vulns.cofield index
Enter
Contribute
Security tool · discovery

gobuster

Directory/file, DNS, and vhost bruteforcer. Simple and reliable.

fuzzingcontent-discoverydnsgo
Stable IDtool:gobusterLast updatedLast verifiedLegacy review pendingProvenanceSource-linked
Overview

Where gobuster fits

Directory/file, DNS, and vhost bruteforcer. Simple and reliable.

Detection-first use

Start with the least intrusive template that can distinguish your hypothesis from a normal response. Preserve raw output and a negative control.

Install

Installation references

Install with goAuthorization required
go install github.com/OJ/gobuster/v3@latest
Positive signal
Tool-specific output that supports the stated hypothesis.
Negative control
No result, or identical behavior against a known-safe control.
Intrusiveness
Review flags and target scope before execution.
Install with aptAuthorization required
sudo apt install -y gobuster
Positive signal
Tool-specific output that supports the stated hypothesis.
Negative control
No result, or identical behavior against a known-safe control.
Intrusiveness
Review flags and target scope before execution.
Test safely

Command templates

Directory modeAuthorization required

Populate placeholders only with assets that are explicitly in scope.

gobuster dir -u {url} -w {wordlist} -o {output}
Positive signal
Tool-specific output that supports the stated hypothesis.
Negative control
No result, or identical behavior against a known-safe control.
Intrusiveness
Review flags and target scope before execution.
Related

Continue the workflow

ToolffufToolferoxbuster
Sources

Attribution and verification

Version history: normalized permanent page created 2026-08-20. Upstream activity and popularity are separate signals and do not establish tool safety.