is a fast and efficient tool for creating wordlists from historical URLs fetched via the Wayback Machine. You can use it with tools like ffuf for web fuzzing and other security testing tasks.

Concurrency: Make multiple requests simultaneously for faster processing.
URL Filtering: Exclude specific URL patterns using regex.
Path Separation: Optionally split URL paths into distinct components.
Status Code: specify a comma-separated list of status codes (e.g., -mc 200,403).

go install -v github.com/Vulnpire/wayfuzz@latest

Clone the repo

git clone https://github.com/Vulnpire/wayfuzz

And build

go build -o wayfuzz wayfuzz.go

This will create an executable named wayfuzz.

You can use wayfuzz by piping in a list of domains via stdin:

cat domains.txt | wayfuzz [options]

-c <int>: Set the number of concurrent requests (default: 10).
-x <regex>: Exclude URLs matching the regex pattern (e.g., .jpg|.png).
-sed: Split the URL paths by / and output each component separately.
-mc <codes>: Filter URLs by status codes (comma-separated list, e.g., 200,403).

Exclude URLs that end in .jpg or .png:

cat domains.txt | wayfuzz -c 50

Exclude Specific URL Patterns:

cat domains.txt | wayfuzz -c 50 -x ".jpg|.png"

Separate URL Paths by /

cat domains.txt | wayfuzz -c 50 -sed

Filter by Status Codes

cat domains.txt | wayfuzz -c 50 -mc 200,403

ffuf is a web fuzzing tool that can be combined with wayfuzz for discovering hidden files, directories, and parameters on a web server.

cat domains.txt | wayfuzz -c 50 | ffuf -u https://target.com/FUZZ -w -

If you want to fuzz URL parameters, you can generate a wordlist of all unique URL components:

cat domains.txt | wayfuzz -c 50 -sed | ffuf -u https://target.com/path?FUZZ=value -w -

Creating the wordlist:

echo "hackerone.com" | wayfuzz -c 300 -mc 200 -sed -x ".jpg|.png|.jpeg|..." | anew wordlist.txt

Getting the IP addresses from Shodan:

echo "hackerone.com" | sXtract | anew ips.txt

Fuzzing the IPs:

cat ips.txt | xargs -I@ sh -c 'ffuf -w ./wordlist.txt -u @/FUZZ -mc 200 -c -recursion -recursion-depth 5 -ac -t 300' Or just use Axiom to fuzz quickly.