gobuster -h
go get -u github.com/OJ/gobuster
This command will brute-force DNS records for the target domain example.com using the wordlist dns.txt . gobuster commands upd
These flags work across all Gobuster modes and are worth mastering:
By default, Gobuster displays positive status codes. If a server behaves strangely, you can explicitly define which codes to print ( -c ) or hide ( -b ). gobuster -h go get -u github
/usr/share/wordlists/SecLists/Discovery/DNS/ (The gold standard repository for subdomains and vhosts)
The basic syntax of Gobuster is as follows: gobuster commands upd
Use the -H flag to inject custom headers.
Some servers block unknown paths with HTTP 403. Exclude 403 from results using -b :
If you want the very latest development version, you can build from source (requires Go installed):
