gobuster
Fast brute-forcer for directories, DNS names, and virtual hosts.
What it does
gobuster discovers hidden content in several dimensions: directories and files on a web server, subdomains via DNS, and virtual hosts served from the same address — quickly working through large wordlists.
What data you get
Lists of valid directories, subdomains, and virtual hosts that respond, revealing infrastructure and content you may not have realised was publicly reachable.
Why it matters to your site
Its subdomain and virtual-host discovery often uncovers forgotten staging or legacy sites tied to your domain — a common blind spot that attackers use as an easier entry point.
More in this category
Other fuzzers & brute forcers tools
ffuf
★ FeaturedFast web fuzzer for content discovery and input testing.
dirsearch
Focused directory and file brute-forcer for web paths.
feroxbuster
Recursive content discovery that digs into every folder it finds.