Some kind of payload causes the path entered in the -p parameter to be deleted giving false positives

[r4vl1t0]

Original command:
python bypassninja.py https://<domain.com> -p /.htpasswd -v

The tool point to https:/domain.com (in some payloads no all) instead https://domain.com/.htpasswd.

[MartinPSDev]

The problem appears to be that path mutations are not being properly validated.
There is no guarantee that the original path is maintained across all variations.
The mutate_path method allows mutations that can result in invalid paths or that ignore the original path.

https://github.com/MartinPSDev/BypassNinja/blob/main/bypassninja.py#L245-L256

There is no mechanism to verify whether a mutation actually maintains the intended path.
A possible solution could be to improve the validation of mutated paths, implement normalization.