[Name]

wayparam

[Version]

0.4.0

Git tag: v0.4.0

[Homepage]

https://aleff-github.github.io/wayparam/

Source repository:
https://github.com/aleff-github/wayparam

[Download]

Tagged release:
https://github.com/aleff-github/wayparam/releases/tag/v0.4.0

Source archive:
https://github.com/aleff-github/wayparam/archive/refs/tags/v0.4.0.tar.gz

Pre-built Debian packages are also attached to the GitHub release.

[Author]

Aleff

[Licence]

GNU General Public License v3.0 (GPL-3.0)

[Description]

wayparam is a passive OSINT and reconnaissance tool for discovering historical parameterized URLs through the Internet Archive Wayback CDX API.

It does not crawl or actively scan the target. Instead, it queries archived public data, removes static/noisy URLs and canonicalizes the resulting URLs so that query parameter values can be replaced with a configurable placeholder (FUZZ by default).

The resulting output is designed to be directly usable in penetration-testing and bug-bounty reconnaissance pipelines.

Main features include:

• Passive URL discovery through the Wayback CDX API
• Single-domain and multi-domain input
• Optional subdomain discovery
• Query parameter normalization using a configurable placeholder
• URL canonicalization and deduplication
• Static asset filtering using extension blacklists/whitelists
• Optional path-regex filtering
• Tracking-parameter removal
• Date-range and CDX filtering
• Asynchronous multi-domain processing
• Configurable concurrency and rate limiting
• Retry/backoff handling
• Proxy support
• Plain-text and JSONL output
• Clean stdout/stderr separation for Unix pipelines
• Per-domain output files or direct stdout streaming
• A lossless CDX block-pagination mode to avoid losing entries at pagination boundaries when collapse is enabled
• Man page and Debian packaging

An optional local web interface exists as a separate package, but the wayparam CLI has no dependency on it.

[Why it would be useful in Kali]

wayparam is intended specifically for the reconnaissance phase of authorized penetration tests, security research and bug-bounty workflows.

A common workflow is to retrieve historical URLs, identify endpoints containing query parameters and feed those endpoints into additional security-testing tools.

wayparam produces normalized, deterministic and machine-readable output specifically for this use case.

For example:

wayparam -d example.com --stdout --no-files

produces normalized parameterized URLs directly on stdout, allowing them to be piped into other security tooling.

The tool is passive with regard to the assessed target because the requests are sent to the Internet Archive rather than the target itself.

[Dependencies]

Runtime:

• Python >= 3.9
• python3-httpx >= 0.26.0

Debian build dependencies:

• debhelper-compat (= 13)
• dh-python
• python3-all
• python3-setuptools
• pybuild-plugin-pyproject
• python3-httpx >= 0.26.0

The project is architecture-independent.

[Similar tools]

Some related tools already available in Kali include:

• ParamSpider
• getallurls (gau)
• waybackpy

There is intentional overlap in the general area of historical URL discovery, but wayparam focuses specifically on producing normalized parameterized endpoints for security-testing pipelines.

Compared with general URL collectors such as gau, wayparam focuses on Wayback CDX retrieval, URL filtering, deterministic canonicalization and query-parameter normalization.

Compared with ParamSpider, wayparam is a complete rewrite with asynchronous I/O, configurable rate limiting/concurrency, JSONL output, clean stdout/stderr separation, proxy support, CDX filtering/date ranges, multi-domain operation and more robust CDX pagination.

Compared with waybackpy, which is a general-purpose Python interface to several Wayback Machine APIs, wayparam is designed around security reconnaissance and parameterized-endpoint discovery.

[Activity]

The project is actively maintained.

The current stable release is v0.4.0.

The repository contains automated tests, release automation, Debian packaging, a man page and documentation.

Recent releases:

• v0.4.0
• v0.3.1
• v0.3.0

[How to install]

A Debian package for the tagged v0.4.0 release is available:

wget https://github.com/aleff-github/wayparam/releases/download/v0.4.0/wayparam_0.4.0-1_all.deb

sudo apt install ./wayparam_0.4.0-1_all.deb

The tagged source release contains a debian/ directory and can also be built as a Debian package using the standard Debian packaging toolchain.

The Python package can alternatively be installed from the tagged release with pip/pipx.

[How to use]

Basic passive discovery for one domain:

wayparam -d example.com

Stream normalized URLs directly to stdout:

wayparam -d example.com --stdout --no-files

Include subdomains:

wayparam -d example.com --include-subdomains

Produce JSONL output:

wayparam -d example.com --stdout --no-files --format jsonl

Limit the request rate and concurrency:

wayparam -d example.com --rps 1 --concurrency 2

Use a proxy:

wayparam -d example.com --proxy http://127.0.0.1:8080

Query multiple domains:

wayparam -l domains.txt

[Packaged]

Yes, Debian packaging is included upstream in the debian/ directory.

The source package currently produces two binary packages:

• wayparam — the CLI and man page
• wayparam-gui — optional local web interface

Pre-built .deb packages are automatically attached to tagged GitHub releases.

wayparam is not currently part of the official Debian archive.