Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
gau — Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl. | Kitploit
Tools/GitHubGitHub/lc/gau
OSINT (Open Source Intelligence)ReconnaissanceDNS & Subdomain EnumerationInformation GatheringWeb Security
GitHublc/gau

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

View Repository
5.1k5205 months agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

getallurls (gau)

License

getallurls (gau) fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls.

Resources

  • Usage
  • Installation
  • ohmyzsh note

Usage:

Examples:

root@kitploit:~
$ printf example.com | gau
$ cat domains.txt | gau --threads 5
$ gau example.com google.com
$ gau --o example-urls.txt example.com
$ gau --blacklist png,jpg,gif example.com

To display the help for the tool use the -h flag:

root@kitploit:~
$ gau -h

Configuration Files

gau automatically looks for a configuration file at $HOME/.gau.toml or%USERPROFILE%\.gau.toml. You can point to a different configuration file using the --config flag. If the configuration file is not found, gau will still run with a default configuration, but will output a message to stderr.

You can specify options and they will be used for every subsequent run of gau. Any options provided via command line flags will override options set in the configuration file.

An example configuration file can be found here

Installation:

From source:

root@kitploit:~
$ go install github.com/lc/gau/v2/cmd/gau@latest

From github :

root@kitploit:~
git clone https://github.com/lc/gau.git; \
cd gau/cmd; \
go build; \
sudo mv gau /usr/local/bin/; \
gau --version;

From binary:

You can download the pre-built binaries from the releases page and then move them into your $PATH.

root@kitploit:~
$ tar xvf gau_2.0.6_linux_amd64.tar.gz
$ mv gau /usr/bin/gau

From Docker:

You can run gau via docker like so:

root@kitploit:~
docker run --rm sxcurity/gau:latest --help

You can also build a docker image with the following command

root@kitploit:~
docker build -t gau .

and then run it

root@kitploit:~
docker run gau example.com

Bear in mind that piping command (echo "example.com" | gau) will not work with the docker container

ohmyzsh note:

ohmyzsh's git plugin has an alias which maps gau to the git add --update command. This is problematic, causing a binary conflict between this tool "gau" and the zsh plugin alias "gau" (git add --update). There is currently a few workarounds which can be found in this Github issue.

Useful?

Buy Me A Coffee

Donate to CommonCrawl
Donate to the InternetArchive

Download Tool
FlagDescriptionExample
--blacklistlist of extensions to skipgau --blacklist ttf,woff,svg,png
--configUse alternate configuration file (default $HOME/config.toml or %USERPROFILE%\.gau.toml)gau --config $HOME/.config/gau.toml
--fclist of status codes to filtergau --fc 404,302
--fromfetch urls from date (format: YYYYMM)gau --from 202101
--ftlist of mime-types to filtergau --ft text/plain
--fpremove different parameters of the same endpointgau --fp
--jsonoutput as jsongau --json
--mclist of status codes to matchgau --mc 200,500
--mtlist of mime-types to matchgau --mt text/html,application/json
--ofilename to write results togau --o out.txt
--providerslist of providers to use (wayback,commoncrawl,otx,urlscan)gau --providers wayback
--proxyhttp proxy to use (socks5:// or http://gau --proxy http://proxy.example.com:8080
--retriesretries for HTTP clientgau --retries 10
--timeouttimeout (in seconds) for HTTP clientgau --timeout 60
--subsinclude subdomains of target domaingau example.com --subs
--threadsnumber of workers to spawngau example.com --threads
--tofetch urls to date (format: YYYYMM)gau example.com --to 202101
--verboseshow verbose outputgau --verbose example.com
--versionshow gau versiongau --version