Working with Pathprober Tool on Kali Linux OS

Example 1: Multiple targets, multiple paths, and multiple words

python3 pathprober.py -T targets.txt -P path.txt -w “APP_NAME” -w2 “DB_PASSWORD”

The target list containing URLs is been displayed in the below screenshot.

The path.txt file is been displayed in the below screenshot.

The scanning process is been started.

Results for https://w3wiki.org are shown in the below screenshot.

Results for https://facebook.com are shown in the below screenshot.

Results for https://google.com are shown in the below screenshot.

Example 2: Single target, multiple paths, and a single word

python3 pathprober.py -t https://w3wiki.org/ -P path.txt -w “APP_NAME”

Here, we have given only a single target as w3wiki.org.

We have got the scan results.

Example 3: Multiple targets, single path, multiple words, and save the output to file

python3 pathprober.py -T targets.txt -p /.env -w “APP_NAME” -w2 “TWILIO” -o output.txt

Here, we will be saving the results in the output.txt file for further usage.

Results are been displayed and saved in the output.txt file.

Pathprober is an automated tool developed in the Python language which aims to probe and discover HTTP and HTTPS path names by using the technique of brute-forcing and also filters the specific word or can filter more than 2 words. Brute-forcing website directories or HTTP path-name and authenticating using HTTP response codes are not important anymore. This tool will help us to perform a penetration test because it could verify the directories using specific-word or 2 words at once and the results will more specific. Pathprober tool is available on GitHub, it’s free and open-source. Pathprober can find the Web Login panels, and Credentials in some paths and also can find the Third-party tokens.

Note: Before installing the tool make sure you have Python installed on your system, as Pathprober is a python-based tool. Click to get the installation process of Python on Linux – Python Installation Steps on Linux