goodoldsearch-oss

Good Old Search Build precise search queries with exact phrases, site filters, exclusions, date ranges, filetypes, and one-click links across search engines and vertical search targets. This is not a search engine, metasearch aggregator, scraper, or API proxy. It is a local static query builder...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: waybackpack...

wayBackLister

WaybackLister v1.1 — by FR13ND0x7F Discover potential directory listings through archived URLs from the Wayback Machine. 🕵️‍♂️ What It Does WaybackLister is a reconnaissance tool that taps into the Wayback Machine to fetch historical URLs for a domain, parses unique paths, and checks if any of...

urx

Extracts URLs from OSINT Archives for Security Insights. Urx collects URLs for a domain from OSINT archives such as the Wayback Machine and Common Crawl. It queries every source in parallel, then filters, tests and formats the results for security work. Features Keyless sources: Wayback Machine,...

JWTXposer

JWTXposer Automated JWT Discovery & Analysis Tool for Bug Bounty Hunters and Red Teamers What Is JWTXposer? JWTXposer is an automated reconnaissance tool that scans public archives like the Wayback Machine , extracts leaked JWT tokens , and decodes them to identify potentially exploitable...

TheTimeMachine

TheTimeMachine v3.0 - Weaponizing Wayback for Recon, BugBounties, OSINT & More! You’ve heard of time travel in movies and comics, right? Well, this isn’t fiction anymore 😎. TheTimeMachine lets you dig through the past of any web app by scraping archived URLs from the Wayback Machine — and helps y...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

waybackurls

waybackurls Accept line-delimited domains on stdin, fetch known URLs from the Wayback Machine for .domain and output them on stdout. Usage example: ▶ cat domains.txt | waybackurls urls Install: ▶ go install github.com/tomnomnom/waybackurls@latest Credit This tool was inspired by @mhmdiaa's...

lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...

Reconky-Automated_Bash_Script

Reconky-Automated Bash Script \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / Usage ./reconky.sh About Reconky is a script written in bash to automate the...

CWFF

CWFF - Custom wordlists for fuzzing CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage CWFF -h --threads --gith...

gau

getallurls gau getallurls gau obtiene URLs conocidas de AlienVault's Open Threat Exchange, Wayback Machine, Common Crawl y URLScan para cualquier dominio dado. Inspirado en waybackurls de Tomnomnom. Recursos Uso Instalación Nota sobre ohmyzsh Uso: Ejemplos: $ printf example.com | gau $ cat...

waybackpack

waybackpack Waybackpack es una herramienta de línea de comandos que te permite descargar el archivo completo de Wayback Machine para una URL determinada. Por ejemplo, para descargar todas las copias de la página de inicio del Departamento de Trabajo hasta 1996 que resulta ser el primer año en que...

waymore

Acerca de - v8.9 La idea detrás de waymore es encontrar aún más enlaces de Wayback Machine además de otras fuentes que otras herramientas existentes. 👉 La mayor diferencia entre waymore y otras herramientas es que también puede descargar las respuestas archivadas para las URLs en Wayback Machine ...

waybackurls

waybackurls Acepta dominios separados por líneas en stdin, obtiene URLs conocidas de la Wayback Machine para .domain y las envía a stdout. Ejemplo de uso: ▶ cat domains.txt | waybackurls urls Instalación: ▶ go install github.com/tomnomnom/waybackurls@latest Crédito Esta herramienta fue inspirada...

lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Utilizzo ./lazyrecon.sh -d domain.com Per escludere sottodomini specifici: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com...

NextRecon

NextRecon NextRecon is a simple Python-based reconnaissance tool designed for bug bounty hunters, security researchers, and penetration testers. It performs passive recon by collecting archived URLs from the Wayback Machine and fetching leaked credentials from the BreachCollection API. It also...

Check archive website

Query the Wayback Machine CDX API for historical URLs of the target host. By default only samples a small set of URLs does not hammer the live site. from kittysploit import from lib.protocols.http.httpclient import Httpclient import requests from urllib.parse import urlparse class ModuleAuxiliary...

Omise: PII Exposure via Email Confirmation Link – Email Embedded in Token & Leaked via Wayback Machine

The vulnerability involved the exposure of personally identifiable information PII, specifically email addresses, through an email confirmation link used by Omise. The email address was embedded directly in a token that was visible in the URL. This token was subsequently archived by the Wayback...