## Exit Codes
| Code | Meaning                          |
| ---- | -------------------------------- |
| 0    | Success (found at least one hit) |
| 1    | Partial success / warnings       |
| 2    | Error (bad flags or syntax)      |

## HTTP Status Codes
| Status | Meaning                      |
| ------ | ---------------------------- |
| 200    | OK (resource exists)         |
| 301    | Moved Permanently            |
| 302    | Found (temporary redirect)   |
| 307    | Temporary Redirect           |
| 401    | Unauthorized (auth required) |
| 403    | Forbidden (access denied)    |
| 404    | Not Found                    |
| 500    | Internal Server Error        |
| 502    | Bad Gateway                  |
| 503    | Service Unavailable          |

> ⚠️ Gobuster can show **any** HTTP status code—these are just the most frequent.

### Global Flags
| Flag                               | Category           | Description                                                       |
|------------------------------------|--------------------|-------------------------------------------------------------------|
| `-w <file>; --wordlist <file>`     | Wordlist           | Path to wordlist.                                                 |
| `-t <n>; --threads <n>`            | Performance        | Number of concurrent threads (default: 10).                       |
| `-o <file>; --output <file>`       | Output             | Write results to a file instead of stdout.                        |
| `-q; --quiet`                      | Output             | Suppress banner and non‑result output.                            |
| `-v; --verbose`                    | Output             | Show verbose messages and errors.                                 |
| `--delay <duration>`               | Performance        | Delay between requests (e.g. `500ms`, `1s`).                      |
| `--timeout <duration>`             | Performance        | Request timeout (default: `10s`).                                 |
| `--wordlist-offset <n>`            | Wordlist Control   | Skip first n entries in wordlist (resume capability).             |
| `-p <file>; --pattern <file>`      | Wordlist‑Pattern   | File of regex patterns for substitution.                          |
| `--no-color`                       | Output             | Disable colored output.                                           |
| `--no-error`                       | Output             | Suppress error messages.                                          |
| `-z; --no-progress`                | Output             | Don’t show progress bar.                                          |
| `-h; --help`                       | Help               | Show help for all modes/flags.                                    |
| `--version`                        | Help               | Display Gobuster version.                                         |

#### Directory Mode Flags (`dir`)
| Flag                                          | Category         | Description                                                                   |
|-----------------------------------------------|------------------|-------------------------------------------------------------------------------|
| `-u <url>; --url <url>`                       | Target           | Base URL (e.g. `http://<TARGET_IP>/`).                                        |
| `-x <exts>; --extensions <exts>`              | File Filtering   | Try only these extensions (comma‑separated, e.g. `php,txt`).                  |
| `-r; --follow-redirect`                       | HTTP             | Follow HTTP redirects.                                                        |
| `-s <codes>; --status-codes <codes>`          | Filtering        | Only report these status codes (e.g. `200,301`).                              |
| `-b <codes>; --status-codes-blacklist <codes>`| Filtering        | Exclude these status codes (default: `404`).                                  |
| `-e; --expanded`                              | Output           | Print full URLs instead of just paths.                                        |
| `-d; --discover-backup`                       | HTTP             | Also look for common backup file extensions on found entries.                 |
| `--exclude-length <lens>`                     | Filtering        | Ignore responses matching these body lengths.                                 |
| `-f; --add-slash`                             | HTTP             | Append a slash (`/`) to each word before requesting.                          |
| `-H <hdr>; --headers <hdr>`                   | HTTP             | Add custom HTTP header(s).                                                    |
| `-c <cookie>; --cookies <cookie>`             | HTTP             | Send cookie(s) with each request.                                             |
| `-m <method>; --method <method>`              | HTTP             | HTTP method to use (`GET`, `POST`, `HEAD`; default: `GET`).                   |
| `-n; --no-status`                             | Output           | Don’t display status codes in results.                                        |
| `-k; --no-tls-validation`                     | HTTP             | Skip TLS certificate verification.                                            |
| `-U <user>; --username <user>`                | Auth             | Username for HTTP Basic Auth.                                                 |
| `-P <pw>; --password <pw>`                    | Auth             | Password for HTTP Basic Auth.                                                 |
| `--proxy <url>`                               | Proxy            | Send all requests via this proxy.                                             |
| `--random-agent`                              | HTTP             | Use a random User‑Agent for each request.                                     |

#### DNS Mode Flags (`dns`)
| Flag                                | Category    | Description                                                 |
|-------------------------------------|-------------|-------------------------------------------------------------|
| `-d <domain>; --domain <domain>`    | Target      | Base domain to enumerate (e.g. `<TARGET_HOSTNAME>`).        |
| `-r <resolver>; --resolver <res>`   | DNS         | Use this DNS resolver (e.g. `8.8.8.8:53`).                  |
| `--no-fqdn`                         | DNS         | Don’t append system search domains to names.                |
| `--wildcard`                        | Filtering   | Continue even if wildcard DNS responses are detected.       |
| `-c; --show-cname`                  | DNS         | Display CNAME records for found subdomains.                 |
| `-i; --show-ips`                    | DNS         | Display IP addresses alongside subdomains.                  |

#### Virtual‑Host Mode Flags (`vhost`)
| Flag                            | Category            | Description                                |
|---------------------------------|---------------------|--------------------------------------------|
| `-u <url>; --url <url>`         | Target              | Base URL (e.g. `http://<TARGET_IP>/`).     |
| `--append-domain`               | Target Formatting   | Auto‑append `.<domain>` to each word.      |
| `-r; --follow-redirect`         | HTTP                | Follow HTTP redirects.                     |
| `-H <hdr>; --headers <hdr>`     | HTTP                | Add custom HTTP header(s).                 |
| `-c <cookie>; --cookies <cookie>` | HTTP              | Send cookie(s) with each request.          |
| `-k; --no-tls-validation`       | HTTP                | Skip TLS certificate validation.           |
| `-U <user>; --username <user>`  | Auth                | Username for HTTP Basic Auth.              |
| `-P <pw>; --password <pw>`      | Auth                | Password for HTTP Basic Auth.              |
| `--proxy <url>`                 | Proxy               | Send requests via this proxy.              |
| `--random-agent`                | HTTP                | Use a random User‑Agent.                   |

#### S3 & GCS Mode Flags (`s3`/`gcs`)
| Flag                         | Category         | Description                                           |
|------------------------------|------------------|-------------------------------------------------------|
| `-m <n>; --maxfiles <n>`     | Bucket Control   | Max objects to list per bucket (verbose only).        |
| `--proxy <url>`              | Proxy            | Send requests via this proxy.                        |
| `--random-agent`             | HTTP             | Use a random User‑Agent.                             |
| `--timeout <duration>`       | Performance      | Request timeout (default: `10s`).                     |

#### TFTP Mode Flags (`tftp`)
| Flag                        | Category       | Description                              |
|-----------------------------|----------------|------------------------------------------|
| `-s <server>; --server <srv>` | Target       | TFTP server address.                    |
| `-p <port>; --port <port>`    | TFTP Control | TFTP port (default: `69`).              |
| `-w <file>; --wordlist <file>`| Wordlist     | List of filenames to request.           |
| `--timeout <duration>`        | Performance  | Request timeout (default: `1s`).        |

#### Fuzz Mode Flags (`fuzz`)
| Flag                           | Category         | Description                                                  |
|--------------------------------|------------------|--------------------------------------------------------------|
| `-u <url>; --url <url>`        | Target           | URL containing the `FUZZ` placeholder (e.g. `?id=FUZZ`).     |
| `--data <data>`                | HTTP‑Body        | POST body with `FUZZ` placeholders (e.g. `pass=FUZZ`).       |
| `-H <hdr>; --headers <hdr>`    | HTTP             | Header(s) with `FUZZ` placeholders (e.g. `-H "X-API: FUZZ"`). |
| `-w <file>; --wordlist <file>`| Wordlist         | Path to wordlist.                                           |
| `-m <n>; --maxfiles <n>`       | Performance      | Threads or max items for fuzzing (mode‑dependent).           |
| `--pattern <file>`             | Wordlist‑Pattern | File of regex patterns for substitution.                     |