GoBuster

**http Directory: **

sudo /opt/gobuster/gobuster dir -u $URL -w /opt/SecLists/Discovery/Web-Content/raft-large-directories.txt -t 50

**https: **

sudo /opt/gobuster/gobuster dir -u https://10.129.104.164 -w /opt/SecLists/Discovery/Web-Content/raft-large-directories.txt -t 50 -ksudo /opt/gobuster/gobuster dir -u https://10.129.104.164 -w /opt/SecLists/Discovery/Web-Content/raft-large-directories.txt -t 50 -k

**add a / **at the end. useful for finding /api/ or /cgi-bin/. the switch is -f

sudo /opt/gobuster/gobuster dir -u http://backdoor.htb/ -w /opt/SecLists/Discovery/Web-Content/raft-medium-directories.txt -t 50 -f

Specific file extensions:

gobuster dir -w /opt/Seclists/Discovery/Web-Content/raft-medium-directories.txt -u 10.10.10.56/cgi-bin/ -x sh,cgi,php,txt,conf,html,asp,aspx,pdf,

http Files

sudo gobuster dir -w /opt/SecLists/Discovery/Web-Content/raft-large-files.txt -u $URL

subdomains:

sudo /opt/gobuster/gobuster vhost -u $URL -w /opt/SecLists/Discovery/DNS/subdomains-top1million-110000.txt -t 50