[redteam.to]
Tools Submit
← All tools

leaky-paths

https://github.com/ayoubfathi/leaky-paths
Free
Categories
Exploitation Password Attacks Reconnaissance Scanning & Enumeration
Description

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

Keywords
appsec axiom bugbounty dirbuster dirsearch ffuf fuzzing hacktoberfest meg nuclei penetration-testing pentest recon redteam redteaming security security-tools subfinder wayback-machine wordlist
See also
100-redteam-projects
Free

Projects for security students…

Flipper Zero
Open Source

Portable multi-tool for hardware hacking. Supports Sub-GHz radio, 125kHz RFID, NFC, Infrared, iButto…

whatsapp-osint
Open Source

WhatsApp spy - logs online/offline events from ANYONE in the world…

MSSprinkler
Open Source

MSSprinkler is a password spraying utility for organizations to test their Microsoft Online accounts…

WADComs.github.io
Open Source

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and the…

Impacket
Open Source Kali

Collection of Python classes for working with network protocols. Includes tools for SMB, MSRPC, LDAP…

© 2026 redteam.to — The Pentest Tool Directory

For authorized security testing and educational use only.