Definition

Gobuster is another fuzzing tool similar to ffuf, but I generally like it a lot more than the other one for bruteforcing directories, so that's what I will focus on.

Usage

Since it's a general fuzzing tool, it has a lot of discovery modes, but I will focus on directory bruteforcing.

Normal usage with 30 threads
gobuster dir -w directories.txt --url http://example.com/ -t 30

Output

gobuster dir -w /usr/share/wordlists/dirb/common.txt --url http://localhost:8080 -t 30
===============================================================
Gobuster v3.1.0
by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart)
===============================================================
[+] Url:                     http://localhost:8080
[+] Method:                  GET
[+] Threads:                 30
[+] Wordlist:                Subdomain.txt
[+] Negative Status codes:   404
[+] User Agent:              gobuster/3.1.0
[+] Timeout:                 10s
===============================================================
2021/12/21 18:06:06 Starting gobuster in directory enumeration mode
===============================================================
/home                 (Status: 200) [Size: 12478]
/users                (Status: 200) [Size: 12478]
/error                (Status: 500) [Size: 106]
/home                 (Status: 200) [Size: 12478]