Gobuster/Dirbuster Flashcards

1
Q

What is Gobuster used for?

A

Gobuster is used for brute-force discovery of directories, files, and DNS subdomains.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Fill in the blank: Gobuster is a tool commonly used for ____ and DNS enumeration.

A

directory brute-forcing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How do you use Gobuster to brute-force directories on a web server?

A

Use ‘gobuster dir -u -w ‘.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does the ‘-w’ option in Gobuster specify?

A

The ‘-w’ option specifies the wordlist to be used for brute-forcing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Fill in the blank: The ‘dir’ mode in Gobuster is used for discovering hidden ____ and files on web servers.

A

directories

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the purpose of the ‘-x’ option in Gobuster?

A

The ‘-x’ option specifies file extensions to append to each word in the wordlist (e.g., .php, .html).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How do you use Gobuster to brute-force DNS subdomains?

A

Use ‘gobuster dns -d -w ‘.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Fill in the blank: Gobuster can also brute-force DNS ____ using the ‘dns’ mode.

A

subdomains

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the purpose of the ‘-t’ option in Gobuster?

A

The ‘-t’ option specifies the number of threads to use during the scan.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How do you limit Gobuster’s brute-force scan to a specific directory?

A

Use the ‘-u’ option followed by the full URL of the directory you want to scan.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Fill in the blank: Gobuster’s ‘dns’ mode is used for subdomain enumeration, while the ‘dir’ mode is for ____ discovery.

A

directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How do you increase Gobuster’s scan speed?

A

You can increase the number of threads using the ‘-t’ option.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the purpose of the ‘-o’ option in Gobuster?

A

The ‘-o’ option specifies the file where scan results will be saved.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do you use Gobuster to scan for specific file types?

A

Use the ‘-x’ option to specify file extensions (e.g., ‘.php’, ‘.txt’).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does the ‘-r’ option do in Gobuster?

A

The ‘-r’ option forces the scanner to follow redirects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Dirbuster used for?

A

Dirbuster is a GUI-based tool used for brute-forcing directories and files on web servers.

17
Q

Fill in the blank: Dirbuster is commonly used to discover hidden files and directories on ____ servers.

A

web

18
Q

How do you configure Dirbuster to search for specific file extensions?

A

You can specify desired file extensions in the file extension field of the Dirbuster interface.

19
Q

What is the purpose of a wordlist in Dirbuster?

A

The wordlist is used to generate possible directory and file names for brute-forcing.

20
Q

How do you increase the speed of a Dirbuster scan?

A

You can increase the number of threads in the ‘Number of Threads’ field.

21
Q

Fill in the blank: Both Dirbuster and Gobuster are used for brute-forcing ____ on web servers.

A

directories

22
Q

How does Dirbuster handle directory depth?

A

Dirbuster allows you to set the maximum recursion depth for scanning nested directories.

23
Q

What is the main difference between Gobuster and Dirbuster?

A

Gobuster is a command-line tool, while Dirbuster has a graphical user interface (GUI).

24
Q

Fill in the blank: Dirbuster is part of the ____ suite and commonly used in web application security testing.

A

OWASP