// what it is
Description
OJ Reeves' brute-forcer — the modern replacement for `dirb`. Drastically faster, has VHOST mode, and pipes cleanly into other tools.
// use cases
What people use it for
- Discover hidden web directories
- Subdomain bruteforce when passive enum misses things
- VHOST discovery on shared-hosting boxes
// commands
The commands you'll type
Directory brute-force
$ gobuster dir -u https://target -w /usr/share/wordlists/dirb/common.txt -x php,htmlDNS subdomain brute
$ gobuster dns -d target.tld -w subdomains.txt