Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
wayBackLister — A New Approach to Directory Bruteforce with WaybackLister v1.0 | Kitploit
Tools/GitHubGitHub/anmolksachan/waybacklister
OSINT (Open Source Intelligence)ReconnaissanceInformation GatheringWeb SecurityMisconfigurationSubdomain Enumeration
GitHubanmolksachan/waybacklister

wayBackLister

A New Approach to Directory Bruteforce with WaybackLister v1.0

View Repository
2333841 year agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Website

Screenshot 2025-06-27 at 8 04 32 AM

WaybackLister v1.1 — by [FR13ND0x7F]
Discover potential directory listings through archived URLs from the Wayback Machine.


🕵️‍♂️ What It Does

WaybackLister is a reconnaissance tool that taps into the Wayback Machine to fetch historical URLs for a domain, parses unique paths, and checks if any of those paths currently expose directory listings. It's fast, multithreaded, and built for practical use in security assessments and bug bounty recon.


🚀 Features

  • Pulls archived URLs via the Wayback Machine
  • Extracts unique paths and subdomains from those URLs
  • Actively checks for live directory listings
  • Supports multithreaded scanning
  • Can auto-discover subdomains based on Wayback data
  • Works with single domain or list of domains
  • Retry logic for timeouts [v1.1]

📦 Installation

Clone the repo and you're good to go:

root@kitploit:~
git clone https://github.com/anmolksachan/wayBackLister.git
cd wayBackLister
pip install -r requirements.txt -> To be updated

🛠 Usage

Scan a Single Domain

root@kitploit:~
python waybacklister.py -d example.com

Scan Multiple Domains from a File

root@kitploit:~
python waybacklister.py -f domains.txt

Auto-discover and Scan Subdomains [Module Under Development]

root@kitploit:~
python waybacklister.py -auto example.com 

Custom Thread Count

root@kitploit:~
python waybacklister.py -d example.com -t 20

📄 Example Output

root@kitploit:~
[+] Querying Wayback Machine for example.com...
[*] Attempt 1 to fetch data for example.com
[+] Processing domain: example.com
[+] Found 154 unique paths for example.com. Checking for directory listings...
[+] Directory Listing Found: http://example.com/files/
[+] Directory Listing Found: http://example.com/uploads/

[+] Summary of Directory Listings for example.com:
http://example.com/files/
http://example.com/uploads/

📄 Example

Screenshot 2025-06-27 at 8 11 27 AM

⚙️ Requirements

  • Python 3.6+
  • requests
  • argparse

Install dependencies with:

root@kitploit:~
pip install -r requirements.txt

🧠 Why This Tool?

Sometimes, old URLs archived by the Wayback Machine lead to interesting places—especially when they still work. Directory listings can reveal sensitive files, backups, or even forgotten admin panels. WaybackLister helps you find them in a systematic and scriptable way.


Community Blogs/ Resources

  • (How I Use Waybacklister to Discover Gold in Bug Bounty Targets 💰)
  • (WayBackLister : Innovative Directory Bruteforcing Technique)
  • (Recon Tool: WaybackLister)

📢 Disclaimer

This tool is meant for educational and authorized security testing only. Don't use it on systems you don't have permission to test.


🙌 Acknowledgements

Crafted by (FR13ND0x7F @anmolksachan) — for the community, by the community.


Download Tool