# OJ/gobuster

Directory/File, DNS and VHost busting tool written in Go

Repository: https://github.com/OJ/gobuster
Canonical: https://ross.abutalabs.com/products/gobuster
Language: Go
License: Apache-2.0
License Family: permissive
Topics: go, pentesting, tool, dns, web
Last push: 2026-08-17T22:02:56+00:00

## Health v2 (maintenance only)
Score: 80/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 98, release rhythm 46, longevity 100
- inputs: {"age_days": 4310, "days_push": 16, "days_rel": 363, "gap_med": 16, "n_releases_24m": 4}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 14038, forks 1613 (observed 2026-08-28T04:11:05.339220+00:00)

## What it is
Gobuster is a fast, multi-threaded brute-forcing tool written in Go for enumerating web directories/files, DNS subdomains, virtual hosts, cloud storage buckets, and TFTP servers. It is widely used by penetration testers and security professionals during reconnaissance and security assessments.

## Use cases
- discover hidden directories and files on a web server
- enumerate subdomains of a domain via DNS brute-forcing
- find virtual hosts on a target web server
- find open S3 or GCS buckets by name
- discover files on TFTP servers
- fuzz web parameters with custom wordlists and patterns

## When to choose
- you need a fast, multi-threaded CLI tool for directory, DNS, or vhost enumeration during a pentest
- you want a single Go binary or Docker image with no runtime dependencies
- you need multiple enumeration modes (dir, dns, vhost, s3, gcs, tftp, fuzz) in one tool

## When to avoid
- you need a full vulnerability scanner rather than a brute-force enumerator
- you require a GUI or interactive web interface
- you need content-aware crawling or authenticated application scanning

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, web-scraping, cli, networking
- domain: security, penetration-testing, web-development
- platform: windows, go, cli, cross-platform
- tags: brute-forcing, directory-enumeration, dns-enumeration, vhost-discovery, wordlists, s3-enumeration, fuzzing, pentesting, command-line, linux, macos, docker

## Member repositories
- OJ/gobuster (main) score 80

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:11:05.339220+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:12:51.676630+00:00, confidence not recorded.
  - readme: https://github.com/OJ/gobuster (fetched 2026-08-28T04:11:05.339220+00:00, sha 85d193467cff)
- Data as of 2026-08-30T08:39:29.467469+00:00.