loading
Loading content
loading
Utilities
URL path lists from a wordlist for content discovery.
overview
mkpath turns a wordlist into URL path candidates so fuzzers start from a shaped list instead of raw tokens.
Control depth with -l, lowercase with -lower, filter with -r, and choose -only-dirs or -only-files. Pass a host with -d or many hosts with -df.
Trickest provides mkpath as a managed Utilities node ahead of ffuf or feroxbuster. It writes paths; it does not send requests.
source github.com/trickest/mkpath
use cases
Generate a path list from a curated wordlist, then hand it to ffuf or feroxbuster so the fuzzing run hits paths tuned to the target rather than a generic dictionary.
Raise the level flag to produce multi-segment paths so directory brute forcing reaches nested routes that a single-segment list would never test.
Use only-dirs or only-files to separate folder probing from filename guessing, keeping each fuzzing pass focused and faster to triage.
Apply a regex and lowercasing to strip unwanted entries and collapse duplicates before the paths ever reach a fuzzer.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| level | STRING | -l | Path depth to generate (default 1) |
| lower | BOOLEAN | -lower | Convert wordlist file content to lowercase |
| regex | STRING | -r | Regex to filter words from wordlist file |
| domain | STRING | -d | Input domain |
| wordlist | FILE | -w | Wordlist file |
| only-dirs | BOOLEAN | -only-dirs | Generate directories only, files are filtered out |
| only-files | BOOLEAN | -only-files | Generate files only, file names are appended to given domains |
Showing key inputs. mkpath exposes 8 inputs in total.
| Name | Type | Flag | Description |
|---|---|---|---|
| level | STRING | -l | Path depth to generate (default 1) |
| lower | BOOLEAN | -lower | Convert wordlist file content to lowercase |
| regex | STRING | -r | Regex to filter words from wordlist file |
| domain | STRING | -d | Input domain |
| wordlist | FILE | -w | Wordlist file |
| only-dirs | BOOLEAN | -only-dirs | Generate directories only, files are filtered out |
| only-files | BOOLEAN | -only-files | Generate files only, file names are appended to given domains |
| domain-file | FILE | -df | Input domain file, one domain per line |
example
# mkpath: build paths from a wordlist for fuzzingmkpath -w paths.txt -l -only-dirs > url-paths.txt/admin/api/api/v1/backup/dashboard/login/static/uploadsguidance
Reach for mkpath when you want to shape a path list before fuzzing, not run the fuzz itself. It generates candidate paths; ffuf or feroxbuster send the requests. For subdomain candidates instead, use mksub.
Sibling generator for subdomains instead of URL paths. Same wordlist-permutation idea at the DNS layer.
Sends the requests. mkpath builds the path list that ffuf consumes; they pair rather than compete.
Recursive content discovery. Feed it mkpath output to start from a target-shaped list.
faq
related
Spider a URL and return a wordlist for password crackers.
Wordlist and mined-word subdomain permutation.
Import, export, and upsert workflow data against an Airtable base.
Decode Android APK files into smali sources and resources.
Check a file's values against conditions and exit with a matching code.
Authenticated Route53 hosted-zone inventory.
A wordlist feeds mkpath, which builds candidate URL paths and hands them to ffuf for content discovery before the hits land as a queryable output.
Facts on this page come from the live Trickest tool library.