Gobuster
Gobuster can look for cases where file/folder exists but cannot be accessed, include 403 in status code with -s It can also look for specific file extensions with -x
gobuster -s status codes
403 - show where it exists but not acessed
-x specify file extensions that it should look for
-s 200,204,300,302,307,400,403 -b ""
```shellscript
gobuster dir -u domain.tld/cgi-bin/ -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-medium.txt --threads 100 -s 200,204,301,302,307,400,403 -x sh,pl -b ""
```
Last updated
Was this helpful?