GARY IS COMING FOR YOU

You shouldn't have done that.

⚙ MALEVELON CREEK
CLICK TO SCAN
SPACE-BAR SERVICE DESK

Bartender

Here to help you explore

Questions and relevant page context are sent to TypeSafe. Questions Bartender cannot answer are saved to improve the site, without your account or IP. Other conversation stays in this tab.

waybackurls Tool Reference


waybackurls fetches all URLs that the Wayback Machine knows about for a domain. Simple, fast, and focused on one data source. Written in Go by tomnomnom.


Basic Usage

  • echo "example.com" | waybackurls - Fetch URLs for domain
  • cat domains.txt | waybackurls - Multiple domains

Options

  • -dates - Show capture dates
  • -get-versions - Fetch all archived versions
  • -no-subs - Don't include subdomains

Common Examples

Basic Fetch

echo "example.com" | waybackurls

Get all archived URLs.

Without Subdomains

echo "example.com" | waybackurls -no-subs

Only exact domain URLs.

With Dates

echo "example.com" | waybackurls -dates

Show when URLs were captured.

Save to File

echo "example.com" | waybackurls > urls.txt

Save results.

Multiple Domains

cat domains.txt | waybackurls > all_urls.txt

Process domain list.

Unique URLs Only

echo "example.com" | waybackurls | sort -u

Deduplicate results.


Pipeline Examples

Find Parameters

echo "example.com" | waybackurls | grep "?" | sort -u

URLs with query parameters.

Find Specific Extensions

echo "example.com" | waybackurls | grep -E "\.php$|\.asp$|\.jsp$"

Find dynamic pages.

Find JavaScript Files

echo "example.com" | waybackurls | grep "\.js$" | sort -u

Extract JS files.

Find Backup Files

echo "example.com" | waybackurls | grep -E "\.(bak|backup|old|orig)$"

Find potential backups.

Find Config Files

echo "example.com" | waybackurls | grep -E "\.(json|xml|yaml|yml|conf|config|ini)$"

Find configuration files.

Extract Unique Paths

echo "example.com" | waybackurls | cut -d'?' -f1 | sort -u

Paths without parameters.

Find Admin Pages

echo "example.com" | waybackurls | grep -iE "(admin|login|dashboard|manage)"

Find admin-related URLs.

Check Live URLs

echo "example.com" | waybackurls | httpx -silent

Filter to live URLs only.

With gau

{ echo "example.com" | waybackurls; echo "example.com" | gau; } | sort -u

Combine both tools for comprehensive coverage.


Output Format

Normal Output

https://example.com/page
https://example.com/api/users?id=1
https://example.com/login.php

With Dates (-dates)

2020-01-15T12:34:56Z https://example.com/page
2019-06-20T08:15:30Z https://example.com/old-feature

Installation

go install github.com/tomnomnom/waybackurls@latest

Comparison with gau

Featurewaybackurlsgau
SourcesWayback onlyMultiple (Wayback, OTX, CC, URLScan)
SpeedFasterSlower (more sources)
OptionsMinimalMore filtering options
OutputSimpleJSON support

Tips

  • Combine with gau for comprehensive URL discovery
  • Use grep to filter for interesting patterns
  • Check -dates to find old/removed functionality
  • Pipe to httpx to verify live endpoints
  • Look for API endpoints and parameters
  • Historical URLs may reveal security issues
  • Fast and lightweight compared to alternatives
  • Great for bug bounty reconnaissance