base on Directory/File, DNS and VHost busting tool written in Go # Gobuster Gobuster is a tool used to brute-force: - URIs (directories and files) in web sites. - DNS subdomains (with wildcard support). - Virtual Host names on target web servers. - Open Amazon S3 buckets - Open Google Cloud buckets - TFTP servers ## Tags, Statuses, etc [](https://travis-ci.com/OJ/gobuster) [](https://opencollective.com/gobuster) [](https://opencollective.com/gobuster) ## Love this tool? Back it! If you're backing us already, you rock. If you're not, that's cool too! Want to back us? [Become a backer](https://opencollective.com/gobuster#backer)! [](https://opencollective.com/gobuster#backers) All funds that are donated to this project will be donated to charity. A full log of charity donations will be available in this repository as they are processed. # Changes ## 3.6 - Wordlist offset parameter to skip x lines from the wordlist - prevent double slashes when building up an url in dir mode - allow for multiple values and ranges on `--exclude-length` - `no-fqdn` parameter on dns bruteforce to disable the use of the systems search domains. This should speed up the run if you have configured some search domains. [https://github.com/OJ/gobuster/pull/418](https://github.com/OJ/gobuster/pull/418) ## 3.5 - Allow Ranges in status code and status code blacklist. Example: 200,300-305,404 ## 3.4 - Enable TLS1.0 and TLS1.1 support - Add TFTP mode to search for files on tftp servers ## 3.3 - Support TLS client certificates / mtls - support loading extensions from file - support fuzzing POST body, HTTP headers and basic auth - new option to not canonicalize header names ## 3.2 - Use go 1.19 - use contexts in the correct way - get rid of the wildcard flag (except in DNS mode) - color output - retry on timeout - google cloud bucket enumeration - fix nil reference errors ## 3.1 - enumerate public AWS S3 buckets - fuzzing mode - specify HTTP method - added support for patterns. You can now specify a file containing patterns that are applied to every word, one by line. Every occurrence of the term `{GOBUSTER}` in it will be replaced with the current wordlist item. Please use with caution as this can cause increase the number of requests issued a lot. - The shorthand `p` flag which was assigned to proxy is now used by the pattern flag ## 3.0 - New CLI options so modes are strictly separated (`-m` is now gone!) - Performance Optimizations and better connection handling - Ability to enumerate vhost names - Option to supply custom HTTP headers # License See the LICENSE file. # Manual ## Available Modes - dir - the classic directory brute-forcing mode - dns - DNS subdomain brute-forcing mode - s3 - Enumerate open S3 buckets and look for existence and bucket listings - gcs - Enumerate open google cloud buckets - vhost - virtual host brute-forcing mode (not the same as DNS!) - fuzz - some basic fuzzing, replaces the `FUZZ` keyword - tftp - bruteforce tftp files ## Easy Installation ### Binary Releases We are now shipping binaries for each of the releases so that you don't even have to build them yourself! How wonderful is that! If you're stupid enough to trust binaries that I've put together, you can download them from the [releases](https://github.com/OJ/gobuster/releases) page. ### Docker You can also grab a prebuilt docker image from [https://github.com/OJ/gobuster/pkgs/container/gobuster](https://github.com/OJ/gobuster/pkgs/container/gobuster) ```bash docker pull ghcr.io/oj/gobuster:latest ``` ### Using `go install` If you have a [Go](https://golang.org/) environment ready to go (at least go 1.19), it's as easy as: ```bash go install github.com/OJ/gobuster/v3@latest ``` PS: You need at least go 1.19 to compile gobuster. ### Building From Source Since this tool is written in [Go](https://golang.org/) you need to install the Go language/compiler/etc. Full details of installation and set up can be found [on the Go language website](https://golang.org/doc/install). Once installed you have two options. You need at least go 1.19 to compile gobuster. ### Compiling `gobuster` has external dependencies, and so they need to be pulled in first: ```bash go get && go build ``` This will create a `gobuster` binary for you. If you want to install it in the `$GOPATH/bin` folder you can run: ```bash go install ``` ## Modes Help is built-in! - `gobuster help` - outputs the top-level help. - `gobuster help <mode>` - outputs the help specific to that mode. ## `dns` Mode ### Options ```text Uses DNS subdomain enumeration mode Usage: gobuster dns [flags] Flags: -d, --domain string The target domain -h, --help help for dns -r, --resolver string Use custom DNS server (format server.com or server.com:port) -c, --show-cname Show CNAME records (cannot be used with '-i' option) -i, --show-ips Show IP addresses --timeout duration DNS resolver timeout (default 1s) --wildcard Force continued operation when wildcard found Global Flags: --delay duration Time each thread waits between requests (e.g. 1500ms) --no-color Disable color output --no-error Don't display errors -z, --no-progress Don't display progress -o, --output string Output file to write results to (defaults to stdout) -p, --pattern string File containing replacement patterns -q, --quiet Don't print the banner and other noise -t, --threads int Number of concurrent threads (default 10) -v, --verbose Verbose output (errors) -w, --wordlist string Path to the wordlist ``` ### Examples ```text gobuster dns -d mysite.com -t 50 -w common-names.txt ``` Normal sample run goes like this: ```text gobuster dns -d google.com -w ~/wordlists/subdomains.txt =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Mode : dns [+] Url/Domain : google.com [+] Threads : 10 [+] Wordlist : /home/oj/wordlists/subdomains.txt =============================================================== 2019/06/21 11:54:20 Starting gobuster =============================================================== Found: chrome.google.com Found: ns1.google.com Found: admin.google.com Found: www.google.com Found: m.google.com Found: support.google.com Found: translate.google.com Found: cse.google.com Found: news.google.com Found: music.google.com Found: mail.google.com Found: store.google.com Found: mobile.google.com Found: search.google.com Found: wap.google.com Found: directory.google.com Found: local.google.com Found: blog.google.com =============================================================== 2019/06/21 11:54:20 Finished =============================================================== ``` Show IP sample run goes like this: ```text gobuster dns -d google.com -w ~/wordlists/subdomains.txt -i =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Mode : dns [+] Url/Domain : google.com [+] Threads : 10 [+] Wordlist : /home/oj/wordlists/subdomains.txt =============================================================== 2019/06/21 11:54:54 Starting gobuster =============================================================== Found: www.google.com [172.217.25.36, 2404:6800:4006:802::2004] Found: admin.google.com [172.217.25.46, 2404:6800:4006:806::200e] Found: store.google.com [172.217.167.78, 2404:6800:4006:802::200e] Found: mobile.google.com [172.217.25.43, 2404:6800:4006:802::200b] Found: ns1.google.com [216.239.32.10, 2001:4860:4802:32::a] Found: m.google.com [172.217.25.43, 2404:6800:4006:802::200b] Found: cse.google.com [172.217.25.46, 2404:6800:4006:80a::200e] Found: chrome.google.com [172.217.25.46, 2404:6800:4006:802::200e] Found: search.google.com [172.217.25.46, 2404:6800:4006:802::200e] Found: local.google.com [172.217.25.46, 2404:6800:4006:80a::200e] Found: news.google.com [172.217.25.46, 2404:6800:4006:802::200e] Found: blog.google.com [216.58.199.73, 2404:6800:4006:806::2009] Found: support.google.com [172.217.25.46, 2404:6800:4006:802::200e] Found: wap.google.com [172.217.25.46, 2404:6800:4006:802::200e] Found: directory.google.com [172.217.25.46, 2404:6800:4006:802::200e] Found: translate.google.com [172.217.25.46, 2404:6800:4006:802::200e] Found: music.google.com [172.217.25.46, 2404:6800:4006:802::200e] Found: mail.google.com [172.217.25.37, 2404:6800:4006:802::2005] =============================================================== 2019/06/21 11:54:55 Finished =============================================================== ``` Base domain validation warning when the base domain fails to resolve. This is a warning rather than a failure in case the user fat-fingers while typing the domain. ```text gobuster dns -d yp.to -w ~/wordlists/subdomains.txt -i =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Mode : dns [+] Url/Domain : yp.to [+] Threads : 10 [+] Wordlist : /home/oj/wordlists/subdomains.txt =============================================================== 2019/06/21 11:56:43 Starting gobuster =============================================================== 2019/06/21 11:56:53 [-] Unable to validate base domain: yp.to Found: cr.yp.to [131.193.32.108, 131.193.32.109] =============================================================== 2019/06/21 11:56:53 Finished =============================================================== ``` Wildcard DNS is also detected properly: ```text gobuster dns -d 0.0.1.xip.io -w ~/wordlists/subdomains.txt =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Mode : dns [+] Url/Domain : 0.0.1.xip.io [+] Threads : 10 [+] Wordlist : /home/oj/wordlists/subdomains.txt =============================================================== 2019/06/21 12:13:48 Starting gobuster =============================================================== 2019/06/21 12:13:48 [-] Wildcard DNS found. IP address(es): 1.0.0.0 2019/06/21 12:13:48 [!] To force processing of Wildcard DNS, specify the '--wildcard' switch. =============================================================== 2019/06/21 12:13:48 Finished =============================================================== ``` If the user wants to force processing of a domain that has wildcard entries, use `--wildcard`: ```text gobuster dns -d 0.0.1.xip.io -w ~/wordlists/subdomains.txt --wildcard =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Mode : dns [+] Url/Domain : 0.0.1.xip.io [+] Threads : 10 [+] Wordlist : /home/oj/wordlists/subdomains.txt =============================================================== 2019/06/21 12:13:51 Starting gobuster =============================================================== 2019/06/21 12:13:51 [-] Wildcard DNS found. IP address(es): 1.0.0.0 Found: 127.0.0.1.xip.io Found: test.127.0.0.1.xip.io =============================================================== 2019/06/21 12:13:53 Finished =============================================================== ``` ## `dir` Mode ### Options ```text Uses directory/file enumeration mode Usage: gobuster dir [flags] Flags: -f, --add-slash Append / to each request -c, --cookies string Cookies to use for the requests -d, --discover-backup Also search for backup files by appending multiple backup extensions --exclude-length ints exclude the following content length (completely ignores the status). Supply multiple times to exclude multiple sizes. -e, --expanded Expanded mode, print full URLs -x, --extensions string File extension(s) to search for -r, --follow-redirect Follow redirects -H, --headers stringArray Specify HTTP headers, -H 'Header1: val1' -H 'Header2: val2' -h, --help help for dir --hide-length Hide the length of the body in the output -m, --method string Use the following HTTP method (default "GET") -n, --no-status Don't print status codes -k, --no-tls-validation Skip TLS certificate verification -P, --password string Password for Basic Auth --proxy string Proxy to use for requests [http(s)://host:port] --random-agent Use a random User-Agent string --retry Should retry on request timeout --retry-attempts int Times to retry on request timeout (default 3) -s, --status-codes string Positive status codes (will be overwritten with status-codes-blacklist if set) -b, --status-codes-blacklist string Negative status codes (will override status-codes if set) (default "404") --timeout duration HTTP Timeout (default 10s) -u, --url string The target URL -a, --useragent string Set the User-Agent string (default "gobuster/3.2.0") -U, --username string Username for Basic Auth Global Flags: --delay duration Time each thread waits between requests (e.g. 1500ms) --no-color Disable color output --no-error Don't display errors -z, --no-progress Don't display progress -o, --output string Output file to write results to (defaults to stdout) -p, --pattern string File containing replacement patterns -q, --quiet Don't print the banner and other noise -t, --threads int Number of concurrent threads (default 10) -v, --verbose Verbose output (errors) -w, --wordlist string Path to the wordlist ``` ### Examples ```text gobuster dir -u https://mysite.com/path/to/folder -c 'session=123456' -t 50 -w common-files.txt -x .php,.html ``` Default options looks like this: ```text gobuster dir -u https://buffered.io -w ~/wordlists/shortlist.txt =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Mode : dir [+] Url/Domain : https://buffered.io/ [+] Threads : 10 [+] Wordlist : /home/oj/wordlists/shortlist.txt [+] Status codes : 200,204,301,302,307,401,403 [+] User Agent : gobuster/3.2.0 [+] Timeout : 10s =============================================================== 2019/06/21 11:49:43 Starting gobuster =============================================================== /categories (Status: 301) /contact (Status: 301) /posts (Status: 301) /index (Status: 200) =============================================================== 2019/06/21 11:49:44 Finished =============================================================== ``` Default options with status codes disabled looks like this: ```text gobuster dir -u https://buffered.io -w ~/wordlists/shortlist.txt -n =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Mode : dir [+] Url/Domain : https://buffered.io/ [+] Threads : 10 [+] Wordlist : /home/oj/wordlists/shortlist.txt [+] Status codes : 200,204,301,302,307,401,403 [+] User Agent : gobuster/3.2.0 [+] No status : true [+] Timeout : 10s =============================================================== 2019/06/21 11:50:18 Starting gobuster =============================================================== /categories /contact /index /posts =============================================================== 2019/06/21 11:50:18 Finished =============================================================== ``` Verbose output looks like this: ```text gobuster dir -u https://buffered.io -w ~/wordlists/shortlist.txt -v =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Mode : dir [+] Url/Domain : https://buffered.io/ [+] Threads : 10 [+] Wordlist : /home/oj/wordlists/shortlist.txt [+] Status codes : 200,204,301,302,307,401,403 [+] User Agent : gobuster/3.2.0 [+] Verbose : true [+] Timeout : 10s =============================================================== 2019/06/21 11:50:51 Starting gobuster =============================================================== Missed: /alsodoesnotexist (Status: 404) Found: /index (Status: 200) Missed: /doesnotexist (Status: 404) Found: /categories (Status: 301) Found: /posts (Status: 301) Found: /contact (Status: 301) =============================================================== 2019/06/21 11:50:51 Finished =============================================================== ``` Example showing content length: ```text gobuster dir -u https://buffered.io -w ~/wordlists/shortlist.txt -l =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Mode : dir [+] Url/Domain : https://buffered.io/ [+] Threads : 10 [+] Wordlist : /home/oj/wordlists/shortlist.txt [+] Status codes : 200,204,301,302,307,401,403 [+] User Agent : gobuster/3.2.0 [+] Show length : true [+] Timeout : 10s =============================================================== 2019/06/21 11:51:16 Starting gobuster =============================================================== /categories (Status: 301) [Size: 178] /posts (Status: 301) [Size: 178] /contact (Status: 301) [Size: 178] /index (Status: 200) [Size: 51759] =============================================================== 2019/06/21 11:51:17 Finished =============================================================== ``` Quiet output, with status disabled and expanded mode looks like this ("grep mode"): ```text gobuster dir -u https://buffered.io -w ~/wordlists/shortlist.txt -q -n -e https://buffered.io/index https://buffered.io/contact https://buffered.io/posts https://buffered.io/categories ``` ## `vhost` Mode ### Options ```text Uses VHOST enumeration mode (you most probably want to use the IP address as the URL parameter) Usage: gobuster vhost [flags] Flags: --append-domain Append main domain from URL to words from wordlist. Otherwise the fully qualified domains need to be specified in the wordlist. -c, --cookies string Cookies to use for the requests --domain string the domain to append when using an IP address as URL. If left empty and you specify a domain based URL the hostname from the URL is extracted --exclude-length ints exclude the following content length (completely ignores the status). Supply multiple times to exclude multiple sizes. -r, --follow-redirect Follow redirects -H, --headers stringArray Specify HTTP headers, -H 'Header1: val1' -H 'Header2: val2' -h, --help help for vhost -m, --method string Use the following HTTP method (default "GET") -k, --no-tls-validation Skip TLS certificate verification -P, --password string Password for Basic Auth --proxy string Proxy to use for requests [http(s)://host:port] --random-agent Use a random User-Agent string --retry Should retry on request timeout --retry-attempts int Times to retry on request timeout (default 3) --timeout duration HTTP Timeout (default 10s) -u, --url string The target URL -a, --useragent string Set the User-Agent string (default "gobuster/3.2.0") -U, --username string Username for Basic Auth Global Flags: --delay duration Time each thread waits between requests (e.g. 1500ms) --no-color Disable color output --no-error Don't display errors -z, --no-progress Don't display progress -o, --output string Output file to write results to (defaults to stdout) -p, --pattern string File containing replacement patterns -q, --quiet Don't print the banner and other noise -t, --threads int Number of concurrent threads (default 10) -v, --verbose Verbose output (errors) -w, --wordlist string Path to the wordlist ``` ### Examples ```text gobuster vhost -u https://mysite.com -w common-vhosts.txt ``` Normal sample run goes like this: ```text gobuster vhost -u https://mysite.com -w common-vhosts.txt =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Url: https://mysite.com [+] Threads: 10 [+] Wordlist: common-vhosts.txt [+] User Agent: gobuster/3.2.0 [+] Timeout: 10s =============================================================== 2019/06/21 08:36:00 Starting gobuster =============================================================== Found: www.mysite.com Found: piwik.mysite.com Found: mail.mysite.com =============================================================== 2019/06/21 08:36:05 Finished =============================================================== ``` ## `fuzz` Mode ### Options ```text Uses fuzzing mode Usage: gobuster fuzz [flags] Flags: -c, --cookies string Cookies to use for the requests --exclude-length ints exclude the following content length (completely ignores the status). Supply multiple times to exclude multiple sizes. -b, --excludestatuscodes string Negative status codes (will override statuscodes if set) -r, --follow-redirect Follow redirects -H, --headers stringArray Specify HTTP headers, -H 'Header1: val1' -H 'Header2: val2' -h, --help help for fuzz -m, --method string Use the following HTTP method (default "GET") -k, --no-tls-validation Skip TLS certificate verification -P, --password string Password for Basic Auth --proxy string Proxy to use for requests [http(s)://host:port] --random-agent Use a random User-Agent string --retry Should retry on request timeout --retry-attempts int Times to retry on request timeout (default 3) --timeout duration HTTP Timeout (default 10s) -u, --url string The target URL -a, --useragent string Set the User-Agent string (default "gobuster/3.2.0") -U, --username string Username for Basic Auth Global Flags: --delay duration Time each thread waits between requests (e.g. 1500ms) --no-color Disable color output --no-error Don't display errors -z, --no-progress Don't display progress -o, --output string Output file to write results to (defaults to stdout) -p, --pattern string File containing replacement patterns -q, --quiet Don't print the banner and other noise -t, --threads int Number of concurrent threads (default 10) -v, --verbose Verbose output (errors) -w, --wordlist string Path to the wordlist ``` ### Examples ```text gobuster fuzz -u https://example.com?FUZZ=test -w parameter-names.txt ``` ## `s3` Mode ### Options ```text Uses aws bucket enumeration mode Usage: gobuster s3 [flags] Flags: -h, --help help for s3 -m, --maxfiles int max files to list when listing buckets (only shown in verbose mode) (default 5) -k, --no-tls-validation Skip TLS certificate verification --proxy string Proxy to use for requests [http(s)://host:port] --random-agent Use a random User-Agent string --retry Should retry on request timeout --retry-attempts int Times to retry on request timeout (default 3) --timeout duration HTTP Timeout (default 10s) -a, --useragent string Set the User-Agent string (default "gobuster/3.2.0") Global Flags: --delay duration Time each thread waits between requests (e.g. 1500ms) --no-color Disable color output --no-error Don't display errors -z, --no-progress Don't display progress -o, --output string Output file to write results to (defaults to stdout) -p, --pattern string File containing replacement patterns -q, --quiet Don't print the banner and other noise -t, --threads int Number of concurrent threads (default 10) -v, --verbose Verbose output (errors) -w, --wordlist string Path to the wordlist ``` ### Examples ```text gobuster s3 -w bucket-names.txt ``` ## `gcs` Mode ### Options ```text Uses gcs bucket enumeration mode Usage: gobuster gcs [flags] Flags: -h, --help help for gcs -m, --maxfiles int max files to list when listing buckets (only shown in verbose mode) (default 5) -k, --no-tls-validation Skip TLS certificate verification --proxy string Proxy to use for requests [http(s)://host:port] --random-agent Use a random User-Agent string --retry Should retry on request timeout --retry-attempts int Times to retry on request timeout (default 3) --timeout duration HTTP Timeout (default 10s) -a, --useragent string Set the User-Agent string (default "gobuster/3.2.0") Global Flags: --delay duration Time each thread waits between requests (e.g. 1500ms) --no-color Disable color output --no-error Don't display errors -z, --no-progress Don't display progress -o, --output string Output file to write results to (defaults to stdout) -p, --pattern string File containing replacement patterns -q, --quiet Don't print the banner and other noise -t, --threads int Number of concurrent threads (default 10) -v, --verbose Verbose output (errors) -w, --wordlist string Path to the wordlist ``` ### Examples ```text gobuster gcs -w bucket-names.txt ``` ## `tftp` Mode ### Options ```text Uses TFTP enumeration mode Usage: gobuster tftp [flags] Flags: -h, --help help for tftp -s, --server string The target TFTP server --timeout duration TFTP timeout (default 1s) Global Flags: --delay duration Time each thread waits between requests (e.g. 1500ms) --no-color Disable color output --no-error Don't display errors -z, --no-progress Don't display progress -o, --output string Output file to write results to (defaults to stdout) -p, --pattern string File containing replacement patterns -q, --quiet Don't print the banner and other noise -t, --threads int Number of concurrent threads (default 10) -v, --verbose Verbose output (errors) -w, --wordlist string Path to the wordlist ``` ### Examples ```text gobuster tftp -s tftp.example.com -w common-filenames.txt ``` ## Wordlists via STDIN Wordlists can be piped into `gobuster` via stdin by providing a `-` to the `-w` option: ```bash hashcat -a 3 --stdout ?l | gobuster dir -u https://mysite.com -w - ``` Note: If the `-w` option is specified at the same time as piping from STDIN, an error will be shown and the program will terminate. ## Patterns You can supply pattern files that will be applied to every word from the wordlist. Just place the string `{GOBUSTER}` in it and this will be replaced with the word. This feature is also handy in s3 mode to pre- or postfix certain patterns. **Caution:** Using a big pattern file can cause a lot of request as every pattern is applied to every word in the wordlist. ### Example file ```text {GOBUSTER}Partial {GOBUSTER}Service PRE{GOBUSTER}POST {GOBUSTER}-prod {GOBUSTER}-dev ``` #### Use case in combination with patterns - Create a custom wordlist for the target containing company names and so on - Create a pattern file to use for common bucket names. ```bash curl -s --output - https://raw.githubusercontent.com/eth0izzle/bucket-stream/master/permutations/extended.txt | sed -s 's/%s/{GOBUSTER}/' > patterns.txt ``` - Run gobuster with the custom input. Be sure to turn verbose mode on to see the bucket details ```text gobuster s3 --wordlist my.custom.wordlist -p patterns.txt -v ``` Normal sample run goes like this: ```text PS C:\Users\firefart\Documents\code\gobuster> .\gobuster.exe s3 --wordlist .\wordlist.txt =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Threads: 10 [+] Wordlist: .\wordlist.txt [+] User Agent: gobuster/3.2.0 [+] Timeout: 10s [+] Maximum files to list: 5 =============================================================== 2019/08/12 21:48:16 Starting gobuster in S3 bucket enumeration mode =============================================================== webmail hacking css img www dav web localhost =============================================================== 2019/08/12 21:48:17 Finished =============================================================== ``` Verbose and sample run ```text PS C:\Users\firefart\Documents\code\gobuster> .\gobuster.exe s3 --wordlist .\wordlist.txt -v =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Threads: 10 [+] Wordlist: .\wordlist.txt [+] User Agent: gobuster/3.2.0 [+] Verbose: true [+] Timeout: 10s [+] Maximum files to list: 5 =============================================================== 2019/08/12 21:49:00 Starting gobuster in S3 bucket enumeration mode =============================================================== www [Error: All access to this object has been disabled (AllAccessDisabled)] hacking [Error: Access Denied (AccessDenied)] css [Error: All access to this object has been disabled (AllAccessDisabled)] webmail [Error: All access to this object has been disabled (AllAccessDisabled)] img [Bucket Listing enabled: GodBlessPotomac1.jpg (1236807b), HOMEWORKOUTAUDIO.zip (203908818b), ProductionInfo.xml (11946b), Start of Perpetual Motion Logo-1.mp3 (621821b), addressbook.gif (3115b)] web [Error: Access Denied (AccessDenied)] dav [Error: All access to this object has been disabled (AllAccessDisabled)] localhost [Error: Access Denied (AccessDenied)] =============================================================== 2019/08/12 21:49:01 Finished =============================================================== ``` Extended sample run ```text PS C:\Users\firefart\Documents\code\gobuster> .\gobuster.exe s3 --wordlist .\wordlist.txt -e =============================================================== Gobuster v3.2.0 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Threads: 10 [+] Wordlist: .\wordlist.txt [+] User Agent: gobuster/3.2.0 [+] Timeout: 10s [+] Expanded: true [+] Maximum files to list: 5 =============================================================== 2019/08/12 21:48:38 Starting gobuster in S3 bucket enumeration mode =============================================================== http://css.s3.amazonaws.com/ http://www.s3.amazonaws.com/ http://webmail.s3.amazonaws.com/ http://hacking.s3.amazonaws.com/ http://img.s3.amazonaws.com/ http://web.s3.amazonaws.com/ http://dav.s3.amazonaws.com/ http://localhost.s3.amazonaws.com/ =============================================================== 2019/08/12 21:48:38 Finished =============================================================== ``` ", Assign "at most 3 tags" to the expected json: {"id":"9529","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"