Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/trickest/mkpath
Make URL path combinations using a wordlist
https://github.com/trickest/mkpath
bugbountytips directory-bruteforce enumeration fuzzing penetration-testing penetration-testing-tools pentesting pentesting-tools recon reconnaissance security webappsecurity
Last synced: 3 months ago
JSON representation
Make URL path combinations using a wordlist
- Host: GitHub
- URL: https://github.com/trickest/mkpath
- Owner: trickest
- License: mit
- Created: 2021-11-22T16:26:21.000Z (almost 3 years ago)
- Default Branch: master
- Last Pushed: 2023-09-25T15:19:57.000Z (about 1 year ago)
- Last Synced: 2024-06-20T17:49:28.088Z (5 months ago)
- Topics: bugbountytips, directory-bruteforce, enumeration, fuzzing, penetration-testing, penetration-testing-tools, pentesting, pentesting-tools, recon, reconnaissance, security, webappsecurity
- Language: Go
- Homepage: https://trickest.com
- Size: 3.07 MB
- Stars: 168
- Watchers: 3
- Forks: 27
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - trickest/mkpath - Make URL path combinations using a wordlist (Go)
README
mkpath 
Make URL path combinations using a wordlist
Read a wordlist file and generate path combinations for given domain or list of domains. Input from wordlist file is lowercased and unique words are processed. Additionally, wordlist can be filtered using regex.
When you use mkpath's `-l` parameter, it will generate all path combinations up to the specified level, including all lower levels, using words from the wordlist. For instance, with `-l 2`, it will generate `len(permutation_list)^2 + len(permutation_list)` results, which is:
- 30 combinations for a 5-word wordlist.
- 10100 combinations for a 100-word wordlist.
- 250500 combinations for a 500-word wordlist.
# Installation
## Binary
Binaries are available in the [latest release](https://github.com/trickest/mkpath/releases/latest).
## Docker
```
docker run quay.io/trickest/mkpath
```
## From source
```
go install github.com/trickest/mkpath@latest
```
# Usage
```
-d string
Input domain
-df string
Input domain file, one domain per line
-l int
URL path depth to generate (default 1) (default 1)
-lower
Convert wordlist file content to lowercase (default false)
-o string
Output file (optional)
-only-dirs
Generate directories only, files are filtered out (default false)
-only-files
Generate files only, file names are appended to given domains (default false)
-r string
Regex to filter words from wordlist file
-t int
Number of threads for every path depth (default 100)
-w string
Wordlist file
```
### Example
##### wordlist.txt
```
dev
prod/
admin.py
app/login.html
```
```shell script
$ mkpath -d example.com -l 2 -w wordlist.txt
example.com/dev
example.com/prod
example.com/dev/dev
example.com/prod/dev
example.com/dev/prod
example.com/prod/prod
example.com/dev/admin.py
example.com/dev/app/login.html
example.com/prod/admin.py
example.com/prod/app/login.html
example.com/dev/dev/admin.py
example.com/dev/dev/app/login.html
example.com/prod/dev/admin.py
example.com/prod/dev/app/login.html
example.com/dev/prod/admin.py
example.com/dev/prod/app/login.html
example.com/prod/prod/admin.py
example.com/prod/prod/app/login.html
```
# Report Bugs / Feedback
We look forward to any feedback you want to share with us or if you're stuck with a problem you can contact us at [[email protected]](mailto:[email protected]). You can also create an [Issue](https://github.com/trickest/mkpath/issues/new) or pull request on the Github repository.
# Where does this fit in your methodology?
Mkpath is an integral part of many workflows in the Trickest store. Sign up on [trickest.com](https://trickest.com) to get access to these workflows or build your own from scratch!
[
](https://trickest.io/auth/register)