Skip to main content

GhostPath Logo

GhostPath — A Modern Interactive Reconnaissance Toolkit for Hackers & Security Researchers 🕵️‍♂️

License Python Recon Type Modules Focus Debug Platform Status


🧠 What is GhostPath?

GhostPath is a professional-grade CLI reconnaissance toolkit designed for cybersecurity researchers, penetration testers and bug bounty hunters. It provides a modular, extensible and interactive shell to run recon operations in an intuitive and streamlined way.

💡 Powered by Python and focused on speed, clarity and results.


✨ Features

  • 🔍 Interactive hacker-style CLI shell
  • 🔗 Passive and active recon modules
  • 🧩 Modular architecture with shared utilities
  • 📁 Output saving in TXT, JSON, CSV
  • 🚀 Multithreaded path probing with live feedback
  • 🧾 Certificate transparency & subdomain discovery
  • 🌐 Wayback, URLScan and CommonCrawl support
  • 🧠 Built-in wordlist fallback & auto-detection
  • 🔧 pip - installable for users
  • 🔧 pipx-installable for global CLI use
  • ✅ --help, --version and update command support

Use pipx for a clean, isolated global installation:

# Install pipx (if not already)
sudo apt install pipx
pipx ensurepath
source ~/.bashrc  # or ~/.zshrc

# Install GhostPath
pipx install GhostPath

✅ Run from anywhere:

GhostPath

Use pip for easy and quick installation:

# install GhostPath
pip install GhostPath

If your OS does not support direct pip installation, use a virtual environment for installation

python3 -m venv venv
source venv/bin/activate

Note that if you use a virtual environment you can only use the tool inside that environment. For global use try pipx.


GhostPath Terminal Banner

🐍 Running without pipx (Direct Script Mode)

If you prefer not to use pipx or pip, you can run GhostPath directly using Python:

1. Clone the repository

git clone https://github.com/atharvbyadav/GhostPath.git
cd GhostPath

2. (Optional) Create a virtual environment

Highly recommended to isolate dependencies.

python3 -m venv venv
source venv/bin/activate

3. Install the dependencies

pip install -r requirements.txt

4. Run the GhostPath CLI shell

python3 main_cli.py

💻 Usage Overview

Once inside the shell:

ghostpath> help

You’ll see:

🧩 Available GhostPath Commands:
  timetrail      → Fetch historical URLs from archives (Wayback, URLScan, Common Crawl)
  domainscope    → Discover subdomains & DNS profiling
  pathprobe      → Actively probe directories and endpoints
  certtrack      → Get subdomains from public SSL/TLS certs
  version        → Show current installed version
  clear          → Clear the screen
  help           → Show this help menu
  exit           → Exit GhostPath CLI

🧩 Modules

🕰️ timetrail

Fetch historical URLs from:

  • Common Crawl (default)
  • Wayback Machine
  • URLScan.io
timetrail --target example.com
timetrail --target example.com --source wayback --output urls.json --format json

🌐 domainscope

Find subdomains and related DNS data.

domainscope --target example.com
domainscope --target example.com --output domains.txt

📜 certtrack

Gather subdomains from SSL/TLS certificate transparency logs.

certtrack --target example.com
certtrack --target example.com --output certs.csv --format csv

🔓 pathprobe

Actively probe common paths/endpoints on a web app using HTTP requests.

pathprobe --target https://example.com
pathprobe --target https://example.com --wordlist lists/path-wordlist.txt --output result.json --format json

If no wordlist is passed, it will fallback to: GhostPath/lists/path-wordlist.txt


🧪 Output Formats

All modules support output saving in:

  • ✅ .txt
  • ✅ .json
  • ✅ .csv

Just pass:

--output filename --format txt|json|csv

📦 Version & Self-Update

Check current version:

ghostpath> version

Reinstall / Update (via pipx):

pipx reinstall GhostPath

📜 License

BSD 3-Clause License

Copyright (c) 2025, Atharv Yadav
All rights reserved.

📄 See the LICENSE file for full license terms.


🤝 Contributing

We welcome your pull requests, feature ideas and improvements to make GhostPath even better! Here's how to contribute:

  1. Fork the repository

  2. Clone your fork locally:

    git clone https://github.com/yourusername/GhostPath.git
    cd GhostPath
    
  3. Create a new branch for your changes:

    git checkout -b feature/your-feature
    
  4. Make your changes and commit:

    git commit -m "Add: your feature/fix summary"
    git push origin feature/your-feature
    
  5. Open a Pull Request on GitHub 📬

Please follow best practices and write clear commit messages 🙌


👨‍💻 Author

┌─[ Coded with ☕ + ⚡ by Atharv Yadav ]
│
├─🛠️  Creator of GhostPath
├─🌐  https://github.com/atharvbyadav
└─📧  uuwr5t1s [at] duck [dot] com
      { _Looks suspicious? Good. It’s mine. The ducks work for me. 🦆💻_ }

"I don’t just scan — I haunt networks." 👻

🔗 GitHub: @atharvbyadav
✉️ Email Me


🕷️ GhostPath — Stealthy. Modular. Effective.


Metadata

Release files for GhostPath 2.3.7

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for GhostPath 2.3.7
File Size Uploaded
ghostpath-2.3.7.tar.gz 85.4 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for GhostPath 2.3.7
File Interpreter ABI Platform
ghostpath-2.3.7-py3-none-any.whl Python 3 none any Details

Total release size: 173.5 kB

Release files / ghostpath-2.3.7.tar.gz

Download URL ghostpath-2.3.7.tar.gz
Size 85.4 kB
Tags Source
SHA-256 checksum
How to use checksums
36c42ddb31566eacc21af3ef186229ba9ed86a1b3150af47356d7d1ae993af56
BLAKE2b-256 checksum
How to use checksums
40bf87f2fefe39d6df4f22ea5ad215b943fb5280282a53da4c4597076965e650
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.1.0 CPython/3.11.2

Release files / ghostpath-2.3.7-py3-none-any.whl

Download URL ghostpath-2.3.7-py3-none-any.whl
Size 88.1 kB
Tags Python 3
SHA-256 checksum
How to use checksums
48c1d61b5b39458c3b94d5b58437dd5bfa435b1aa02f48a5778de1a05fceb476
BLAKE2b-256 checksum
How to use checksums
5cfcaaa48a045c7da307820efd669b6f535e6bfaa31cc9187f366ba430449c2c
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.1.0 CPython/3.11.2

Release history Release notifications | RSS feed

This release

2.3.7 This release

2 release files

2.3.6

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page