Resources
leaky-paths
ayoubfathi/leaky-paths
Leaky-paths is a curated wordlist of sensitive and high-value web paths and API endpoints, designed to be fed into content-discovery tools for quick wins.
Topics
Related projects
reconftw8.4kAn automated reconnaissance tool for security researchers that chains subdomain enumeration, vulnerability scanning, OSINT, port scanning, and fuzzing into one workflow.
git-hound1.5kGitHound is a command-line GitHub reconnaissance tool that combines dorks, regex matching and entropy checks to hunt for exposed API keys and credentials across public repositories, Gists and commit history.
nuclei-wordfence-cve1.3kA large collection of Nuclei templates for WordPress security scanning, generated from Wordfence threat intelligence and filterable by severity, tag, and CVE.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
osmedeus6.6kA security-focused declarative orchestration engine that defines reconnaissance and scanning pipelines in YAML. It supports distributed workers, scheduling, cloud provisioning, and optional agentic LLM steps for penetration testing.
gogo2.2kgogo is a high-performance automated scanning engine for red teams, offering port scanning, fingerprinting, Nuclei POC checks and flexible output formats from a single Go binary.