Gobuster is a high-performance, open-source tool written in Go, designed for security professionals to enumerate hidden directories, files, DNS subdomains, and virtual hosts on web servers. It operates via fast brute-force scanning using wordlists and is commonly used for reconnaissance in penetration testing and bug bounty engagements.

1. Basic Directory Enumeration

gobuster dir -u <URL> -w <wordlist-location>

Performs directory enumeration against the target URL using the specified wordlist.

Keywords: dir = Directory enumeration mode -u = Target URL -w = Wordlist location

2. Full URL Output

gobuster dir -e -u <target-url> -w <wordlist-location>

Performs directory enumeration and displays full URLs in the output.

Keywords: dir = Directory enumeration mode -e = Show full URLs -u = Target URL -w = Wordlist location

1. Hide Status Codes

gobuster dir -u <target-url> -w <wordlist-location> -n

Performs directory enumeration while hiding HTTP status codes from the output.

Keywords: dir = Directory enumeration mode -u = Target URL -w = Wordlist location -n = Hide status codes