gobuster dns -d targetdomain.com -w /usr/share/wordlists/SecLists/Discovery/DNS/subdomains-top1million-5000.txt Use code with caution. Show Unresolved Domains
Finding subdomains expands your attack surface, potentially exposing staging servers, forgotten management portals, or vulnerable shadow IT assets. Basic Subdomain Scan
gobuster dir -u http://example.com -w wordlist.txt -U admin -P password
The basic syntax follows a modular structure: gobuster [mode] [options] . 1. Directory and File Discovery ( dir )
Before running any commands, ensure you have the latest version. Old versions lack features like client certificates, HTTP/2 support, and performance improvements. gobuster commands upd
To perform a virtual host bruteforcing attack, use the -v or --vhost option followed by the target URL:
gobuster dns -d targetdomain.com -w /usr/share/wordlists/SecLists/Discovery/DNS/subdomains-top1million-5000.txt -r 8.8.8.8 Use code with caution. 🖥️ Virtual Host Brute-Forcing ( vhost )
| Mode | Command | Use Case | | :--- | :--- | :--- | | | gobuster dir -u URL -w list.txt -x php,txt | Find folders/files. | | DNS | gobuster dns -d domain.com -w list.txt | Find subdomains. | | VHost | gobuster vhost -u URL -w list.txt --append-domain | Find virtual hosts (internal sites). | | Fuzz | gobuster fuzz -u URL/FUZZ -w list.txt | Custom brute forcing. |
Set custom HTTP headers to bypass basic protections: gobuster dns -d targetdomain
If the target directory is protected by basic HTTP authentication, pass the credentials directly through the command line.
The latest stable version is .
The dns mode is designed to discover subdomains through brute-forcing. Basic DNS Enumeration
: Show only successful (200) or restricted (403) results. gobuster dir -u http://example.com -w wordlist.txt -s 200,403 . 2. DNS Subdomain Mode ( dns ) Used to identify subdomains by brute-forcing DNS records. gobuster | Kali Linux Tools To perform a virtual host bruteforcing attack, use
To get the most out of your Gobuster scans without crashing the target server or getting your IP banned, keep these configuration tips in mind:
gobuster dns -d example.com -w subdomains.txt
The -u flag specifies the target URL, and -w points to your wordlist file.
Here are some common options and flags used with Gobuster:
Virtual host enumeration (vhost) helps discover subdomain-based websites that may not be present in public DNS records.