gobuster dir -u http://<ip>:3333 -w <word list location>

​

#world lists are in 

/usr/share/wordlists

​

GoBuster Flags

-e Prints url in console

-u Url of machine

-w path to wordlist

-U username

-P password

-p<x> Request Proxy

-c<http cookie> Cookie for simulated authentication

it is a tool used to brute force urls.

!!!it is quite aggressiv use carfully against websites you dont have permission to!!!

# Syntax

gobuster dir -u [target ip] -w [wordlist]

​

# Example

gobuster dir -u 192.168.0.1 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt

# common command

gobuster-u [url] -w [wordlist]

# To find hidden directories in a website, use gobuster in the terminal:

​

gobuster -u http://website.com -w wordlist.txt directories

$ gobuster -h 

Usage:

  gobuster [command]

​

Available commands:

  dir         Uses directory/file enumeration mode

  dns         Uses DNS subdomain enumeration mode

  fuzz        Uses fuzzing mode

  help        Help about any command

  s3          Uses aws bucket enumeration mode

  version     shows the current version

  vhost       Uses VHOST enumeration mode

​

Flags: 

      --delay duration    Time each thread waits between requests (e.g. 1500ms)

  -h, --help              help for gobuster

      --no-error          Don't display errors

  -z, --no-progress       Don't display progress

  -o, --output string     Output file to write results to (defaults to stdout)

  -p, --pattern string    File containing replacement patters

  -q, --quiet             Don't print the banner and other noise

  -t, --threads int       Number of concurrent threads (default 10)

  -v, --verbose           Verbose output (errors)

  -w, --wordlist string   Path to the wordlist

user@machine$ gobuster dir --url http://10.10.82.162/ -w /usr/share/wordlists/SecLists/Discovery/Web-Content/common.txt