feat(tasks): add gobuster integration with multi-mode support

[Copilot]

Adds gobuster task supporting multiple operational modes (dns, dir, vhost, fuzz, s3, gcs, tftp) with dynamic command construction based on mode selection.

Implementation

• Task module (secator/tasks/gobuster.py):

  • Uses before_init hook to construct mode-specific commands (gobuster dns, gobuster dir, etc.)
  • Sets input flags dynamically per mode (--domain for DNS, --url for DIR/VHOST)
  • Parses line-based output (no JSON support in gobuster) for DNS and directory enumeration
  • Maps to appropriate output types: Subdomain for DNS mode, Url for DIR/VHOST modes

• Test infrastructure:

  • Fixtures for DNS and directory output parsing
  • Integration test configuration with wordlist setup
  • Expected output definitions for test validation

• Documentation: Added to README task list with dual categorization (url/fuzz, dns/recon)

Usage

# DNS subdomain enumeration (default mode)
secator x gobuster example.com -w dns_wordlist.txt

# Directory brute-forcing
secator x gobuster http://example.com --mode dir -w http_wordlist.txt --threads 50

# Virtual host discovery
secator x gobuster http://192.168.1.1 --mode vhost -w vhost_wordlist.txt

Technical Notes

Mode is marked as internal option to prevent duplicate command construction (gobuster dns --mode dns). The before_init hook ensures mode-specific configuration occurs before command assembly, following the pattern used in dnsx for dynamic input flag selection.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• 4b5f274d-f9a0-44a6-9698-dd90b56267f6.wikipedia.org
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --quiet --no-progress (dns block)
• 65dc8b05-7558-47c8-b968-e531ecac049f.wikipedia.org
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --no-progress -pack /home/REDACTED/go/pkg/mod/github.com/!o!j/gobuster/v3@v3.8.2/cli/gcs/gcs.go 0.1-go1.25.5.lin-I (dns block)
• ftp.wikipedia.org
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --quiet --no-progress (dns block)
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --no-progress -pack /home/REDACTED/go/pkg/mod/github.com/!o!j/gobuster/v3@v3.8.2/cli/gcs/gcs.go 0.1-go1.25.5.lin-I (dns block)
• httpbin.org
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dir --url REDACTED -w /tmp/test_wordlist.txt -t 5 --no-progress -q (dns block)
• mail.wikipedia.org
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --quiet --no-progress (dns block)
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --no-progress -pack /home/REDACTED/go/pkg/mod/github.com/!o!j/gobuster/v3@v3.8.2/cli/gcs/gcs.go 0.1-go1.25.5.lin-I (dns block)
• publicsuffix.org
  • Triggering command: /usr/bin/python python (dns block)
• test.wikipedia.org
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --quiet --no-progress (dns block)
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --no-progress -pack /home/REDACTED/go/pkg/mod/github.com/!o!j/gobuster/v3@v3.8.2/cli/gcs/gcs.go 0.1-go1.25.5.lin-I (dns block)
• wikipedia.org
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --no-progress -pack /home/REDACTED/go/pkg/mod/github.com/!o!j/gobuster/v3@v3.8.2/cli/gcs/gcs.go 0.1-go1.25.5.lin-I (dns block)
• www.wikipedia.org
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --quiet --no-progress (dns block)
  • Triggering command: /home/REDACTED/go/bin/gobuster gobuster dns --domain wikipedia.org -w /tmp/test_wordlist.txt -t 5 --no-progress -pack /home/REDACTED/go/pkg/mod/github.com/!o!j/gobuster/v3@v3.8.2/cli/gcs/gcs.go 0.1-go1.25.5.lin-I (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>feat(tasks): add gobuster integration</issue_title>
<issue_description>Integrate gobuster in secator/tasks/gobuster.py.
Add both dns mode and other modes using a --mode internal flag to pick and an on_cmd hook to change the command with the mode picked.

@staticmetho
def on_cmd(self):
mode = self.get_opt_value('mode', 'dns')
self.cmd = cmd.replace("gobuster", f"gobuster {mode}")

Add a test fixture in tests/integration/fixtures/gobuster.json and an input in tests/integration/inputs.py.
</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes feat(tasks): add gobuster integration #858

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Note

Free review on us!

CodeRabbit is offering free reviews until Wed Dec 17 2025 to showcase some of the refinements we've made.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}