An advanced Python-based website path scanner with a modern web interface that discovers accessible paths, endpoints, and potential security issues.

• Modern, draggable web interface
• Real-time scanning results
• Path limit controls for each wordlist
• Live scanning progress counters
• Copy-to-clipboard functionality
• Multiple HTTP methods (GET, POST, HEAD, OPTIONS)
• Common file extension checking
• HTML parsing to discover additional paths
• Colored console output
• Results saving
• Rate limiting to prevent server overload
• Immediate scan stopping capability

1. Clone the repository:

   git clone https://github.com/yourusername/scarface.git
   cd scarface

2. Install the required packages:

   pip install -r requirements.txt

1. Start the web interface:

   python app.py

2. Open your browser and go to:

   http://localhost:5000
   

3. In the web interface:

   • Enter the target URL
   • Select which wordlists to use (Common, Admin, API)
   • Set path limits for each wordlist (optional)
   • Click "Start Scan" to begin
   • Use "Stop Scan" to immediately halt the scanning process

• Common Paths: General website endpoints
• Admin Paths: Administrative and backend paths
• API Paths: API endpoints and routes

Set the number of paths to scan from each wordlist:

• Leave empty to scan all paths
• Enter a number to limit paths (e.g., "10" to scan only first 10 paths)

• Live counter for each wordlist's progress
• Instant display of found paths
• Copy button for each discovered URL
• Status updates during scanning

• Draggable window interface
• Start/Stop scanning controls
• Clear status indicators
• Progress tracking

The scanner uses three wordlist files in the wordlists directory:

• common_paths.txt: General website paths
• admin_paths.txt: Administrative paths
• api_paths.txt: API endpoints

You can customize these files to add or remove paths as needed.

• Only scan websites you own or have permission to test
• Be mindful of rate limiting and server load
• Some websites may block automated scanning
• Use responsibly and ethically
• The scanner respects robots.txt and rate limits by default

MIT License

Feel free to submit issues, fork the repository, and create pull requests for any improvements.