waybackurls
waybackurls waybackurls is the lightweight Go tool that queries the Wayback Machine for historical URLs on a domain, dumping unique paths and params for passive recon without active noise. Run its binary on seeds with -a for archives, piping outputs to ffuf for live validation. Open-source from tomnomnom, it's the archive archivist for pentesters resurrecting forgotten endpoints from time capsules.
Explore →gau
gau gau aggregates URLs from multiple archives like Common Crawl and AlienVault, resolving subdomains and params for comprehensive historical recon in one swift pass. Launch its Go CLI with domains for deduped lists, exporting to files for chained fuzzing. Open-source from lc, it's the URL unifier for OSINT pros templating multi-source web snapshots.
Explore →waymore
waymore waymore extends waybackurls with timestamp and status filtering, pulling richer metadata from CDX indices for targeted historical path discovery in recon workflows. Run its Go script on URL lists for enhanced outputs, chaining with httpx for alive checks. Open-source from xnl-h4ck3r, it's the wayback wizard for pentesters delving deeper into archived timelines.
Explore →aquatone
Aquatone Aquatone screenshots historical URLs from Wayback snapshots, visually mapping forgotten paths and endpoints for quick asset triage in passive recon. Configure its Go binary with domain lists for automated captures, exporting galleries for review. Open-source from michenriksen, it's the visual voyager for web mappers templating archived discoveries into snapshots.
Explore →wayback_machine_downloader
Wayback Machine Downloader wayback_machine_downloader fetches full snapshots from Wayback by timestamp or range, reconstructing historical site structures for offline recon on evolved apps. Run its Python script with --all for complete pulls, archiving pages with assets intact. Open-source from hartator, it's the snapshot salvager for pentesters rebuilding past web states.
Explore →waybackpy
waybackpy waybackpy is the Python client for Wayback APIs, archiving or querying snapshots with filters for URL, date, or MIME to tailor historical recon pulls. Script its classes for automated CDX searches, saving responses for analysis. Open-source from akamhy, it's the API archivist for devs templating programmatic archive interactions.
Explore →archivebuster
ArchiveBuster ArchiveBuster maps and extracts URLs from Internet Archive snapshots, focusing on ethical recon with rate limits for responsible historical endpoint discovery. Run its Rust CLI on domains for enumerated lists, validating with live probes. Open-source from scipag, it's the archive adventurer for pentesters exploring web ghosts.
Explore →thetimemachine
TheTimeMachine TheTimeMachine queries Wayback CDX for filtered snapshots by date or type, pulling JS/PHP files for param mining in targeted historical recon. Configure its Python script with -e for extensions, exporting for fuzzing. Open-source from bp0lr, it's the time traveler for auditors revisiting past web configs.
Explore →waybackcdx
waybackcdx waybackcdx is the indexer for local Wayback CDX archives, templating queries for URL patterns or timestamps to reconstruct site evolutions offline. Build its Go tool from source, indexing WARCs for fast searches. Open-source from christrane, it's the CDX curator for researchers templating archive queries without APIs.
Explore →gauplus

