Blazingly fast directory/DNS/vhost buster written in Rust 🦀
A high-performance alternative to gobuster, leveraging Rust's async runtime for maximum speed.
- Blazingly Fast - Async I/O with tokio, connection pooling, zero-copy optimizations
- 7 Modes - dir, dns, vhost, fuzz, s3, gcs, tftp
- TLS Support - Full TLS/SSL support via rustls (no OpenSSL required)
- Proxy Support - HTTP and SOCKS5 proxy support
- Beautiful Output - Colored output with progress bar
- File Output - Text and JSON output formats
git clone https://github.com/rohit/robuster
cd robuster
cargo build --release
./target/release/robuster --help# Basic usage
robuster dir -u https://example.com -w wordlist.txt
# With extensions
robuster dir -u https://example.com -w wordlist.txt -x php,html,js
# Show response length, follow redirects
robuster dir -u https://example.com -w wordlist.txt -l -r
# With custom headers and cookies
robuster dir -u https://example.com -w wordlist.txt -H "Authorization: Bearer token" -c "session=abc"
# High thread count for speed
robuster dir -u https://example.com -w wordlist.txt -t 50# Basic usage
robuster dns -d example.com -w subdomains.txt
# Show IPs and CNAMEs
robuster dns -d example.com -w subdomains.txt -i -c
# Custom DNS resolver
robuster dns -d example.com -w subdomains.txt -r 8.8.8.8# Basic usage
robuster vhost -u https://10.10.10.10 -w vhosts.txt
# Append domain to wordlist entries
robuster vhost -u https://10.10.10.10 -w vhosts.txt --append-domain --domain example.com# URL parameter fuzzing
robuster fuzz -u "https://example.com?id=FUZZ" -w payloads.txt
# POST data fuzzing
robuster fuzz -u https://example.com/login -w passwords.txt -d "user=admin&pass=FUZZ" --method POST
# Header fuzzing
robuster fuzz -u https://example.com -w tokens.txt -H "X-API-Key: FUZZ"robuster s3 -w bucket-names.txtrobuster gcs -w bucket-names.txtrobuster tftp -s 10.10.10.10 -w filenames.txt| Option | Description |
|---|---|
-w, --wordlist |
Path to wordlist file |
-t, --threads |
Concurrent threads (default: 10) |
-o, --output |
Output file (supports .json) |
-q, --quiet |
Suppress banner |
-v, --verbose |
Show errors |
-z, --no-progress |
Disable progress bar |
--delay |
Delay between requests (ms) |
robuster is designed to exceed gobuster's performance through:
- Tokio async runtime - Non-blocking concurrent I/O
- Connection pooling - Reuses HTTP connections
- Streaming wordlist - Memory efficient for large files
- Release optimizations - LTO, codegen-units=1, stripped binary
MIT