leaky-paths
A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.
- fuzzing
- recon
- bugbounty
- pentest
- security
- security-tools
- nuclei
- dirsearch
- ffuf
- dirbuster
- appsec
- penetration-testing
- redteam
- redteaming
- wordlist
- Stars
- 1,197
- Forks
- 171
- + today
- +1
- Created
- 5y
Ranking data as of October 12, 2026 (UTC).
Star History
Today, hour by hour
01
Overview
A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins. It ranks #823 on GitTiger, gaining +1 star on October 12, 2026 (UTC).
It was created 5y ago.
Installation
git clone https://github.com/ayoubfathi/leaky-paths.git
cd leaky-paths
# see README for setup