[redteam.to]
Tools Submit
← All tools

leaky-paths

https://github.com/ayoubfathi/leaky-paths
Free
Categories
Exploitation Password Attacks Reconnaissance Scanning & Enumeration
Description

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

Keywords
appsec axiom bugbounty dirbuster dirsearch ffuf fuzzing hacktoberfest meg nuclei penetration-testing pentest recon redteam redteaming security security-tools subfinder wayback-machine wordlist
See also
Impacket-secretsdump
Open Source Kali

Dumps secrets remotely using a variety of techniques including DCSync (without running code on DC), …

awesome-osint-arsenal
Open Source Kali

🔍 Curated OSINT & recon toolkit for Kali Linux — 100+ tools, one-command installer, covering SOCMINT…

100-redteam-projects
Free

Projects for security students…

Netexec (nxc)
Open Source Kali

The maintained fork and successor to CrackMapExec. Network service exploitation Swiss army knife for…

ffuf
Open Source Kali

Fast web fuzzer written in Go. Supports directory discovery, parameter fuzzing, virtual host discove…

Flipper Zero
Open Source

Portable multi-tool for hardware hacking. Supports Sub-GHz radio, 125kHz RFID, NFC, Infrared, iButto…

© 2026 redteam.to — The Pentest Tool Directory

For authorized security testing and educational use only.