gobuster - Directory/file & DNS busting tool written in Go
Contents
Bugs
Open an issue at https://github.com/OJ/gobuster/issues/new. Alternatively, if you are a Debian user you
can open a bug using reportbug tool.
Description
Gobuster is a tool used to brute-force: URIs (directories and files) in web sites, DNS subdomains (with
wildcard support), Virtual Host names on target web servers, Open Amazon S3 buckets, Open Google Cloud
buckets and TFTP servers.
Gobuster is useful for pentesters,ethicalhackersandforensicsexperts. It also can be used for
securitytests.
Examples
gobuster dir -u https://mysite.com/path/to/folder -c 'session=123456' -t 50 -w common-files.txt -x
.php,.html
gobuster dns -d mysite.com -t 50 -w common-names.txt
gobuster s3 -w bucket-names.txt
gobuster gcs -w bucket-names.txt
gobuster vhost -u https://mysite.com -w common-vhosts.txt
gobuster fuzz -u https://example.com?FUZZ=test -w parameter-names.txt
gobuster tftp -s tftp.example.com B-w common-filenames.txt
Name
gobuster-Directory/file&DNSbustingtoolwritteninGo
Options
Global Flags:
--delayduration
Time each thread waits between requests (e.g. 1500ms)
--no-color
Disable color output
--no-error
Don't display errors
-z,--no-progress
Don't display progress
-o,--outputstring
Output file to write results to (defaults to stdout)
-p,--patternstring
File containing replacement patterns
-q,--quiet
Don't print the banner and other noise
-t,--threadsint
Number of concurrent threads (default 10)
-v,--verbose
Verbose output (errors)
-w,--wordliststring
Path to the wordlist
Synopsis
Modes: dir - the classic directory brute-forcing mode
dns - DNS subdomain brute-forcing mode
s3 - Enumerate open S3 buckets and look for existence and bucket listings
gcs - Enumerate open google cloud buckets
vhost - virtual host brute-forcing mode - not the same as DNS
fuzz - some basic fuzzing, replaces the FUZZ keyword
tftp - bruteforce tftp files
Usage: gobuster help
gobuster help <mode>
gobuster dir <flags>
gobuster dns <flags>
gobuster s3 <flags>
gobuster gcs <flags>
gobuster vhost <flags>
gobuster fuzz <flags>
gobuster tftp <flags>
