gobuster dir -u https://target.com -w wordlist.txt \ -x php,html \ # Check these extensions -t 50 \ # 50 concurrent threads -k \ # Skip SSL certificate verification -o results.txt \ # Output to file -s "200,204,301,302" # Only show these status codes
gobuster dir -u https://target.com -w /usr/share/wordlists/dirb/common.txt -t 50 gobuster dir usage -u -w
If you know the server is running PHP or ASP.NET, you can hunt for specific files by appending extensions to every word in your list. gobuster dir -u https://target
: Tells Gobuster to use the directory/file enumeration mode. It doesn't "guess" paths; it iterates through your
gobuster dir -u https://target.com/ -w /usr/share/wordlists/dirb/common.txt
Gobuster is only as good as the wordlist you provide. It doesn't "guess" paths; it iterates through your list and checks the server's HTTP response. Common choices include: : The gold standard for security professionals. Dirbuster Lists : Great for general-purpose web discovery. The Target URL ( -u )
gobuster dir -u http://example.com -w dir_list.txt