gobuster
Directory and virtual-host fuzzing.
A Go fuzzer for discovering hidden web content: directories and files by wordlist, subdomains and virtual hosts. Fast and multi-threaded; the first tool when port 80/443 shows little at a glance.
Family Web discovery & fuzzing
Flags dir vhost -w -x
Concepts Web Content Discovery (Directory Fuzzing), Virtual Host Fuzzing, File Upload to RCE
Cheatsheet Discovery & fuzzing
Installation
sudo apt install -y gobusterUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- AdmirerHackTheBox
- AlertHackTheBox
- BastardHackTheBox
- BigPivotingDockerLabs
- BlackMarket 1VulnHub
- BoardLightHackTheBox
- BountyHackTheBox
- BountyHunterHackTheBox
- BuffHackTheBox
- BuscaloveDockerLabs
- Cereal 1VulnHub
- CraftyHackTheBox
- DevelHackTheBox
- DockerlabsDockerLabs
- HealHackTheBox
- HeistHackTheBox
- Infovore 1VulnHub
- InstantHackTheBox
- LinkVortexHackTheBox
- MailingHackTheBox
- MonitorsThreeHackTheBox
- OpenSourceHackTheBox
- PebblesProving Grounds Practice
- PermXHackTheBox
- PsychoDockerLabs
- SeaHackTheBox
- ShoppyHackTheBox
- SightlessHackTheBox
- Symfonos 1 & 2VulnHub
- Symfonos 3VulnHub
- Symfonos 5VulnHub
- Symfonos 6VulnHub