GoFuzz

GoFuzz - Web Directory & Subdomain Fuzzer 🔍

Fast web fuzzer written in Go (source: gofuzz.go) for discovering hidden subdomains and directories.

Features ✨

• 🚀 Multi-threaded scanning (adjustable concurrency)
• 🔍 Dual-mode: Subdomains (-s) + Directories (-d)
• 🎯 Smart filtering by status codes (-f 200,302)
• 📂 File output support (-o results.txt)
• 📊 Verbose mode for debugging (-v)

Installation ⚙️

Method 1: Direct Build

 Go Install
bash
go install github.com/Lokidres/GoFuzz@latest
go run gofuzz.go or go build gofuzz.go && ./gofuzz.go
Usage 🛠️
Basic Scan
bash
./gofuzz -u example.com -s subdomains.txt -d directories.txt -t 20
Advanced Example
bash
./gofuzz -u https://target.com -s subs.txt -f 200,403 -o found.txt -v

All Options Flag Description Default -u Target URL (required) - -s Subdomain wordlist - -d Directory wordlist - -t Threads (concurrency) 10 -timeout Request timeout (seconds) 10 -f Filter status codes (e.g. 200,302) - -v Verbose output false Sample Output 📄 plaintext https://admin.target.com [200] (Size: 2.1KB) https://dev.target.com [302] → https://target.com/login Wordlists 📚 Recommended wordlists:

SecLists

AssetNote Wordlists

FuzzDB

Building from Source 🛠️ bash

Linux

GOOS=linux go build -o gofuzz gofuzz.go

Windows

GOOS=windows go build -o gofuzz.exe gofuzz.go

macOS

GOOS=darwin go build -o gofuzz gofuzz.go License 📜 MIT License - See LICENSE file.

🔐 Note: Always get proper authorization before scanning any website. Maintained by Lokidres.