gobuster

Brute-forces hidden paths on web servers and more. More information: <https://github.com/OJ/gobuster>.

Install

All systems
curl cmd.cat/gobuster.sh
Debian Debian
apt-get install gobuster
Ubuntu
apt-get install gobuster
image/svg+xml Kali Linux
apt-get install gobuster
Windows (WSL2)
sudo apt-get update sudo apt-get install gobuster
OS X
brew install gobuster

Brute-forces hidden paths on web servers and more. More information: <https://github.com/OJ/gobuster>.

  • Discover directories and files that match in the wordlist:
    gobuster dir --url https://example.com/ --wordlist path/to/file
  • Discover subdomains:
    gobuster dns --domain example.com --wordlist path/to/file
  • Discover Amazon S3 buckets:
    gobuster s3 --wordlist path/to/file
  • Discover other virtual hosts on the server:
    gobuster vhost --url https://example.com/ --wordlist path/to/file
  • Fuzz the value of a parameter:
    gobuster fuzz --url https://example.com/?parameter=FUZZ --wordlist path/to/file
  • Fuzz the name of a parameter:
    gobuster fuzz --url https://example.com/?FUZZ=value --wordlist path/to/file

© tl;dr; authors and contributors