$ man wayback
Wayback Machine (CDX API)
Every URL of your site the Internet Archive has seen - including the ones you forgot.
osint / reconpassive / local only
⚠ Recon your own assets, or targets you have written permission to test. Passive OSINT reads public data, but using it to target someone else's systems can still be illegal or against their terms. Examples on this site use example.com placeholders.
## why a developer should care
Old endpoints, old JavaScript files, URLs with parameters. Things you removed from the UI years ago are often still live on the server.
## shortcuts
# All archived URLs for a domain
$ curl -s "https://web.archive.org/cdx/search/cdx?url={{target}}/*&fl=original&collapse=urlkey" | sort -u# Only URLs with parameters (inputs to test)
$ curl -s "https://web.archive.org/cdx/search/cdx?url={{target}}/*&fl=original&collapse=urlkey" | grep '?' | sort -u