Gobuster
Gobuster has one mode per job: dir (paths), vhost (virtual hosts), dns (subdomains) and fuzz. It is simpler than ffuf and very handy for the first sweep of a website.
- Platform
- Linux · Windows · macOS (Go)
- Official site
- github.com/OJ/gobuster
- On HTB
- 40 machines
Install
sudo apt install gobusterGobuster cheat sheet
Your values
Saved in this browser and applied to every cheatsheet.
Useful options
With extensions
gobuster dir -u http://box.htb -w /usr/share/seclists/Discovery/Web-Content/raft-medium-words.txt -x php,txt,bak
HTTPS with a self-signed certificate
gobuster dir -u https://box.htb -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -k
Ignore responses of a given size
gobuster dir -u http://box.htb -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt --exclude-length 0
Subdomains over DNS
gobuster dns -d box.htb -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt
Vhosts appending the domain to each word
gobuster vhost -u http://box.htb -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt --append-domainIn our cheatsheets
Web enumeration › Fuzzing
gobuster
gobuster dir -u http://box.htb -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -x php,txt -t 50
Vhosts with gobuster
gobuster vhost -u http://box.htb -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt --append-domainNo command matches.
HTB machines where Gobuster is used
Taken from the chapters of IppSec videos where Gobuster shows up. The ▶ link jumps to the minute of that part.
Guides that use Gobuster
- Web fuzzing: directories, extensions, subdomains and vhosts with ffuf, gobuster and feroxbuster 3 min read Find hidden paths, backups, vhosts and exposed .git repos with ffuf and gobuster: which wordlist to use and how to filter out false positives.