CmdID

CmdID / Commands

gobuster

Brute-forces hidden paths on web servers and more. tldr-pages

On several platforms 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Discover directories and files that match in the wordlist

gobuster dir --url https://example.com/ --wordlist path/to/fileIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Discover subdomains

gobuster dns --domain example.com --wordlist path/to/fileIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Discover Amazon S3 buckets

gobuster s3 --wordlist path/to/fileIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Discover other virtual hosts on the server

gobuster vhost --url https://example.com/ --wordlist path/to/fileIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Fuzz the value of a parameter

gobuster fuzz --url https://example.com/?parameter=FUZZ --wordlist path/to/fileIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Fuzz the name of a parameter

gobuster fuzz --url https://example.com/?FUZZ=value --wordlist path/to/fileIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

What detects it

Sigma process creation rules that name gobuster
highLinux HackTool ExecutionNasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])