Gobuster Commands — Upd |work|

Unlike directory scanning, vhost scanning returns many "200 OK" statuses even for non-existent hosts. You must filter by size ( -b exclude by size).

gobuster dir -u https://target.com -w /usr/share/wordlists/seclists/Discovery/Web-Content/raft-large-directories.txt -t 100 -x php,asp,aspx,jsp,html,txt -s 200,204,301,302 -k -r -o dir_results.txt gobuster commands upd

The -j flag produces line-delimited JSON, ready for jq parsing. Unlike directory scanning, vhost scanning returns many "200