Sealbook / Open source / Security & hacking

ayoubfathi/leaky-paths

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

appsecaxiombugbountydirbusterdirsearchffuffuzzinghacktoberfestmegnuclei

GitHub ↗

License & maintenance

No license stated: by default nobody may reuse the code. Ask the authors before using it in a product.

Last code push 6 months ago.

Similar projects

	Repository	Stars	Language	License	Activity
1	maurosoria/dirsearchWeb path scanner	★ 15k	Python	—	Active
2	projectdiscovery/nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.	★ 13.1k	JavaScript	MIT	Active
3	OWASP/wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.	★ 10.1k	CSS	CC-BY-SA-4.0	Active
4	zaproxy/zaproxyThe ZAP by Checkmarx Core project	★ 16k	Java	Apache-2.0	Active
5	projectdiscovery/subfinderFast passive subdomain enumeration tool.	★ 14.6k	Go	MIT	Active
6	juice-shop/juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web application	★ 14.1k	TypeScript	MIT	Active
7	projectdiscovery/httpxhttpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.	★ 10.5k	Go	MIT	Active
8	six2dez/reconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding o	★ 8.2k	Shell	MIT	Active