Skip to content
Docs
GitHub

Gobuster

Directory/File, DNS and VHost busting tool written in Go.

Installation

Section titled “Installation”

Download newest release from Github.com

Usage

Section titled “Usage”
gobuster [command]

Flags

Section titled “Flags”
Usage:
  gobuster [command]

Available Commands:
  dir         Uses directory/file brutceforcing mode
  dns         Uses DNS subdomain bruteforcing mode
  help        Help about any command
  vhost       Uses VHOST bruteforcing mode

Flags:
  -h, --help              help for gobuster
  -z, --noprogress        Don't display progress
  -o, --output string     Output file to write results to (defaults to stdout)
  -q, --quiet             Don't print the banner and other noise
  -t, --threads int       Number of concurrent threads (default 10)
  -v, --verbose           Verbose output (errors)
  -w, --wordlist string   Path to the wordlist

Use "gobuster [command] --help" for more information about a command.

Examples

Section titled “Examples”

Start gobuster with directory list only showing status code 200 OK

Section titled “Start gobuster with directory list only showing status code 200 OK”
./gobuster dir -u <url> -w <directory-list>.txt -k --statuscodes 200

Append extension after every entry in wordlist

Section titled “Append extension after every entry in wordlist”
./gobuster dir -u <url> -w <directory-list>.txt -x php

Will result in: test.php test1.php

Start gobuster through proxy

Section titled “Start gobuster through proxy”
./gobuster dir -u <url> -w <directory-list>.txt -k --statuscodes 200 --proxy http://127.0.0.1:8080

Wordlists

Section titled “Wordlists”

URL List

Section titled “URL List”