Gobuster Commands: Upd
To see the IP addresses of found subdomains, use the -v flag.
gobuster dns -d target.com -w wordlist.txt -t 30 -v
Gobuster remains one of the most popular and reliable tools for brute-forcing URIs (directories and files), DNS subdomains, and virtual hosts. However, if you haven't updated your toolset recently, you might notice that some old commands throw errors. The developers have cleaned up the syntax, moving from generic flags to mode-specific flags.
This guide covers the modern Gobuster syntax (v3.6+), essential commands, and pro tips for penetration testing and CTFs.
gobuster vhost -u https://target.com -w vhosts.txt --tls-sni gobuster commands upd
| Old flag (v2) | New flag (v3+) | Notes |
|---------------|----------------|-------|
| -e | --expanded | Print full URLs |
| -l | --include-length | Include response length |
| -k | --no-tls-validation | Skip TLS verification |
| -c | --cookies | Cookies for requests |
| -t | --threads | Number of threads |
| -o | --output | Output file |
| -s | --status-codes | Positive status codes |
| -x | --extensions | File extensions |
Basic command:
gobuster dir -u http://example.com -w /usr/share/wordlists/dirb/common.txt
Essential flags:
| Flag | Description |
|------|-------------|
| -t 50 | Threads (default 10, increase for speed) |
| -x php,txt,html | Append file extensions |
| -s "200,204,301,302" | Show only specific status codes |
| -b "404,403" | Hide specific status codes |
| -k | Skip SSL certificate verification |
| -r | Follow redirects |
| -o output.txt | Save results to file |
| -q | Quiet mode (no banner/progress) |
| --status-codes-blacklist | Blacklist status codes |
| --wildcard | Handle wildcard DNS responses | To see the IP addresses of found subdomains,
Advanced example:
gobuster dir -u https://target.com -w /usr/share/wordlists/seclists/Discovery/Web-Content/raft-large-directories.txt -t 100 -x php,asp,aspx,jsp,html,txt -s 200,204,301,302 -k -r -o dir_results.txt
First, always check your version:
gobuster --version
Expect v3.6.2 or later.
Get the latest help:
gobuster --help
Or for a specific mode:
gobuster dir --help
Key change: Subcommands are now mandatory. No more gobuster -u .... Gobuster remains one of the most popular and