Tool · Web Recon

SnailPath

Async directory & route discovery — HTTP/2, soft-404 suppression, JS/sourcemap mining.

LanguagePython
CategoryWeb Recon
LicenseOpen source
CostFree

Overview

Async directory & route discovery — HTTP/2, soft-404 suppression, JS/sourcemap mining. Built by Kai Aizen as part of the SnailSploit offensive toolkit.

Get it

Source, install instructions, issue tracker, and changelog live on GitHub:

How it fits

This tool is part of the research and services programs — same methodology that produced 23 published CVEs and 5 Linux kernel patches. For deeper context on the offensive techniques it implements, see the wiki and the frameworks.

more from the toolkitall tools →
Author
Kai Aizen
Independent offensive security researcher. 23 published CVEs, 5 Linux kernel mainline patches, creator of AATMF / P.R.O.M.P.T / SEF, author of Adversarial Minds.