hannob/snallygaster

Health v2 · maintenance only

Adoption not part of the score

2110 stars · 231 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Snallygaster is a Python command-line scanner that probes HTTP servers for files that should not be publicly accessible, such as exposed git repositories, backup files, and database dumps. It bundles a set of checks for common web server misconfigurations and related security vulnerabilities.

Use cases

• find exposed .git directories on my web server
• scan a website for leaked backup files containing passwords
• check if database dumps are publicly downloadable on my server
• audit a web server for misconfigured sensitive files
• detect file leaks on HTTP servers before deployment
• test my site for publicly accessible secret files

When to choose

• you want a lightweight, dependency-minimal Python script to find exposed files on a web server
• you need a quick black-box check for common web misconfigurations like open git repos or leftover backups
• you prefer a single-purpose scanner over a full vulnerability suite
• you want a tool packaged in major Linux/BSD distributions and PyPI

When to avoid

• you need a comprehensive web vulnerability scanner with crawling, fuzzing, or exploit modules
• you require authenticated scanning or deep application-layer testing
• you want continuous monitoring or CI integration rather than on-demand scans
• you need scanning of non-HTTP services or protocols

Facets

cli-tool · maturity active

security vulnerability-scanning http-client cli security web-development penetration-testing developer-tools python cli cross-platform file-leak-detection web-server-audit secret-file-scanner misconfiguration-scanner http-security-scanner linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="hannob/snallygaster")