Ravi Sir's Cyber Security Cards › Revision Cards
Gobuster and Dirb: Finding Hidden Content
Gobuster and Dirb: Finding Hidden Content Gobuster and Dirb guess hidden pages and files on a web server, like /admin or /backup.zip . They try names from a wordlist. Flags: -x php,txt,bak adds file endings, -t 50 sets speed. If Gobuster finds /backup.zip or /.env on your server, attackers will too.
Read card text
What this card says
What it is
Gobuster and Dirb guess hidden pages and files on a web server, like /admin or /backup.zip.
How it works
They try names from a wordlist.
Flags: -x php,txt,bak adds file endings, -t 50 sets speed.
Why it matters for security
If Gobuster finds /backup.zip or /.env on your server, attackers will too.
Keep deployments clean: no backups or secrets in the web folder.
Learn more in the lesson: 21.5 Gobuster and Dirb: Finding Hidden Content