Tool and Usage
- CC0 1.0 Universal
- Programming language
- Hanno Böck
- Latest release
- Latest release date
Why this tool?
This tool helps with detecting those files that you typically do not want to have exposed on your webservers. This includes files related to software repositories (e.g. .git), web shells,
Types of files it can detect:
- Apache server status
- Backup files
- Configuration files
- Cryptocurrency wallets
- Private SSH keys
- Web shells
Usage and audience
snallygaster is commonly used for data leak detection, discovery of sensitive information, or information leak detection. Target users for this tool are developers, pentesters, security professionals, and system administrators.
- Command line interface
Tool review and remarks
The review and analysis of this project resulted in the following remarks for this security tool:
- + More than 1000 GitHub stars
- + The source code of this software is available
- - No releases on GitHub available
Supported operating systems
Snallygaster is known to work on Linux.
Several dependencies are required to use snallygaster.
Similar tools to snallygaster:
AIL is a framework to analyze potential information leaks from unstructured data sources. For example, this may include data from Pastebin and similar services.
S3Scanner helps with the discovery of S3 storage buckets on the platform of Amazon's AWS. Learn how the tool works with this review.
SMBMap is a security tool that allows users enumerating Samba shares and can be used during security assessments. Read the review and how it works.
This tool page was updated at . Found an improvement? Help the community by submitting an update.