lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...

urx

Extracts URLs from OSINT Archives for Security Insights. Urx is a command-line tool designed for collecting URLs from OSINT archives, such as the Wayback Machine and Common Crawl. Built with Rust for efficiency, it leverages asynchronous processing to rapidly query multiple data sources. This too...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: waybackpack...

CWFF

CWFF - Custom wordlists for fuzzing CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage CWFF -h --threads --gith...

waybackurls

waybackurls Accept line-delimited domains on stdin, fetch known URLs from the Wayback Machine for .domain and output them on stdout. Usage example: ▶ cat domains.txt | waybackurls urls Install: ▶ go install github.com/tomnomnom/waybackurls@latest Credit This tool was inspired by @mhmdiaa's...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

TheTimeMachine

🚀 TheTimeMachine v3.0 - Weaponizing Wayback for Recon, BugBounties, OSINT & More! You’ve heard of time travel in movies and comics, right? Well, this isn’t fiction anymore 😎. TheTimeMachine lets you dig through the past of any web app by scraping archived URLs from the Wayback Machine — and helps...

goodoldsearch-oss

Good Old Search Build precise search queries with exact phrases, site filters, exclusions, date ranges, filetypes, and one-click links across search engines and vertical search targets. This is not a search engine, metasearch aggregator, scraper, or API proxy. It is a local static query builder...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

gau

getallurls gau getallurls gau는 주어진 도메인에 대해 AlienVault의 Open Threat Exchange, Wayback Machine, Common Crawl 및 URLScan에서 알려진 URL을 가져옵니다. Tomnomnom의 waybackurls에서 영감을 받았습니다. 리소스 사용법 설치 ohmyzsh 참고 사용법: 예시: $ printf example.com | gau $ cat domains.txt | gau --threads 5 $ gau example.com google.com $ g...

JWTXposer

JWTXposer Automated JWT Discovery & Analysis Tool for Bug Bounty Hunters and Red Teamers What Is JWTXposer? JWTXposer is an automated reconnaissance tool that scans public archives like the Wayback Machine , extracts leaked JWT tokens , and decodes them to identify potentially exploitable...

Reconky-Automated_Bash_Script

Reconky-Automated Bash Script \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / Usage ./reconky.sh About Reconky is a script written in bash to automate the...

waymore

概要 - v8.9 waymore の背後にあるアイデアは、他の既存のツールよりも Wayback Machine（およびその他のソース）からさらに多くのリンクを見つけることです。 👉 waymore と他のツールの最大の違いは、Wayback Machine および URLScan 上の URL のアーカイブされた応答を ダウンロード することもできるため、それらを検索してさらに多くのリンク、開発者のコメント、追加のパラメータなどを見つけることができることです。 👉...

waybackpack

waybackpack Waybackpackは、指定されたURLに対するWayback Machineのアーカイブ全体をダウンロードできるコマンドラインツールです。 例えば、労働省のホームページの1996年までの全コピーをダウンロードするには（ちょうどそのサイトが最初にアーカイブされた年です）、次のように実行します： waybackpack http://www.dol.gov/ -d /Downloads/dol-wayback --to-date 1996 結果： /Downloads/dol-wayback/ ├── 19961102145216 │ └──...

wayBackLister

WaybackLister v1.1 — FR13ND0x7F 作 Wayback Machine のアーカイブ済み URL から潜在的なディレクトリリスティングを発見します。 🕵️‍♂️ できること WaybackLister は、Wayback Machine にアクセスしてドメインの履歴 URL を取得し、一意のパスを解析し、それらのパスのいずれかが現在 ディレクトリリスティング を公開しているかどうかをチェックする偵察ツールです。高速でマルチスレッド対応であり、セキュリティ評価やバグバウンティの偵察で実用的に使えるように作られています。 🚀 特徴 Wayback Machine...

lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | 使用法 ./lazyrecon.sh -d domain.com 特定のサブドメインを除外する場合: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com 概要 LazyRecon は Bash...

waybackurls

waybackurls 표준 입력에서 줄바꿈으로 구분된 도메인을 받아, Wayback Machine에서 .domain에 대한 알려진 URL을 가져와 표준 출력으로 내보냅니다. 사용 예: ▶ cat domains.txt | waybackurls urls 설치: ▶ go install github.com/tomnomnom/waybackurls@latest 크레딧 이 도구는 @mhmdiaa의 waybackurls.py 스크립트에서 영감을 받았습니다. 멋진 아이디어를 주셔서 감사합니다!...

NextRecon

NextRecon NextRecon is a simple Python-based reconnaissance tool designed for bug bounty hunters, security researchers, and penetration testers. It performs passive recon by collecting archived URLs from the Wayback Machine and fetching leaked credentials from the BreachCollection API. It also...

Omise: PII Exposure via Email Confirmation Link – Email Embedded in Token & Leaked via Wayback Machine

The vulnerability involved the exposure of personally identifiable information PII, specifically email addresses, through an email confirmation link used by Omise. The email address was embedded directly in a token that was visible in the URL. This token was subsequently archived by the Wayback...

Internet Archive (Archive.org) Goes Down Following “Power Outage” (Updated)

The Internet Archive Archive.org, home to the Wayback Machine, is temporarily offline due to a reported power outage.…...