Skip to main content

GhostPath - Interactive Recon Shell for Ethical Hackers

Project description

GhostPath Logo

GhostPath โ€” A Modern Interactive Reconnaissance Toolkit for Hackers & Security Researchers ๐Ÿ•ต๏ธโ€โ™‚๏ธ

License Python Recon Type Modules Focus Debug Platform Status


๐Ÿง  What is GhostPath?

GhostPath is a professional-grade CLI reconnaissance toolkit designed for cybersecurity researchers, penetration testers and bug bounty hunters. It provides a modular, extensible and interactive shell to run recon operations in an intuitive and streamlined way.

๐Ÿ’ก Powered by Python and focused on speed, clarity and results.


โœจ Features

  • ๐Ÿ” Interactive hacker-style CLI shell
  • ๐Ÿ”— Passive and active recon modules
  • ๐Ÿงฉ Modular architecture with shared utilities
  • ๐Ÿ“ Output saving in TXT, JSON, CSV
  • ๐Ÿš€ Multithreaded path probing with live feedback
  • ๐Ÿงพ Certificate transparency & subdomain discovery
  • ๐ŸŒ Wayback, URLScan and CommonCrawl support
  • ๐Ÿง  Built-in wordlist fallback & auto-detection
  • ๐Ÿ”ง pip - installable for users
  • ๐Ÿ”ง pipx-installable for global CLI use
  • โœ… --help, --version and update command support

๐Ÿš€ Installation (Recommended: pipx)

Use pipx for a clean, isolated global installation:

# Install pipx (if not already)
sudo apt install pipx
pipx ensurepath
source ~/.bashrc  # or ~/.zshrc

# Install GhostPath
pipx install GhostPath

โœ… Run from anywhere:

GhostPath

Use pip for easy and quick installation:

# install GhostPath
pip install GhostPath

If your OS does not support direct pip installation, use a virtual environment for installation

python3 -m venv venv
source venv/bin/activate

Note that if you use a virtual environment you can only use the tool inside that environment. For global use try pipx.


GhostPath Terminal Banner

๐Ÿ Running without pipx (Direct Script Mode)

If you prefer not to use pipx or pip, you can run GhostPath directly using Python:

1. Clone the repository

git clone https://github.com/atharvbyadav/GhostPath.git
cd GhostPath

2. (Optional) Create a virtual environment

Highly recommended to isolate dependencies.

python3 -m venv venv
source venv/bin/activate

3. Install the dependencies

pip install -r requirements.txt

4. Run the GhostPath CLI shell

python3 main_cli.py

๐Ÿ’ป Usage Overview

Once inside the shell:

ghostpath> help

Youโ€™ll see:

๐Ÿงฉ Available GhostPath Commands:
  timetrail      โ†’ Fetch historical URLs from archives (Wayback, URLScan, Common Crawl)
  domainscope    โ†’ Discover subdomains & DNS profiling
  pathprobe      โ†’ Actively probe directories and endpoints
  certtrack      โ†’ Get subdomains from public SSL/TLS certs
  version        โ†’ Show current installed version
  clear          โ†’ Clear the screen
  help           โ†’ Show this help menu
  exit           โ†’ Exit GhostPath CLI

๐Ÿงฉ Modules

๐Ÿ•ฐ๏ธ timetrail

Fetch historical URLs from:

  • Common Crawl (default)
  • Wayback Machine
  • URLScan.io
timetrail --target example.com
timetrail --target example.com --source wayback --output urls.json --format json

๐ŸŒ domainscope

Find subdomains and related DNS data.

domainscope --target example.com
domainscope --target example.com --output domains.txt

๐Ÿ“œ certtrack

Gather subdomains from SSL/TLS certificate transparency logs.

certtrack --target example.com
certtrack --target example.com --output certs.csv --format csv

๐Ÿ”“ pathprobe

Actively probe common paths/endpoints on a web app using HTTP requests.

pathprobe --target https://example.com
pathprobe --target https://example.com --wordlist lists/path-wordlist.txt --output result.json --format json

If no wordlist is passed, it will fallback to: GhostPath/lists/path-wordlist.txt


๐Ÿงช Output Formats

All modules support output saving in:

  • โœ… .txt
  • โœ… .json
  • โœ… .csv

Just pass:

--output filename --format txt|json|csv

๐Ÿ“ฆ Version & Self-Update

Check current version:

ghostpath> version

Reinstall / Update (via pipx):

pipx reinstall GhostPath

๐Ÿ“œ License

BSD 3-Clause License

Copyright (c) 2025, Atharv Yadav
All rights reserved.

๐Ÿ“„ See the LICENSE file for full license terms.


๐Ÿค Contributing

We welcome your pull requests, feature ideas and improvements to make GhostPath even better! Here's how to contribute:

  1. Fork the repository

  2. Clone your fork locally:

    git clone https://github.com/yourusername/GhostPath.git
    cd GhostPath
    
  3. Create a new branch for your changes:

    git checkout -b feature/your-feature
    
  4. Make your changes and commit:

    git commit -m "Add: your feature/fix summary"
    git push origin feature/your-feature
    
  5. Open a Pull Request on GitHub ๐Ÿ“ฌ

Please follow best practices and write clear commit messages ๐Ÿ™Œ


๐Ÿ‘จโ€๐Ÿ’ป Author

โ”Œโ”€[ Coded with โ˜• + โšก by Atharv Yadav ]
โ”‚
โ”œโ”€๐Ÿ› ๏ธ  Creator of GhostPath
โ”œโ”€๐ŸŒ  https://github.com/atharvbyadav
โ””โ”€๐Ÿ“ง  uuwr5t1s [at] duck [dot] com
      { _Looks suspicious? Good. Itโ€™s mine. The ducks work for me. ๐Ÿฆ†๐Ÿ’ป_ }

"I donโ€™t just scan โ€” I haunt networks." ๐Ÿ‘ป

๐Ÿ”— GitHub: @atharvbyadav
โœ‰๏ธ Email Me


๐Ÿ•ท๏ธ GhostPath โ€” Stealthy. Modular. Effective.


Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

ghostpath-2.3.7.tar.gz (85.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

ghostpath-2.3.7-py3-none-any.whl (88.1 kB view details)

Uploaded Python 3

File details

Details for the file ghostpath-2.3.7.tar.gz.

File metadata

  • Download URL: ghostpath-2.3.7.tar.gz
  • Upload date:
  • Size: 85.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.1.0 CPython/3.11.2

File hashes

Hashes for ghostpath-2.3.7.tar.gz
Algorithm Hash digest
SHA256 36c42ddb31566eacc21af3ef186229ba9ed86a1b3150af47356d7d1ae993af56
MD5 7a482b9e52932865054dc679ed52b574
BLAKE2b-256 40bf87f2fefe39d6df4f22ea5ad215b943fb5280282a53da4c4597076965e650

See more details on using hashes here.

File details

Details for the file ghostpath-2.3.7-py3-none-any.whl.

File metadata

  • Download URL: ghostpath-2.3.7-py3-none-any.whl
  • Upload date:
  • Size: 88.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.1.0 CPython/3.11.2

File hashes

Hashes for ghostpath-2.3.7-py3-none-any.whl
Algorithm Hash digest
SHA256 48c1d61b5b39458c3b94d5b58437dd5bfa435b1aa02f48a5778de1a05fceb476
MD5 0c428812a78ccb3a54f9073528b50956
BLAKE2b-256 5cfcaaa48a045c7da307820efd669b6f535e6bfaa31cc9187f366ba430449c2c

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page