Gobuster

Web Applicationkali · parrot

Directory, DNS, and vhost brute-forcer written in Go.

Install

sudo apt install gobuster

gobuster dir -u https://target.com -w /usr/share/wordlists/dirb/common.txt
gobuster dns -d target.com -w subdomains.txt

Use only on systems you are authorized to test. Follow program scope.

Burp Suite

The industry-standard intercepting proxy for web app and API testing. Core bug bounty tool.

ffuf

Fast web fuzzer for directories, virtual hosts, and parameters. Preferred over older gobusters for speed.

httpx

Fast HTTP toolkit from ProjectDiscovery for probing live hosts and tech detection.

OWASP ZAP

Free open-source web app scanner and proxy — solid Burp alternative for automated scans.