com/epi052/feroxbuster/archive/refs/tags/v2.13.1.tar.gz |
| 最后更新 | 2026-06-22T14:03:19-07:00 |
| Pulse | updated |
| 依赖 | openssl@3 |
| 构建依赖 | pkgconf, rust |
| Bottle | 可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | feroxbuster |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Nix95%
feroxbuster
nix profile install nixpkgs#feroxbuster- normalized package name match
- 匹配方式：Feroxbuster
zypper95%
feroxbuster 2.13.1-1.4
A recursive content discovery tool
https://epi052.github.io/feroxbuster-docs/
sudo zypper install feroxbuster- License: MIT
- Category: Productivity/Networking/Diagnostic
- Architecture: x86_64
- Source Package: feroxbuster
- 3 依赖
- 1 提供
- normalized package name match
- 匹配方式：Feroxbuster
zypper95%
feroxbuster-bash-completion 2.13.1-1.4
Bash Completion for feroxbuster
https://epi052.github.io/feroxbuster-docs/
sudo zypper install feroxbuster-bash-completion- License: MIT
- Category: Productivity/Networking/Diagnostic
- Architecture: noarch
- Source Package: feroxbuster
- 2 依赖
- 1 提供
- normalized package name match
- 匹配方式：Feroxbuster
Scoop95%
main/feroxbuster
scoop install main/feroxbuster- normalized package name match
- 匹配方式：Feroxbuster
winget95%
epi052.feroxbuster
winget install --id epi052.feroxbuster -e- normalized package name match
- 匹配方式：Feroxbuster
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment