gobuster Tool that scans a web server to find unknown / unlisted directories SecLists Contains common word lists and SQL Injection admin'# everything after the # gets ignored