> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/content-discovery/gobuster.md).

# gobuster

**#Italian specific**

```
gobuster vhost -u https://esempio.it -t 50 -w italian-subdomains.txt
```

**# Seclist medium**\
\
`sudo gobuster dir -e u --url http://10.10.10.10/ -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt`\
\
\&#xNAN;**# Seclist Big with Linux target extensions**\
\
`sudo gobuster dir -e u --url http://10.10.10.10:80/ -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-big.txt -x php,bak,html,txt,zip`\
\
\&#xNAN;**# HTTPS connections with -k flag**\
\
`sudo gobuster dir -e u --url https://10.10.10.10:443/ -w /usr/share/seclists/Discovery/Web-Content/big.txt -k`\
\
\&#xNAN;**#Fuzzing /cgi-bin using gobuster**\
\
`gobuster dir -u http://10.11.1.39 -x cgi,sh **-s "301,302,304,307"** **-b ""** -k -w /usr/share/seclists/Discovery/Web-Content/CGIs.txt`\
\
\&#xNAN;**# -s flag to parse for specific responses**\
\
`sudo gobuster dir e -u` [`http://10.11.1.71/`](http://10.11.1.71/) `-w /usr/share/seclists/Discovery/Web-Content/common.txt -s '200,204,301,302,307,403,500' -e`\
\
\&#xNAN;**#Common.txt**\
`sudo gobuster dir -e u --url` [`http://10.11.1.116/`](http://10.11.1.116/) `-w /usr/share/seclists/Discovery/Web-Content/common.txt`\
\
\&#xNAN;**#Windows target**\
\
sudo gobuster dir -e u -r --url <http://10.11.1.128:4167/> -w /usr/share/seclists/Discovery/Web-Content/big.txt -x php,html,htnl,zip,txt,bak,asp,mdf,ndf<br>