https://github.com/atharvbyadav/ghostpath
👻 GhostPath — A powerful modular reconnaissance toolkit built for hackers, OSINT professionals & bug bounty hunters — passive + active recon in a sleek CLI shell. Discover subdomains, probe paths, mine archives and hunt certificates — all from one interactive terminal interface.
https://github.com/atharvbyadav/ghostpath
bug-bounty cli-tool commoncrawl cybersecurity ethical-hacking ghostpath hacking historical-data information-gathering infosec osint passive-recon reconnaissance web-recon
Last synced: 2 months ago
JSON representation
👻 GhostPath — A powerful modular reconnaissance toolkit built for hackers, OSINT professionals & bug bounty hunters — passive + active recon in a sleek CLI shell. Discover subdomains, probe paths, mine archives and hunt certificates — all from one interactive terminal interface.
- Host: GitHub
- URL: https://github.com/atharvbyadav/ghostpath
- Owner: atharvbyadav
- License: bsd-3-clause
- Created: 2025-04-08T08:04:07.000Z (6 months ago)
- Default Branch: main
- Last Pushed: 2025-07-09T13:47:20.000Z (3 months ago)
- Last Synced: 2025-07-28T15:55:20.664Z (2 months ago)
- Topics: bug-bounty, cli-tool, commoncrawl, cybersecurity, ethical-hacking, ghostpath, hacking, historical-data, information-gathering, infosec, osint, passive-recon, reconnaissance, web-recon
- Language: Python
- Homepage: https://atharvbyadav.github.io/GhostPath/
- Size: 4.9 MB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
GhostPath — A Modern Interactive Reconnaissance Toolkit for Hackers & Security Researchers 🕵️♂️
---
## 🧠 What is GhostPath?
**GhostPath** is a professional-grade CLI reconnaissance toolkit designed for cybersecurity researchers, penetration testers and bug bounty hunters. It provides a modular, extensible and interactive shell to run recon operations in an intuitive and streamlined way.
💡 Powered by Python and focused on speed, clarity and results.
---
## ✨ Features
- 🔍 Interactive hacker-style CLI shell
- 🔗 Passive and active recon modules
- 🧩 Modular architecture with shared utilities
- 📁 Output saving in TXT, JSON, CSV
- 🚀 Multithreaded path probing with live feedback
- 🧾 Certificate transparency & subdomain discovery
- 🌐 Wayback, URLScan and CommonCrawl support
- 🧠 Built-in wordlist fallback & auto-detection
- 🔧 `pipx`-installable for global CLI use
- ✅ `--help`, `--version` and `update` command support
---
## 🚀 Installation (Recommended: pipx)
Use **pipx** for a clean, isolated global installation:
```bash
# Install pipx (if not already)
sudo apt install pipx
pipx ensurepath
source ~/.bashrc # or ~/.zshrc
# Clone and install GhostPath
git clone https://github.com/atharvbyadav/GhostPath.git
cd GhostPath
pipx install .
````
### ✅ Run from anywhere:
```bash
GhostPath
```
---
---
## 🐍 Running without pipx (Direct Script Mode)
If you prefer not to use pipx, you can run GhostPath directly using Python:
### 1. Clone the repository
```bash
git clone https://github.com/atharvbyadav/GhostPath.git
cd GhostPath
```
### 2. (Optional) Create a virtual environment
> Highly recommended to isolate dependencies.
```bash
python3 -m venv venv
source venv/bin/activate
```
### 3. Install the dependencies
```bash
pip install -r requirements.txt
```
### 4. Run the GhostPath CLI shell
```bash
python3 main_cli.py
```
---
## 💻 Usage Overview
Once inside the shell:
```bash
ghostpath> help
```
You’ll see:
```
🧩 Available GhostPath Commands:
timetrail → Fetch historical URLs from archives (Wayback, URLScan, Common Crawl)
domainscope → Discover subdomains & DNS profiling
pathprobe → Actively probe directories and endpoints
certtrack → Get subdomains from public SSL/TLS certs
version → Show current installed version
clear → Clear the screen
help → Show this help menu
exit → Exit GhostPath CLI
```
---
## 🧩 Modules
### 🕰️ `timetrail`
Fetch historical URLs from:
* Common Crawl *(default)*
* Wayback Machine
* URLScan.io
```bash
timetrail --target example.com
timetrail --target example.com --source wayback --output urls.json --format json
```
---
### 🌐 `domainscope`
Find subdomains and related DNS data.
```bash
domainscope --target example.com
domainscope --target example.com --output domains.txt
```
---
### 📜 `certtrack`
Gather subdomains from SSL/TLS certificate transparency logs.
```bash
certtrack --target example.com
certtrack --target example.com --output certs.csv --format csv
```
---
### 🔓 `pathprobe`
Actively probe common paths/endpoints on a web app using HTTP requests.
```bash
pathprobe --target https://example.com
pathprobe --target https://example.com --wordlist lists/path-wordlist.txt --output result.json --format json
```
> If no wordlist is passed, it will fallback to:
> `GhostPath/lists/path-wordlist.txt`
---
## 🧪 Output Formats
All modules support output saving in:
* ✅ `.txt`
* ✅ `.json`
* ✅ `.csv`
Just pass:
```bash
--output filename --format txt|json|csv
```
---
## 📦 Version & Self-Update
### Check current version:
```bash
ghostpath> version
```
---
### Reinstall / Update (via pipx):
```bash
pipx reinstall GhostPath
```
---
## 📜 License
```text
BSD 3-Clause License
Copyright (c) 2025, Atharv Yadav
All rights reserved.
```
> 📄 See the [LICENSE](LICENSE) file for full license terms.
---
## 🤝 Contributing
We welcome your pull requests, feature ideas and improvements to make **GhostPath** even better! Here's how to contribute:
1. **Fork** the repository
2. **Clone** your fork locally:
```bash
git clone https://github.com/yourusername/GhostPath.git
cd GhostPath
```
3. **Create a new branch** for your changes:
```bash
git checkout -b feature/your-feature
```
4. Make your changes and **commit**:
```bash
git commit -m "Add: your feature/fix summary"
git push origin feature/your-feature
```
5. Open a **Pull Request** on GitHub 📬
> Please follow best practices and write clear commit messages 🙌
---
## 👨💻 Author
```bash
┌─[ Coded with ☕ + ⚡ by Atharv Yadav ]
│
├─🛠️ Creator of GhostPath
├─🌐 https://github.com/atharvbyadav
└─📧 uuwr5t1s [at] duck [dot] com
{ _Looks suspicious? Good. It’s mine. The ducks work for me. 🦆💻_ }
```
> *"I don’t just scan — I haunt networks."* 👻
🔗 GitHub: @atharvbyadav
✉️ Email Me
---
🕷️ GhostPath — Stealthy. Modular. Effective.
---