TD Cyber Labs

TrainersTool Trainers / Gobuster Trainer 0 / 50 pts

gobuster

Gobuster

Web · Medium · 4 lessons

A web server only links to the pages it wants you to see. Gobuster finds the rest — /admin, /backup, forgotten upload folders — by requesting thousands of likely paths from a wordlist and reporting which ones exist. It is the standard web content-discovery tool. Practise against the site on 10.10.10.10; the wordlist common.txt is in your home directory.

1
Run your first directory scan
Gobuster's main mode is 'dir'. Give it -u (the target URL) and -w (a wordlist) and it requests each word as a path, printing the ones that return. /admin and /backup here are not linked from the homepage — Gobuster finds them anyway.
gobuster dir -u http://10.10.10.10 -w common.txt
2
Hunt for files with -x
Directories are only half the story. -x appends file extensions to each word, so 'backup' also becomes backup.php, backup.txt, backup.zip — often where secrets leak.
gobuster dir -u http://10.10.10.10 -w common.txt -x php,txt,html
3
Read the status codes
Each hit shows a status: 200 (found), 301 (a directory redirect — worth exploring), 403 (exists but forbidden — interesting!). -b hides codes you do not care about so real findings stand out.
gobuster dir -u http://10.10.10.10 -w common.txt -b 404
4
Speed it up with -t
-t sets the number of concurrent requests. Higher is faster but heavier on the target; 50 is a reasonable default on a lab box you own.
gobuster dir -u http://10.10.10.10 -w common.txt -t 50

Applications

practice 10.10.10.10--:--

learner@kali: ~ — Terminal