Gobuster
Category: Web Application Security
Language: Go
Type: Active Brute-Forcer
📘 Definition & Purpose
Gobuster is a directory, file, DNS, and VHost brute-forcer written in Go. It is stable and highly suited for recursive directory scans.
🧪 Core Mechanics
Gobuster takes a list of filenames or directories and issues HTTP GET requests to check for the existence of resources (looking for 200, 204, 301, 302, 307, or 403 responses).
🚀 Usage & Cheat Sheet
# Brute-force directories with extensions (.php, .html, .txt)
gobuster dir -u https://target.com -w common.txt -x php,html,txt
# VHost domain discovery
gobuster vhost -u https://target.com -w vhost_wordlist.txt
# DNS subdomain brute-forcing
gobuster dns -d target.com -w subdomains_wordlist.txt
🔗 Integration
This tool is utilized across the: