Gobuster
Content Discovery · Beginner
Brute-force directories, DNS subdomains and vhosts on authorized targets.
Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.
What to learn
- dir/dns/vhost modes
- Wordlist choice
- Status code filtering
Legitimate use
Gobuster is used legitimately by security teams for authorized testing, defense validation and education.
Official docs →Example commands (lab VMs only)
- gobuster dir -u http://localhost:3000 -w common.txtDiscover paths on your local lab app