search

OJ / gobuster

Directory/File, DNS and VHost busting tool written in Go
Apache License 2.0
9.28k stars 1.16k forks source link

Vhost not working as expected #489

Open cyberhunter69 opened 3 months ago

cyberhunter69 commented 3 months ago

Hello,

The gobuster vhost mode is not woking properly in the gobuster v3.6. The command I put is : gobuster vhost --url http://webenum.thm -w /usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-5000.txt In the wordlist there are 2 values that are true and the expected output is this :

Screenshot 2024-03-08 155521

But the output I have is this : Screenshot 2024-03-31 184402

Please note that the website is in my /etc/hosts with the IP address and the website works fine in firefox and with the other mode (dir) it works perfectly well but with vhost and dns modes it doesn't find any results.

Thank you in advance for your responses.

firefart commented 3 months ago

I guess you are missing the -append-domain and —domain switch. Without this the plain word from the wordlist will be sent in the host header which could explain the 400s. I’m planning to make this the default setting in the next version as it causes a lot of confusion