d3pen automatic tool for finding dependency confusion vulnerabilities in source codes. installation : git clone https://github.com/polarspetroll/d3pen.git; cd d3pen; chmod +x install.sh sudo ./install.sh Usage : d3pen <url> <wordlist> Example : d3pen http://example.com/ list.txt You can use dirbuster or gobuster to discover directories on server