Automic VaultAutomic Vault

brew

Install gobuster with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, scoop

Directory/file & DNS busting tool written in Go. Version 3.8.2 via Homebrew; verified from local package data.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install gobuster

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install gobuster

MacPorts ports tree · www/gobuster/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add gobuster

Alpine Linux edge package indexes · gobuster · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install gobuster

Debian stable package indexes · gobuster · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install gobuster

Fedora Rawhide package metadata · gobuster · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#gobuster

nixpkgs package indexes · pkgs/by-name/go/gobuster/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S gobuster

Arch Linux sync databases · gobuster · source: geo.mirror.pkgbuild.com

Windows

Scoopverified · 92%
scoop install main/gobuster

Scoop official bucket manifest trees · bucket/gobuster.json · source: api.github.com

overview

Package summary

Directory/file & DNS busting tool written in Go

Commands and aliases

  • gobuster

history

Project history and usage

Gobuster is a Go security CLI for brute-force enumeration of web directories and files, DNS names, virtual hosts, cloud storage buckets, TFTP paths, and fuzzing targets. It is a staple-style package: simple to install, easy to script, and usually paired with wordlists during penetration testing and security assessment work.

Project history

The public GitHub repository was created in November 2014, with the project description centered on directory/file, DNS, and virtual-host busting in Go. GitHub release records show a v2.0.1 release in September 2018 and the v3 series beginning in June 2019.

Adoption history

Gobuster spread through security-oriented packaging because it solves a common reconnaissance task with a single compiled binary. The input package facts map it across Homebrew, Debian/Ubuntu, Fedora, Alpine, Arch, Nix, MacPorts, Scoop, and openSUSE-style packaging, and Homebrew provides a formula with binary bottles for macOS and Linux.

How it is used

The README documents a mode-based interface: dir mode for web paths, dns mode for subdomains, vhost mode for virtual hosts, s3 and gcs modes for bucket names, tftp mode for TFTP paths, and fuzzing mode for custom placeholders. Typical usage combines a target URL or domain with a wordlist and optional extensions, headers, cookies, or concurrency settings.

Why package nerds care

Gobuster matters to package nerds because it is one of the Go-era replacements for slower or interpreter-bound enumeration workflows. It packages cleanly as one binary, has no runtime language stack to manage, and has enough real-world security demand that it appears across many operating-system and cross-platform package collections.

Timeline

  • 2014-11-14: Public GitHub repository created
  • 2018-09-11: v2.0.1 release published
  • 2019-06-19: v3.0.0 release published
  • 2022-10-08: v3.2.0 release published
  • 2025-09-04: v3.8.2 release published

Related projects

  • Gobuster sits alongside directory and content discovery tools such as dirb, dirsearch, ffuf, feroxbuster, and wfuzz.
  • Its Go implementation and mode-based design make it part of the same packaging wave as other single-binary security CLIs.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 8 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
gobustercliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-07
manager version3.8.2
manager updated
local dataok
upstreamcurrent
latest detectedv3.8.2

https://github.com/OJ/gobuster

  • infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package keybrew:gobuster
Version3.8.2
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/gobuster
Homepagehttps://github.com/OJ/gobuster
Repositoryhttps://github.com/OJ/gobuster
Upstream docshttps://github.com/OJ/gobuster#readme
LicenseApache-2.0
Source archivehttps://github.com/OJ/gobuster/archive/refs/tags/v3.8.2.tar.gz
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namegobuster
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

gobuster 3.6.0-1+b10

Directory/file & DNS busting tool written in Go

https://github.com/OJ/gobuster

sudo apt install gobuster
  • Section: utils
  • Architecture: amd64
  • Source Package: gobuster
  • 1 dependencies
  • 3 optional deps
  • normalized package name match
  • Matched by: Gobuster
Debian stable package indexes · deb.debian.org · Debian stable package indexes: gobuster from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

gobuster

nix profile install nixpkgs#gobuster
  • normalized package name match
  • Matched by: Gobuster
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/go/gobuster/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

gobuster 3.6.0-1

Directory/file & DNS busting tool written in Go

https://github.com/OJ/gobuster

sudo apt install gobuster
  • Section: universe/utils
  • Architecture: amd64
  • 1 dependencies
  • 3 optional deps
  • normalized package name match
  • Matched by: Gobuster
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: gobuster from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

gobuster 3.8.2-r0

Directory/File, DNS and VHost busting tool written in Go

https://github.com/OJ/gobuster

sudo apk add gobuster
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: gobuster
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Gobuster
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: gobuster from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
dnf95%

gobuster 3.8.2-3.fc44

Directory/File, DNS and VHost busting tool written in Go

https://github.com/OJ/gobuster

sudo dnf install gobuster
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MIT
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: gobuster
  • 3 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Gobuster
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: gobuster from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

gobuster 3.8.2-1

Directory/File, DNS and VHost busting tool written in Go

https://github.com/OJ/gobuster

sudo pacman -S gobuster
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • normalized package name match
  • Matched by: Gobuster
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: gobuster from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

gobuster

sudo port install gobuster
  • normalized package name match
  • Matched by: Gobuster
MacPorts ports tree · api.github.com · MacPorts ports tree: www/gobuster/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/gobuster

scoop install main/gobuster
  • normalized package name match
  • Matched by: Gobuster
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/gobuster.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • goBuild dependency declared by Homebrew.

Same workflow

  • feroxbusterShares av.db curated category or tags: cli, directory-enumeration, security, web-security.
  • ffufShares av.db curated category or tags: cli, go, security, web-security.
  • katanaShares av.db curated category or tags: cli, go, security, web-security.
  • dalfoxShares av.db curated category or tags: cli, security, web-security.
  • forbiddenShares av.db curated category or tags: cli, security, web-security.
  • favireconShares av.db curated category or tags: cli, go, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment