Exit Codes,,
Code,Meaning,
0,Success (found at least one hit),
1,Partial success / warnings,
2,Error (bad flags or syntax),
,,
HTTP Status Codes,,
Status,Meaning,
200,OK (resource exists),
301,Moved Permanently,
302,Found (temporary redirect),
307,Temporary Redirect,
401,Unauthorized (auth required),
403,Forbidden (access denied),
404,Not Found,
500,Internal Server Error,
502,Bad Gateway,
503,Service Unavailable,
> ?? Gobuster can show **any** HTTP status code—these are just the most frequent.,,
,,
Global Flags,,
Flag,Category,Description
-w <file>; --wordlist <file>,Wordlist,Path to wordlist.
-t <n>; --threads <n>,Performance,Number of concurrent threads (default: 10).
-o <file>; --output <file>,Output,Write results to a file instead of stdout.
-q; --quiet,Output,Suppress banner and non‑result output.
-v; --verbose,Output,Show verbose messages and errors.
--delay <duration>,Performance,"Delay between requests (e.g. `500ms`, `1s`)"
--timeout <duration>,Performance,Request timeout (default: 10s).
--wordlist-offset <n>,Wordlist Control,Skip first n entries in wordlist (resume capability).
-p <file>; --pattern <file>,Wordlist‑Pattern,File of regex patterns for substitution.
 --no-color,Output,Disable colored output.
 --no-error,Output,Suppress error messages.
-z; --no-progress,Output,Don’t show progress bar.
-h; --help,Help,Show help for all modes/flags.
 --version,Help,Display Gobuster version.
,,
Directory Mode Flags (`dir`),,
Flag,Category,Description
-u <url>; --url <url>,Target,Base URL (e.g. http://<TARGET_IP>/).
-x <exts>; --extensions <exts>,File Filtering,"Try only these extensions (comma?separated, e.g. `php,txt`)"
-r; --follow-redirect,HTTP,Follow HTTP redirects.
-s <codes>; --status-codes <codes>,Filtering,"Only report these status codes (e.g. `200,301`)"
-b <codes>; --status-codes-blacklist <codes>,Filtering,Exclude these status codes (default: 404).
-e; --expanded,Output,Print full URLs instead of just paths.
-d; --discover-backup,HTTP,Also look for common backup file extensions on found entries.
--exclude-length <lens>,Filtering,Ignore responses matching these body lengths.
-f; --add-slash,HTTP,Append a slash (/) to each word before requesting.
-H <hdr>; --headers <hdr>,HTTP,Add custom HTTP header(s).
-c <cookie>; --cookies <cookie>,HTTP,Send cookie(s) with each request.
-m <method>; --method <method>,HTTP,"HTTP method to use (`GET`, `POST`, `HEAD`; default: `GET`)"
-n; --no-status,Output,Don’t display status codes in results.
-k; --no-tls-validation,HTTP,Skip TLS certificate verification.
-U <user>; --username <user>,Auth,Username for HTTP Basic Auth.
-P <pw>; --password <pw>,Auth,Password for HTTP Basic Auth.
--proxy <url>,Proxy,Send all requests via this proxy.
 --random-agent,HTTP,Use a random User‑Agent for each request.
,,
DNS Mode Flags (`dns`),,
Flag,Category,Description
-d <domain>; --domain <domain>,Target,Base domain to enumerate (e.g. <TARGET_HOSTNAME>).
-r <resolver>; --resolver <res>,DNS,Use this DNS resolver (e.g. 8.8.8.8:53).
 --no-fqdn,DNS,Don’t append system search domains to names.
 --wildcard,Filtering,Continue even if wildcard DNS responses are detected.
-c; --show-cname,DNS,Display CNAME records for found subdomains.
-i; --show-ips,DNS,Display IP addresses alongside subdomains.
,,
Virtual?Host Mode Flags (`vhost`),,
Flag,Category,Description
-u <url>; --url <url>,Target,Base URL (e.g. http://<TARGET_IP>/).
 --append-domain,Target Formatting,Auto‑append .<domain> to each word.
-r; --follow-redirect,HTTP,Follow HTTP redirects.
-H <hdr>; --headers <hdr>,HTTP,Add custom HTTP header(s).
-c <cookie>; --cookies <cookie>,HTTP,Send cookie(s) with each request.
-k; --no-tls-validation,HTTP,Skip TLS certificate validation.
-U <user>; --username <user>,Auth,Username for HTTP Basic Auth.
-P <pw>; --password <pw>,Auth,Password for HTTP Basic Auth.
--proxy <url>,Proxy,Send requests via this proxy.
 --random-agent,HTTP,Use a random User‑Agent for each request.
,,
S3 & GCS Mode Flags (`s3`/`gcs`),,
Flag,Category,Description
-m <n>; --maxfiles <n>,Bucket Control,Max objects to list per bucket (verbose only).
--proxy <url>,Proxy,Send requests via this proxy.
 --random-agent,HTTP,Use a random User‑Agent for each request.
--timeout <duration>,Performance,Request timeout (default: 10s).
,,
TFTP Mode Flags (`tftp`),,
Flag,Category,Description
-s <server>; --server <srv>,Target,TFTP server address.
-p <port>; --port <port>,TFTP Control,TFTP port (default: 69).
-w <file>; --wordlist <file>,Wordlist,List of filenames to request.
--timeout <duration>,Performance,Request timeout (default: 1s).
,,
Fuzz Mode Flags (`fuzz`),,
Flag,Category,Description
-u <url>; --url <url>,Target,URL containing the FUZZ placeholder (e.g. ?id=FUZZ).
--data <data>,HTTP‑Body,POST body with FUZZ placeholders (e.g. pass=FUZZ).
-H <hdr>; --headers <hdr>,HTTP,"Header(s) with FUZZ placeholders (e.g. -H ""X-API: FUZZ"")."
-w <file>; --wordlist <file>,Wordlist,Path to wordlist.
-m <n>; --maxfiles <n>,Performance,Threads or max items for fuzzing (mode‑dependent).
--pattern <file>,Wordlist‑Pattern,File of regex patterns for substitution.