# snallygaster
> Scan for secret files on HTTP servers

## Summary
Scan HTTP servers for accidentally exposed secret and configuration files

## Capabilities
- Check for exposed configuration files
- Find accidentally public backups
- Detect exposed source code
- Scan for common security misconfigurations

## When to Use
- When auditing web server security
- When checking for exposed sensitive files

## When NOT to Use
- When doing full penetration testing

## Related Tools
- [urlhunter](/tools/urlhunter) (complementary)
- [lychee](/tools/lychee) (complementary)

---
Source: https://littlescripts.sh/tools/snallygaster
