Gobuster
Web Security 4 commands

Gobuster

Tool used to brute-force URIs, DNS subdomains, virtual host names, and S3 buckets.

directorybruteforceenumerationweb
Official docs

Installation

sudo apt install gobuster
# or
go install github.com/OJ/gobuster/v3@latest

Commands & usage

4 entries
  • gobuster dir -u <url> -w <wordlist>

    Directory brute-force

  • gobuster dns -d <domain> -w <wordlist>

    DNS subdomain enumeration

  • gobuster vhost -u <url> -w <wordlist>

    Virtual host discovery

  • gobuster dir -u <url> -w <wordlist> -x php,html,txt

    Search with extensions

Use cases

Directory discoverySubdomain enumerationContent discoveryVirtual host discoveryS3 bucket finding