{"repo":"hannob/snallygaster","free":true,"listed":false,"github":"https://github.com/hannob/snallygaster","clone":"git clone https://github.com/hannob/snallygaster.git","description":"Tool to scan for secret files on HTTP servers","language":"Python","stars":2109,"topics":["security","websecurity"],"license":"0BSD","category":"security-tools","readme_excerpt":"snallygaster ============ Finds file leaks and other security problems on HTTP servers. what? ----- snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially containing passwords or database dumps. In addition, it contains a few checks for other security vulnerabilities. As an introduction to these kinds of issues you may want to watch this talk: Attacking with HTTP Requests See the TESTS.md file for an overview of all tests and links to further information about the issues. install ------- snallygaster is available via pypi: It's a simple python 3 script, so you can just download the file \"snallygaster\" and execute it. Dependencies are urllib3, lxml and dnspython. In Debian- or Ubuntu-based distributions you can install them via: distribution packages --------------------- Some Linux and BSD systems have snallygaster packaged: Gentoo NetBSD Arch Linux (git version) openSUSE More at Repology. faq --- Q: I want to contribute / send a patch / a pull request! A: That's great, but please read the CONTRIBUTIONS.md file. Q: What's that name? A: Snallygaster is the name of a dragon that according to some legends was seen in Maryland and other parts of the US. There's no particular backstory why this tool got named this way, other than that I was looking for a fun and interesting name. I thought a name of some mythical creature wou","default_branch":null,"files":null,"tree":[],"storefront":"/r/hannob","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/hannob/snallygaster/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}