gobuster
Directory/file, DNS, and vhost bruteforcer. Simple and reliable.
Tags: fuzzing, content-discovery, dns, go
- Category
- discovery
- Maintenance signal
- maintained
Use this when: Intake. Path names are a map. A 200 is not a finding by itself.
Install
go
go install github.com/OJ/gobuster/v3@latestapt
sudo apt install -y gobusterCommand templates
Directory mode
gobuster dir -u {url} -w {wordlist} -o {output}