# waybackurls Cheatsheet - Cheatsheets - Launch Pad

__ _______________________ _________._________________________ \_ _____/ \______ \ / _ \ / _____/ / _____/ | | \_ _____/ | __) | _/ / /_\ \ / \ ___ / \ ___ | | | __)_ | \ | | \ / | \ \ \_\ \ \ \_\ \ | |___ | \ \___ / |____|_ / \____|__ / \______ / \______ / |_______ \ /_______ / \/ \/ \/ \/ \/ \/ \/

# waybackurls Cheatsheet

← Back to cheatsheets

← Home

waybackurls fetches all URLs that the Wayback Machine knows about for a domain. Simple, fast, and focused on one data source. Written in Go by tomnomnom.

## Basic Usage

- echo "example.com" | waybackurls - Fetch URLs for domain

- cat domains.txt | waybackurls - Multiple domains

## Options

- -dates - Show capture dates

- -get-versions - Fetch all archived versions

- -no-subs - Don't include subdomains

## Common Examples

### Basic Fetch

    echo "example.com" | waybackurls

Get all archived URLs.

### Without Subdomains

    echo "example.com" | waybackurls -no-subs

Only exact domain URLs.

### With Dates

    echo "example.com" | waybackurls -dates

Show when URLs were captured.

### Save to File

    echo "example.com" | waybackurls > urls.txt

Save results.

### Multiple Domains

    cat domains.txt | waybackurls > all_urls.txt

Process domain list.

### Unique URLs Only

    echo "example.com" | waybackurls | sort -u

Deduplicate results.

## Pipeline Examples

### Find Parameters

    echo "example.com" | waybackurls | grep "?" | sort -u

URLs with query parameters.

### Find Specific Extensions

    echo "example.com" | waybackurls | grep -E "\.php$|\.asp$|\.jsp$"

Find dynamic pages.

### Find JavaScript Files

    echo "example.com" | waybackurls | grep "\.js$" | sort -u

Extract JS files.

### Find Backup Files

    echo "example.com" | waybackurls | grep -E "\.(bak|backup|old|orig)$"

Find potential backups.

### Find Config Files

    echo "example.com" | waybackurls | grep -E "\.(json|xml|yaml|yml|conf|config|ini)$"

Find configuration files.

### Extract Unique Paths

    echo "example.com" | waybackurls | cut -d'?' -f1 | sort -u

Paths without parameters.

### Find Admin Pages

    echo "example.com" | waybackurls | grep -iE "(admin|login|dashboard|manage)"

Find admin-related URLs.

### Check Live URLs

    echo "example.com" | waybackurls | httpx -silent

Filter to live URLs only.

### With gau

    { echo "example.com" | waybackurls; echo "example.com" | gau; } | sort -u

Combine both tools for comprehensive coverage.

## Output Format

### Normal Output

    https://example.com/page
    https://example.com/api/users?id=1
    https://example.com/login.php

### With Dates (-dates)

    2020-01-15T12:34:56Z https://example.com/page
    2019-06-20T08:15:30Z https://example.com/old-feature

## Installation

    go install github.com/tomnomnom/waybackurls@latest

## Comparison with gau

Feature | waybackurls | gau
--- | --- | ---
Sources | Wayback only | Multiple (Wayback, OTX, CC, URLScan)
Speed | Faster | Slower (more sources)
Options | Minimal | More filtering options
Output | Simple | JSON support

## Tips

- Combine with gau for comprehensive URL discovery

- Use grep to filter for interesting patterns

- Check -dates to find old/removed functionality

- Pipe to httpx to verify live endpoints

- Look for API endpoints and parameters

- Historical URLs may reveal security issues

- Fast and lightweight compared to alternatives

- Great for bug bounty reconnaissance

← Back to cheatsheets

← Home