Common Flags Reference
Gobuster has a rich set of flags organized by mode. This reference covers every essential flag with a description and a working example you can copy and modify.
Global Flags (All Modes)
-w <wordlist>Path to wordlist file
gobuster dir -u http://10.0.0.1/ -w common.txt-t <threads>Number of concurrent threads (default: 10)
gobuster dir -u http://10.0.0.1/ -w common.txt -t 50-o <file>Output results to file
gobuster dir -u http://10.0.0.1/ -w common.txt -o results.txt-vVerbose output (show every attempt)
gobuster dir -u http://10.0.0.1/ -w common.txt -v-zSuppress progress output
gobuster dir -u http://10.0.0.1/ -w common.txt -z-qQuiet mode (only show results)
gobuster dir -u http://10.0.0.1/ -w common.txt -q--timeout <seconds>HTTP timeout per request
gobuster dir -u http://10.0.0.1/ -w common.txt --timeout 30s--delay <duration>Delay between each request
gobuster dir -u http://10.0.0.1/ -w common.txt --delay 1sDir Mode Flags
-u <url>Target URL
gobuster dir -u http://10.0.0.1/ -w common.txt-x <extensions>File extensions to append
gobuster dir -u http://10.0.0.1/ -w common.txt -x php,txt,html-rFollow redirects
gobuster dir -u http://10.0.0.1/ -w common.txt -r--wildcardForce wildcard detection
gobuster dir -u http://10.0.0.1/ -w common.txt --wildcard--exclude-length <lengths>Exclude responses with these lengths
gobuster dir -u http://10.0.0.1/ -w common.txt --exclude-length 1234-c <cookie>Add cookie string
gobuster dir -u http://10.0.0.1/ -w common.txt -c "session=abc123"-H <header>Add custom HTTP header
gobuster dir -u http://10.0.0.1/ -w common.txt -H "X-API-Key: key123"-kSkip TLS certificate verification
gobuster dir -u https://10.0.0.1/ -w common.txt -k-a <agent>Set custom User-Agent string
gobuster dir -u http://10.0.0.1/ -w common.txt -a "Mozilla/5.0"DNS Mode Flags
-d <domain>Target domain
gobuster dns -d example.com -w subdomains.txt-iShow IP addresses
gobuster dns -d example.com -w subdomains.txt -i--resolver <ip>Custom DNS resolver
gobuster dns -d example.com -w subdomains.txt --resolver 8.8.8.8Vhost Mode Flags
-u <url>Target URL (IP-based)
gobuster vhost -u http://10.0.0.1/ -w vhosts.txt--append-domainAppend domain to wordlist entries
gobuster vhost -u http://10.0.0.1/ -w common.txt --append-domain -d example.com-d <domain>Domain to append (with --append-domain)
gobuster vhost -u http://10.0.0.1/ -w common.txt --append-domain -d example.comFuzz Mode Flags
-u <url>Target URL with FUZZ keyword
gobuster fuzz -u "http://10.0.0.1/FUZZ" -w common.txt-X <method>HTTP method (GET, POST, PUT, etc.)
gobuster fuzz -u "http://10.0.0.1/FUZZ" -w common.txt -X POST-d <data>POST data with FUZZ keyword
gobuster fuzz -u "http://10.0.0.1/login" -w passwords.txt -d "pass=FUZZ" -X POST-H <header>Add custom header
gobuster fuzz -u "http://10.0.0.1/FUZZ" -w common.txt -H "Authorization: Bearer token"-w1 <wordlist>Wordlist for FUZZ1 placeholder
gobuster fuzz -u "http://10.0.0.1/FUZZ1/FUZZ2" -w1 dirs.txt -w2 files.txt-w2 <wordlist>Wordlist for FUZZ2 placeholder
gobuster fuzz -u "http://10.0.0.1/FUZZ1/FUZZ2" -w1 dirs.txt -w2 files.txtInfo
gobuster --help or consult the official documentation at github.com/OJ/gobuster