Gobuster Example Jun 2026

gobuster dir -u http://target.com -w wordlist.txt -o results.txt

Many CTFs and real applications hide sensitive files, not just folders. You might be looking for config.php or backup.zip . Gobuster can append extensions to every word in your list. gobuster example

=============================================================== Gobuster v3.6 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Url: http://target.thm [+] Method: GET [+] Threads: 10 [+] Wordlist: /usr/share/seclists/Discovery/Web-Content/common.txt [+] Negative Status codes: 404 [+] User Agent: gobuster/3.6 [+] Timeout: 10s =============================================================== Starting gobuster in middlebox detection mode =============================================================== /images (Status: 301) [Size: 178] /admin (Status: 301) [Size: 178] /backup (Status: 301) [Size: 178] /server-status (Status: 403) [Size: 199] Progress: 4647 / 4648 (99.98%) =============================================================== Finished =============================================================== gobuster dir -u http://target