The application provides a
directory scanning method and device in a
penetration test scene and a storage medium, and relates to the technical field of information collection; the method comprises loading a single
configuration item in a set scanning mode; generating a dictionary
configuration item and a target thread number according to a current
operating system of a
target site; scanning and analyzing the directories in the
target site according to an imported initial dictionary
library and the dictionary
configuration item, adjusting the dictionary strategy configurable item in the initial dictionary
library according to the hit condition of the dictionaries in the initial dictionary
library, to generate a new dictionary library, and obtaining the final new dictionary library through multiple scanning tasks; constructing a
hit rate training model through the final new dictionary library, scanning the directories in the
target site according to the
hit rate training model, and outputting the scanning result of sensitive files. The dictionary variable can be continuously adjusted according to the hit condition of the dictionary, so as to gradually match whether the scanning configuration conforms to the expected effect, the scanning efficiency of the directories is effectively improved, and the
false positive rate and the false negative rate are effectively reduced.