# devanshbatham/ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

Repository: https://github.com/devanshbatham/ParamSpider
Canonical: https://ross.abutalabs.com/products/paramspider
Language: Python
License: MIT
License Family: permissive
Topics: parameter-finder, parameter, bugbounty, content-discovery, osint, fuzzing, urls-parameters
Last push: 2026-03-07T16:16:48+00:00

## Health v2 (maintenance only)
Score: 55/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 71, release rhythm 8, longevity 100
- inputs: {"age_days": 2334, "days_push": 179, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3160, forks 481 (observed 2026-08-28T04:07:46.534077+00:00)

## What it is
ParamSpider is a Python CLI tool that mines URLs for a domain or list of domains from web archives (Wayback Machine), filtering out uninteresting URLs. It supports proxies and placeholder injection for parameter values, aimed at bug bounty recon and fuzzing workflows.

## Use cases
- find hidden urls for a domain from web archives
- discover parameters for bug bounty recon
- collect urls to fuzz with ffuf
- enumerate archived endpoints for a domain list
- osint url discovery for a target

## When to choose
- you need historical/archived URLs for a target domain without actively crawling it
- you want parameterized URLs with a FUZZ placeholder for fuzzing tools
- you're doing bug bounty or security reconnaissance

## When to avoid
- you need live crawling of a site's current pages rather than archived URLs
- you need a GUI or non-CLI workflow
- you want vulnerability scanning rather than URL discovery

## Facets
- artifact type: cli-tool
- maturity: active
- function: web-scraping, search-engine, cli, developer-tools
- domain: security, osint, crawlers
- platform: python, cli, windows
- tags: bug-bounty, wayback-machine, url-discovery, fuzzing, recon, parameter-discovery, command-line, linux, macos

## Member repositories
- devanshbatham/ParamSpider (main) score 55

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:46.534077+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:25:15.672698+00:00, confidence not recorded.
  - readme: https://github.com/devanshbatham/ParamSpider (fetched 2026-08-28T04:07:46.534077+00:00, sha 5b56a4050495)
- Data as of 2026-08-30T08:39:29.467469+00:00.