# Install gobuster with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, scoop Directory/file & DNS busting tool written in Go. Version 3.8.2 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:gobuster ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install gobuster ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install gobuster ``` Evidence: MacPorts ports tree: www/gobuster/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add gobuster ``` Evidence: Alpine Linux edge package indexes: gobuster from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install gobuster ``` Evidence: Debian stable package indexes: gobuster from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install gobuster ``` Evidence: Fedora Rawhide package metadata: gobuster from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#gobuster ``` Evidence: nixpkgs package indexes: pkgs/by-name/go/gobuster/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S gobuster ``` Evidence: Arch Linux sync databases: gobuster from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz ### Windows - Scoop (92%): ```sh scoop install main/gobuster ``` Evidence: Scoop official bucket manifest trees: bucket/gobuster.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:gobuster - **Package manager:** Homebrew - **Package manager page:** - **Version:** 3.8.2 - **Source summary:** Directory/file & DNS busting tool written in Go - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Generated:** 2026-07-08T18:08:21+00:00 ## Executables - gobuster (cli) - gobuster (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 3.8.2 - Local data: ok - Upstream repository: https://github.com/OJ/gobuster - Upstream latest detected: v3.8.2 (current) - info: No package-manager update timestamp was available. ## Project history and usage Gobuster is a Go security CLI for brute-force enumeration of web directories and files, DNS names, virtual hosts, cloud storage buckets, TFTP paths, and fuzzing targets. It is a staple-style package: simple to install, easy to script, and usually paired with wordlists during penetration testing and security assessment work. ### Project history The public GitHub repository was created in November 2014, with the project description centered on directory/file, DNS, and virtual-host busting in Go. GitHub release records show a v2.0.1 release in September 2018 and the v3 series beginning in June 2019. ### Adoption history Gobuster spread through security-oriented packaging because it solves a common reconnaissance task with a single compiled binary. The input package facts map it across Homebrew, Debian/Ubuntu, Fedora, Alpine, Arch, Nix, MacPorts, Scoop, and openSUSE-style packaging, and Homebrew provides a formula with binary bottles for macOS and Linux. ### How it is used The README documents a mode-based interface: dir mode for web paths, dns mode for subdomains, vhost mode for virtual hosts, s3 and gcs modes for bucket names, tftp mode for TFTP paths, and fuzzing mode for custom placeholders. Typical usage combines a target URL or domain with a wordlist and optional extensions, headers, cookies, or concurrency settings. ### Why package nerds care Gobuster matters to package nerds because it is one of the Go-era replacements for slower or interpreter-bound enumeration workflows. It packages cleanly as one binary, has no runtime language stack to manage, and has enough real-world security demand that it appears across many operating-system and cross-platform package collections. ### Timeline - 2014-11-14: Public GitHub repository created - 2018-09-11: v2.0.1 release published - 2019-06-19: v3.0.0 release published - 2022-10-08: v3.2.0 release published - 2025-09-04: v3.8.2 release published ### Related projects - Gobuster sits alongside directory and content discovery tools such as dirb, dirsearch, ffuf, feroxbuster, and wfuzz. - Its Go implementation and mode-based design make it part of the same packaging wave as other single-binary security CLIs. ### Sources - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** gobuster - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - gobuster - 3.6.0-1+b10: normalized package name match | Debian stable package indexes: gobuster from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Directory/file & DNS busting tool written in Go | https://github.com/OJ/gobuster - Nix - gobuster: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/gobuster/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - gobuster - 3.6.0-1: normalized package name match | Ubuntu 24.04 LTS package indexes: gobuster from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Directory/file & DNS busting tool written in Go | https://github.com/OJ/gobuster - apk - gobuster - 3.8.2-r0: normalized package name match | Alpine Linux edge package indexes: gobuster from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Directory/File, DNS and VHost busting tool written in Go | https://github.com/OJ/gobuster - dnf - gobuster - 3.8.2-3.fc44: normalized package name match | Fedora Rawhide package metadata: gobuster from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Directory/File, DNS and VHost busting tool written in Go | https://github.com/OJ/gobuster - pacman - gobuster - 3.8.2-1: normalized package name match | Arch Linux sync databases: gobuster from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Directory/File, DNS and VHost busting tool written in Go | https://github.com/OJ/gobuster - MacPorts - gobuster: normalized package name match | MacPorts ports tree: www/gobuster/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Scoop - main/gobuster: normalized package name match | Scoop official bucket manifest trees: bucket/gobuster.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [feroxbuster](https://www.automicvault.com/pkg/brew/feroxbuster/) - Shares av.db curated category or tags: cli, directory-enumeration, security, web-security. - [ffuf](https://www.automicvault.com/pkg/brew/ffuf/) - Shares av.db curated category or tags: cli, go, security, web-security. - [katana](https://www.automicvault.com/pkg/brew/katana/) - Shares av.db curated category or tags: cli, go, security, web-security. - [dalfox](https://www.automicvault.com/pkg/brew/dalfox/) - Shares av.db curated category or tags: cli, security, web-security. - [forbidden](https://www.automicvault.com/pkg/brew/forbidden/) - Shares av.db curated category or tags: cli, security, web-security. - [favirecon](https://www.automicvault.com/pkg/brew/favirecon/) - Shares av.db curated category or tags: cli, go, security. - [garble](https://www.automicvault.com/pkg/brew/garble/) - Shares av.db curated category or tags: cli, go, security. - [gau](https://www.automicvault.com/pkg/brew/gau/) - Shares av.db curated category or tags: cli, go, security. ## Combined YAML source View the package source record on GitHub. [combined/gobuster.yml](https://github.com/automic-vault/db/blob/main/combined/gobuster.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph