263 lines
8.5 KiB
HTML
263 lines
8.5 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self' data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self' https://defcon.social https://bsky.app;">
|
|
<meta http-equiv="X-Content-Type-Options" content="nosniff">
|
|
<link rel="stylesheet" href="../assets/css/style.css">
|
|
<link rel="icon" type="image/x-icon" href="../favicon.ico">
|
|
<script>
|
|
// Apply theme immediately to prevent flash
|
|
(function() {
|
|
const theme = localStorage.getItem('theme') ||
|
|
(window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light');
|
|
document.documentElement.setAttribute('data-theme', theme);
|
|
})();
|
|
</script>
|
|
<title>gobuster Cheatsheet - Cheatsheets - Launch Pad</title>
|
|
</head>
|
|
<body>
|
|
<button class="theme-toggle" id="themeToggle" aria-label="Toggle dark mode">
|
|
<svg class="theme-icon theme-icon-moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"></path></svg>
|
|
<svg class="theme-icon theme-icon-sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="display: none;"><circle cx="12" cy="12" r="5"></circle><line x1="12" y1="1" x2="12" y2="3"></line><line x1="12" y1="21" x2="12" y2="23"></line><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"></line><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"></line><line x1="1" y1="12" x2="3" y2="12"></line><line x1="21" y1="12" x2="23" y2="12"></line><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"></line><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"></line></svg>
|
|
</button>
|
|
<br/><br/>
|
|
<div class="name">
|
|
__ _______________________ _________._________________________
|
|
\_ _____/ \______ \ / _ \ / _____/ / _____/ | | \_ _____/
|
|
| __) | _/ / /_\ \ / \ ___ / \ ___ | | | __)_
|
|
| \ | | \ / | \ \ \_\ \ \ \_\ \ | |___ | \
|
|
\___ / |____|_ / \____|__ / \______ / \______ / |_______ \ /_______ /
|
|
\/ \/ \/ \/ \/ \/ \/
|
|
</div>
|
|
<div class="blog-page-header">
|
|
<div class="blog-header-content">
|
|
<a href="/cheatsheets" class="back-link" title="Back to Cheatsheets">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="42" height="42" viewBox="0 0 24 24" class="home-icon"><path fill="currentColor" d="M10 20v-6h4v6h5v-8h3L12 3 2 12h3v8z"/></svg>
|
|
</a>
|
|
<h1 class="blog-page-title">gobuster Cheatsheet</h1>
|
|
</div>
|
|
</div>
|
|
<div class="blog-post-container">
|
|
<div class="blog-posts-container" style="max-width: 900px; margin: 0 auto;">
|
|
<div class="blog-post">
|
|
<div class="blog-post-content">
|
|
<p><a href="index.html">← Back to cheatsheets</a></p>
|
|
<p><a href="../index.html">← Home</a></p>
|
|
<hr>
|
|
<p>Gobuster is a tool for brute-forcing URIs (directories and files), DNS subdomains, virtual host names, and S3 buckets. Written in Go for speed.</p>
|
|
<hr>
|
|
<h2>Modes</h2>
|
|
<ul>
|
|
<li>gobuster dir - Directory/file brute forcing</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gobuster dns - DNS subdomain brute forcing</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gobuster vhost - Virtual host brute forcing</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gobuster s3 - S3 bucket brute forcing</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gobuster fuzz - Fuzzing mode</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Directory Mode (dir)</h2>
|
|
<h3>Basic Usage</h3>
|
|
<ul>
|
|
<li>gobuster dir -u <url> -w <wordlist> - Basic directory scan</li>
|
|
</ul>
|
|
<h3>Options</h3>
|
|
<ul>
|
|
<li>-u, --url - Target URL</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-w, --wordlist - Wordlist file</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-x, --extensions - File extensions (php,txt,html)</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-s, --status-codes - Show status codes (default 200,204,301,302,307,401,403)</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-b, --status-codes-blacklist - Hide status codes</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-e, --expanded - Print full URLs</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-r, --follow-redirect - Follow redirects</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-k, --no-tls-validation - Skip TLS verification</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-n, --no-status - Don't print status codes</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-f, --add-slash - Append / to each request</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>DNS Mode (dns)</h2>
|
|
<h3>Basic Usage</h3>
|
|
<ul>
|
|
<li>gobuster dns -d <domain> -w <wordlist> - DNS enumeration</li>
|
|
</ul>
|
|
<h3>Options</h3>
|
|
<ul>
|
|
<li>-d, --domain - Target domain</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-w, --wordlist - Wordlist file</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-r, --resolver - DNS resolver</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-c, --show-cname - Show CNAME records</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-i, --show-ips - Show IP addresses</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--wildcard - Force wildcard detection</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>VHost Mode (vhost)</h2>
|
|
<h3>Basic Usage</h3>
|
|
<ul>
|
|
<li>gobuster vhost -u <url> -w <wordlist> - Virtual host discovery</li>
|
|
</ul>
|
|
<h3>Options</h3>
|
|
<ul>
|
|
<li>-u, --url - Target URL</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-w, --wordlist - Wordlist file</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--append-domain - Append domain to wordlist entries</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Global Options</h2>
|
|
<ul>
|
|
<li>-t, --threads - Concurrent threads (default 10)</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-o, --output - Output file</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-q, --quiet - Quiet mode (no banner)</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-z, --no-progress - Don't show progress</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--delay - Delay between requests</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--timeout - Request timeout (default 10s)</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-v, --verbose - Verbose output</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>HTTP Options</h2>
|
|
<ul>
|
|
<li>-a, --useragent - Custom User-Agent</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-c, --cookies - Cookies to use</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-H, --headers - Custom headers</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-U, --username - Basic auth username</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-P, --password - Basic auth password</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-p, --proxy - Proxy URL</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Common Examples</h2>
|
|
<h3>Basic Directory Scan</h3>
|
|
<pre><code>gobuster dir -u http://example.com -w /usr/share/wordlists/dirb/common.txt</code></pre>
|
|
<p>Find directories and files.</p>
|
|
<h3>With Extensions</h3>
|
|
<pre><code>gobuster dir -u http://example.com -w wordlist.txt -x php,html,txt</code></pre>
|
|
<p>Search for specific file types.</p>
|
|
<h3>Fast Scan</h3>
|
|
<pre><code>gobuster dir -u http://example.com -w wordlist.txt -t 50</code></pre>
|
|
<p>50 concurrent threads.</p>
|
|
<h3>Save Output</h3>
|
|
<pre><code>gobuster dir -u http://example.com -w wordlist.txt -o results.txt</code></pre>
|
|
<p>Save results to file.</p>
|
|
<h3>Hide Status Codes</h3>
|
|
<pre><code>gobuster dir -u http://example.com -w wordlist.txt -b 404,403</code></pre>
|
|
<p>Hide 404 and 403 responses.</p>
|
|
<h3>With Auth</h3>
|
|
<pre><code>gobuster dir -u http://example.com -w wordlist.txt -U admin -P password</code></pre>
|
|
<p>Basic authentication.</p>
|
|
<h3>DNS Subdomain Scan</h3>
|
|
<pre><code>gobuster dns -d example.com -w subdomains.txt -i</code></pre>
|
|
<p>Find subdomains with IPs.</p>
|
|
<h3>Virtual Host Discovery</h3>
|
|
<pre><code>gobuster vhost -u http://example.com -w vhosts.txt</code></pre>
|
|
<p>Find virtual hosts.</p>
|
|
<h3>Through Proxy</h3>
|
|
<pre><code>gobuster dir -u http://example.com -w wordlist.txt -p http://127.0.0.1:8080</code></pre>
|
|
<p>Route through Burp Suite.</p>
|
|
<hr>
|
|
<h2>Common Wordlists</h2>
|
|
<ul>
|
|
<li>/usr/share/wordlists/dirb/common.txt</li>
|
|
<li>/usr/share/wordlists/dirb/big.txt</li>
|
|
<li>/usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt</li>
|
|
<li>/usr/share/seclists/Discovery/Web-Content/</li>
|
|
<li>/usr/share/seclists/Discovery/DNS/</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Tips</h2>
|
|
<ul>
|
|
<li>Use -x to append file extensions to each word</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Increase threads (-t) for faster scans</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Use -k when target has self-signed certs</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Blacklist common error codes with -b</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Route through Burp for detailed analysis</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Combine with nikto and nuclei for full coverage</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Use SecLists for comprehensive wordlists</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Always get authorization before scanning</li>
|
|
</ul>
|
|
<hr>
|
|
<p><a href="index.html">← Back to cheatsheets</a></p>
|
|
<p><a href="../index.html">← Home</a></p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<script async type="text/javascript" src="../blog/analytics.js"></script>
|
|
<script src="../theme.js"></script>
|
|
</body>
|
|
</html>
|