SourceLeakHacker

pip install -r requirements.txt

usage: SourceLeakHacker.py [options]

optional arguments:
  -h, --help            显示此帮助信息并退出
  --url URL             要扫描的URL，例如：'http://127.0.0.1/'
  --urls URLS           包含要扫描的URL的文件，每行一个URL。
  --scale {full,tiny}   内置字典规模
  --output OUTPUT       输出文件夹，默认：result/YYYY-MM-DD hh:mm:ss
  --threads THREADS, -t THREADS
                        线程数，默认：4
  --timeout TIMEOUT     HTTP请求超时时间
  --level {CRITICAL,ERROR,WARNING,INFO,DEBUG}, -v {CRITICAL,ERROR,WARNING,INFO,DEBUG}
                        日志级别
  --version, -V         显示程序版本号并退出

$ python SourceLeakHacker.py --url=http://baidu.com --threads=4 --timeout=8
[302]   0       3.035766        text/html; charset=iso-8859-1   http://baidu.com/_/_index.php
[302]   0       3.038096        text/html; charset=iso-8859-1   http://baidu.com/_/__index.php.bak
...
[302]   0       0.063973        text/html; charset=iso-8859-1   http://baidu.com/_adm/_index.php
[302]   0       0.081672        text/html; charset=iso-8859-1   http://baidu.com/_adm/_index.php.bak
Result save in file: result/2020-02-27 07:07:47.csv

$ cat url.txt                 
http://baidu.com/
http://google.com/

$ python SourceLeakHacker.py --urls=url.txt --threads=4 --timeout=8
[302]   0       2.363600        text/html; charset=iso-8859-1   http://baidu.com/_/__index.php.bak
[302]   0       0.098417        text/html; charset=iso-8859-1   http://baidu.com/_adm/__index.php.bak
...
[302]   0       0.060524        text/html; charset=iso-8859-1   http://google.com/_adm/_index.php.bak
[302]   0       0.075042        text/html; charset=iso-8859-1   http://baidu.com/_adm/_index.php.back
Result save in file: result/2020-02-27 07:08:54.csv