Tool · discoverypassive
ParamSpider
Passively mines parameterized URLs for a domain from web-archive data.
Use responsibly
Test only systems you own or are explicitly authorized to test. Unauthorized testing is illegal.
Tagsdiscovery
More tools
- ArjundiscoveryDiscovers hidden HTTP parameters using a bundled (SecLists-upsizable) wordlist.
- dirsearchdiscoveryWeb content/path discovery driven by a shared discovery wordlist.
- feroxbusterdiscoveryRecursive content discovery that can auto-request backup/source-map variants of every hit.
- ffufdiscoveryFast content and parameter fuzzing with soft-404/wildcard auto-calibration.
- gaudiscoveryRetrieves historical URLs for a domain from public archives.
- GobusterdiscoveryDirectory and file brute-forcing with optional backup/source extension probing.