waybackurls Cheatsheet

← Back to cheatsheets

← Home

waybackurls fetches all URLs that the Wayback Machine knows about for a domain. Simple, fast, and focused on one data source. Written in Go by tomnomnom.

Basic Usage

• echo "example.com" | waybackurls - Fetch URLs for domain

• cat domains.txt | waybackurls - Multiple domains

Options

• -dates - Show capture dates

• -get-versions - Fetch all archived versions

• -no-subs - Don't include subdomains

Common Examples

Basic Fetch

echo "example.com" | waybackurls

Get all archived URLs.

Without Subdomains

echo "example.com" | waybackurls -no-subs

Only exact domain URLs.

With Dates

echo "example.com" | waybackurls -dates

Show when URLs were captured.

Save to File

echo "example.com" | waybackurls > urls.txt

Save results.

Multiple Domains

cat domains.txt | waybackurls > all_urls.txt

Process domain list.

Unique URLs Only

echo "example.com" | waybackurls | sort -u

Deduplicate results.

Pipeline Examples

Find Parameters

echo "example.com" | waybackurls | grep "?" | sort -u

URLs with query parameters.

Find Specific Extensions

echo "example.com" | waybackurls | grep -E "\.php$|\.asp$|\.jsp$"

Find dynamic pages.

Find JavaScript Files

echo "example.com" | waybackurls | grep "\.js$" | sort -u

Extract JS files.

Find Backup Files

echo "example.com" | waybackurls | grep -E "\.(bak|backup|old|orig)$"

Find potential backups.

Find Config Files

echo "example.com" | waybackurls | grep -E "\.(json|xml|yaml|yml|conf|config|ini)$"

Find configuration files.

Extract Unique Paths

echo "example.com" | waybackurls | cut -d'?' -f1 | sort -u

Paths without parameters.

Find Admin Pages

echo "example.com" | waybackurls | grep -iE "(admin|login|dashboard|manage)"

Find admin-related URLs.

Check Live URLs

echo "example.com" | waybackurls | httpx -silent

Filter to live URLs only.

With gau

{ echo "example.com" | waybackurls; echo "example.com" | gau; } | sort -u

Combine both tools for comprehensive coverage.

Output Format

Normal Output

https://example.com/page
https://example.com/api/users?id=1
https://example.com/login.php

With Dates (-dates)

2020-01-15T12:34:56Z https://example.com/page
2019-06-20T08:15:30Z https://example.com/old-feature

Installation

go install github.com/tomnomnom/waybackurls@latest

Comparison with gau

Tips

• Combine with gau for comprehensive URL discovery

• Use grep to filter for interesting patterns

• Check -dates to find old/removed functionality

• Pipe to httpx to verify live endpoints

• Look for API endpoints and parameters

• Historical URLs may reveal security issues

• Fast and lightweight compared to alternatives

• Great for bug bounty reconnaissance

← Back to cheatsheets

← Home