snallygaster

snallygaster is a tool that looks for files accessible on web servers that shouldn’t be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially containing passwords or database dumps. In addition, it contains a few checks for other security vulnerabilities.

Name:snallygaster

Category:Misconfiguration

Publisher:trickest

Created:6/23/2021

Container:quay.io/trickest/snallygaster:0.0.11

Output Type:

License:Unknown

Source:View Source

Parameters

info · boolean

--infoEnable all info tests (no bugs/security vulnerabilities).

path · string

--pathBase path on server (scans root dir by default).

debug · boolean

--debugShow detailed debugging info

hosts · string · required

Hostname to scan.

noisy · boolean

--noisyShow noisy messages that indicate boring bugs, but no security issue.

nowww · boolean

--nowwwSkip scanning www.[host].

tests · string

--testsComma-separated tests to run.

nohttp · boolean

--nohttpDon't scan http.

nohttps · boolean

--nohttpsDon't scan https.

useragent · string

--useragentUser agent to send in request header.