As they put their plan into action, Kael and Zero Cool initiated the Gobuster scan. The tool sprang to life, rapidly firing HTTP requests at The Syndicate's servers. The responses were analyzed in real-time, revealing tantalizing hints of weaknesses in the system.
=============================================================== Gobuster v3.6 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Url: http://target.thm [+] Method: GET [+] Threads: 10 [+] Wordlist: /usr/share/seclists/Discovery/Web-Content/common.txt [+] Negative Status codes: 404 [+] User Agent: gobuster/3.6 [+] Timeout: 10s =============================================================== Starting gobuster in middlebox detection mode =============================================================== /images (Status: 301) [Size: 178] /admin (Status: 301) [Size: 178] /backup (Status: 301) [Size: 178] /server-status (Status: 403) [Size: 199] Progress: 4647 / 4648 (99.98%) =============================================================== Finished =============================================================== gobuster example
/usr/share/seclists/Discovery/DNS/combined_subdomains.txt As they put their plan into action, Kael
gobuster dir -u http://target.com -w wordlist.txt --timeout 30s gobuster example