Waybackurls

Fetch all URLs from Wayback Machine for a given domain by TomNomNom

Recon & OSINT5 commands

#wayback#urls#archive#recon#tomnomnom

Installation

1Install using Go

2Verify installation

# Using Go
go install github.com/tomnomnom/waybackurls@latest

# Verify
waybackurls --help

Basic Usage

Fetch historical URLs from Wayback Machine archive for reconnaissance

# Fetch URLs for a domain
waybackurls example.com

# Fetch URLs from multiple domains (stdin)
cat domains.txt | waybackurls

# Save to file
waybackurls example.com > urls.txt

# Fetch with dates
waybackurls -dates example.com

# Verbose output
waybackurls -verbose example.com

# Fetch from specific date range (YYYYMMDD-YYYYMMDD)
waybackurls -from 20230101 -to 20231231 example.com

# No subdomains
waybackurls -no-subs example.com

Command Reference

5 commands

1Show capture timestamps

-dates

2Start date (YYYYMMDD)

-from

3End date (YYYYMMDD)

-to

4Exclude subdomains

-no-subs

5Verbose output

-verbose

When to Use

Collecting historical URLs for recon

Discovering old or forgotten endpoints

Finding API endpoints and parameters

Building URL wordlists for fuzzing

Pre-scanning before vulnerability assessment

Notes & Tips

Part of the TomNomNom toolkit ecosystem

Only fetches from Wayback Machine (not other archives)

Results can be piped to gf for pattern matching

Combine with gau for additional archive sources

Common Errors & Solutions

No URLs found

Try without -no-subs flag or verify the domain has archive data

Rate limited

Add delays between requests or reduce concurrent fetches

# Fetch URLs for a domain waybackurls example.com # Fetch URLs from multiple domains (stdin) cat domains.txt | waybackurls # Save to file waybackurls example.com > urls.txt # Fetch with dates waybackurls -dates example.com # Verbose output waybackurls -verbose example.com # Fetch from specific date range (YYYYMMDD-YYYYMMDD) waybackurls -from 20230101 -to 20231231 example.com # No subdomains waybackurls -no-subs example.com