OJ / gobuster

Directory/File, DNS and VHost busting tool written in Go
Apache License 2.0
9.28k stars 1.16k forks source link

Vhost not working properly #494

Closed pptx704 closed 2 months ago

pptx704 commented 2 months ago

For some reason, every endpoint is being counted as a valid vhost that returns 403 status. Gobuster version is 3.6

To recreate-

image

firefart commented 2 months ago

the dns name does not need to exist in vhost mode. The correct command would be curl -H “Host: xxxxx” ip. This is not a bug