Waybackurls — Reconnaissance | Tools

Description

Waybackurls fetches all the URLs that the Wayback Machine knows about for a domain. It's a fast and simple tool for passive URL enumeration and historical endpoint discovery.

Installation

BASH

go install github.com/tomnomnom/waybackurls@latest

Basic Usage

                        BASH
                        
                            # Fetch URLs
waybackurls target.com

# Save output
waybackurls target.com > urls.txt

# With dates
waybackurls -dates target.com

Advanced Usage

                        BASH
                        
                            # Get unique URLs only
waybackurls target.com | sort -u > unique-urls.txt

# From stdin
echo "target.com" | waybackurls

# No subdomains
waybackurls -no-subs target.com

Common Workflows

                        BASH
                        
                            # Find parameterized URLs for XSS/SQLi testing
waybackurls target.com | grep "=" | sort -u > params.txt

# Find JS files from history
waybackurls target.com | grep "\.js$" | sort -u > js-files.txt

# Find sensitive endpoints
waybackurls target.com | grep -iE "(admin|api|config|backup|\.env)" | sort -u