1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
.TH gobuster 1 "04 January 2026" "gobuster-3.8.2" "Directory/file, DNS and virtual host brute-forcing tool written in Go"
.SH NAME
\fBgobuster - Directory/file, DNS and virtual host brute-forcing tool written in Go\fP
.SH SYNOPSIS
.nf
.fam C
Modes: \fBdir\fP - Enumerate directories and files on web servers
\fBdns\fP - Discover subdomains through DNS resolution
\fBs3\fP - Enumerate Amazon S3 buckets
\fBgcs\fP - Enumerate Google Cloud Storage buckets
\fBvhost\fP - Discover virtual hosts on web servers
\fBfuzz\fP - Custom fuzzing with the FUZZ keyword
\fBtftp\fP - Enumerate files on TFTP servers
Usage: \fBgobuster\fP help
\fBgobuster\fP help <mode>
\fBgobuster\fP dir <flags>
\fBgobuster\fP dns <flags>
\fBgobuster\fP s3 <flags>
\fBgobuster\fP gcs <flags>
\fBgobuster\fP vhost <flags>
\fBgobuster\fP fuzz <flags>
\fBgobuster\fP tftp <flags>
.fam T
.fi
.SH DESCRIPTION
\fBGobuster\fP is a high-performance tool used to \fBbrute-force\fP: URIs (directories and files) in
web sites, DNS subdomains (with wildcard support), Virtual Host names
on target web servers, Open Amazon S3 buckets, Open Google Cloud buckets
and TFTP servers.
.PP
Gobuster is useful for \fBpentesters, ethical hackers and forensics experts\fP.
It also can be used for \fBsecurity tests\fP.
.SH OPTIONS
Global Flags:
.RS
.TP
.B \-\-delay \fIduration\fP
Time each thread waits between requests (e.g. 1500ms)
.TP
.B \-\-no\-color
Disable color output
.TP
.B \-\-no\-error
Don't display errors
.TP
.B \-z, \-\-no\-progress
Don't display progress
.TP
.B \-o, \-\-output \fIstring\fP
Output file to write results to (defaults to stdout)
.TP
.B \-p, \-\-pattern \fIstring\fP
File containing replacement patterns
.TP
.B \-q, \-\-quiet
Don't print the banner and other noise
.TP
.B \-t, \-\-threads \fIint\fP
Number of concurrent threads (default 10)
.TP
.B \-\-timeout \fIduration\fP
HTTP Timeout (default 10s)
.TP
.B \-v, \-\-verbose
Verbose output (errors)
.TP
.B \-w, \-\-wordlist \fIstring\fP
Path to the wordlist
.RE
.SH EXAMPLES
.B Directory Mode:
.IP
gobuster dir -u https://example.com -w wordlist.txt -x php,html,js
.PP
.B DNS Mode (Subdomain Discovery):
.IP
gobuster dns -do example.com -w wordlist.txt -t 50
.PP
.B Virtual Host Mode:
.IP
gobuster vhost -u https://example.com --append-domain -w wordlist.txt
.PP
.B Cloud Storage (S3/GCS):
.IP
gobuster s3 -w bucket-names.txt
.IP
gobuster gcs -w bucket-names.txt
.PP
.B Fuzzing Mode:
.IP
gobuster fuzz -u https://example.com?FUZZ=test -w wordlist.txt
.PP
.B TFTP Mode:
.IP
gobuster tftp -s 10.0.0.1 -w wordlist.txt
.SH BUGS
Open an issue at https://github.com/OJ/gobuster/issues/new.
Alternatively, if you are a Debian user you can open a bug using reportbug tool.
.SH AUTHOR
Gobuster was written by \fBOJ Reeves (@TheColonial) <oj@buffered.io>\fP and \fBChristian Mehlmauer (@firefart) <firefart@firefart.at>\fP.
.PP
This manual page was written by \fBThiago Andrade Marques <andrade@debian.org>\fP for
the Debian project (but may be used by others).
|
