gobuster dir

gobuster dir -u <url> -w <wordlist>

Brute-force tool to discover hidden directories and files on web servers.

When you need to find unlinked paths, admin directories, backup files, or resources that are not indexed. Gobuster is fast and supports multiple extensions. It is the standard for content discovery in web pentesting.

If the site has a WAF that blocks brute force by IP. Also if the server is slow and brute force could cause DoS. Prefer dirsearch if you need more exclusion options.