← All tools

Gobuster

Content Discovery · Beginner

Brute-force directories, DNS subdomains and vhosts on authorized targets.

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • dir/dns/vhost modes
  • Wordlist choice
  • Status code filtering

Legitimate use

Gobuster is used legitimately by security teams for authorized testing, defense validation and education.

Official docs →

Example commands (lab VMs only)

  • gobuster dir -u http://localhost:3000 -w common.txt
    Discover paths on your local lab app