Commander

Copy-ready command templates for common penetration testing tools. Select a tool, fill in the parameters, copy, paste, profit.

gobuster

↗ docs

Directory/file, DNS, and vhost brute-force tool written in Go

brute-forcedirectorydnswebenumeration

Directory Brute Force

Find hidden directories and files on a web server.

gobuster dir -u -w

Directory Scan with Extensions

Brute force while appending file extensions to each word.

gobuster dir -u -w -x

Filter by Status Codes

Only show responses matching specific HTTP status codes.

gobuster dir -u -w -s

DNS Subdomain Enumeration

Discover subdomains via DNS brute force.

gobuster dns -d -w

Virtual Host Enumeration

Find virtual hosts on a server by brute-forcing Host headers.

gobuster vhost -u -w --append-domain

Scan with Custom Threads

Adjust the number of concurrent threads (default: 10).

gobuster dir -u -w -t