ParamSpider

Passive parameter extraction from Wayback Machine and Common Crawl

Parameter DiscoveryPython

Installation

1git clone https://github.com/devanshbatham/ParamSpider.gitClone from GitHub

2cd ParamSpider && pip install -r requirements.txtInstall requirements

3python3 paramspider -hVerify installation

Basic Usage

Extract URLs from Wayback Machine

python3 paramspider -d site.com

Save results with placeholder

python3 paramspider -d site.com -p "FUZZ=value"

Search with depth level 2

python3 paramspider -d site.com -l 2

Filter results by vulnerability type

python3 paramspider -d site.com | grep xss > xss.txt

Save to custom output file

python3 paramspider -d site.com -o output.txt

Key Options

-d

Target domain

-p

Output pattern with FUZZ placeholder

-l

Search depth (levels)

-o

Output file

-s

Search Google instead of Wayback Machine

-b

Search engine (baidu, bing, ...)

-a

Add all subdomains

-q

Quiet mode

When to Use ParamSpider?

When starting a penetration test on a new scope

To discover hidden parameters without direct interaction

To collect as many URLs with parameters as possible

When you want quick results from archived data

As a first step before using Arjun or ffuf

To analyze URL parameter change history

Notes & Tips

Works passively — does not interact directly with the target

Uses Wayback Machine and Common Crawl as data sources

Great for gathering initial data before deep scanning

Results may contain expired URLs

Can be combined with Arjun for best results

Supports Google search as additional source (-s option)

Very fast compared to interactive tools like Arjun

Does not work on domains without archived data

Common Errors & Solutions

No results found

No archived data exists for this domain. Try other sources like Google

Rate limiting from Wayback Machine

Add delay between requests or reduce search depth

ModuleNotFoundError

Make sure requirements.txt is installed: pip install -r requirements.txt

SSL Certificate errors

Add --no-check-certificate or update the requests library

ParamSpider

Passive parameter extraction from Wayback Machine and Common Crawl

Parameter DiscoveryPython

Installation

1git clone https://github.com/devanshbatham/ParamSpider.gitClone from GitHub

2cd ParamSpider && pip install -r requirements.txtInstall requirements

3python3 paramspider -hVerify installation

Basic Usage

Extract URLs from Wayback Machine

python3 paramspider -d site.com

Save results with placeholder

python3 paramspider -d site.com -p "FUZZ=value"

Search with depth level 2

python3 paramspider -d site.com -l 2

Filter results by vulnerability type

python3 paramspider -d site.com | grep xss > xss.txt

Save to custom output file

python3 paramspider -d site.com -o output.txt

Key Options

-d

Target domain

-p

Output pattern with FUZZ placeholder

-l

Search depth (levels)

-o

Output file

-s

Search Google instead of Wayback Machine

-b

Search engine (baidu, bing, ...)

-a

Add all subdomains

-q

Quiet mode

When to Use ParamSpider?

When starting a penetration test on a new scope

To discover hidden parameters without direct interaction

To collect as many URLs with parameters as possible

When you want quick results from archived data

As a first step before using Arjun or ffuf

To analyze URL parameter change history

Notes & Tips

Works passively — does not interact directly with the target

Uses Wayback Machine and Common Crawl as data sources

Great for gathering initial data before deep scanning

Results may contain expired URLs

Can be combined with Arjun for best results

Supports Google search as additional source (-s option)

Very fast compared to interactive tools like Arjun

Does not work on domains without archived data

Common Errors & Solutions

No results found

No archived data exists for this domain. Try other sources like Google

Rate limiting from Wayback Machine

Add delay between requests or reduce search depth

ModuleNotFoundError

Make sure requirements.txt is installed: pip install -r requirements.txt

SSL Certificate errors

Add --no-check-certificate or update the requests library