Commands Upd - Gobuster

gobuster dir -u http://ctf.challenge.local -w small.txt -t 5 --delay 500ms --exclude-length 0,1234

gobuster vhost -u http://example.com -w vhosts.txt

| Error Message | Likely Cause | Solution | |---------------|--------------|----------| | The server returns a status code that matches the provided option | Wildcard 404 detection | Use --wildcard flag or manual check with -b 404 | | context deadline exceeded | Request timeout | Increase --timeout 30s | | invalid URL format | Missing protocol | Use http:// or https:// in -u | | wordlist is empty | Wrong path | Check ls -la /your/path | | too many open files | High threads on low RAM | Reduce -t to 20 or 30 | | no such host | DNS resolution fail | Use --resolver 1.1.1.1 |

Gobuster relies on wordlists for enumeration. Common wordlist locations include:

Verify your version:

The -d flag specifies the target domain.

brew install gobuster

| Flag | Description | |------|-------------| | -t 50 | Threads (default 10, increase for speed) | | -x php,txt,html | Append file extensions | | -s "200,204,301,302" | Show only specific status codes | | -b "404,403" | Hide specific status codes | | -k | Skip SSL certificate verification | | -r | Follow redirects | | -o output.txt | Save results to file | | -q | Quiet mode (no banner/progress) | | --status-codes-blacklist | Blacklist status codes | | --wildcard | Handle wildcard DNS responses |

(Most impactful changes)

Boosts concurrent threads. Use only if the target server can handle high traffic. --delay 500ms

Practical tips

Used to find hidden content on web servers by appending wordlist entries to a target URL.

The -o flag writes all discovered paths to the specified file. gobuster commands upd

gobuster dns -d target.com -w subdomains-top1million-5000.txt -i -r 8.8.8.8 -t 100

Filter out annoying false positives (like custom 404 Not Found pages) or focus purely on successful redirects and access. -b 404,403,500 (hides these responses)

gobuster dir -u http://target.com -w wordlist.txt -x php,html,txt,js

gobuster fuzz -u http://example.com/FUZZ/page.php?id=FUZZ -w wordlist.txt gobuster dir -u http://ctf