# ParamSpider | Mining Parameters From Dark Corners Of Web Archives **URL:** \ **Category:** Tools & Scripts\ **Tags:** tools, technology, file-management\ **Created:** [July 12, 2020, 12:01pm UTC](https://onehack.st/t/paramspider-mining-parameters-from-dark-corners-of-web-archives/96094 "2020-07-12T12:01:34Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Post date:** [July 12, 2020, 12:01pm UTC](https://onehack.st/t/paramspider-mining-parameters-from-dark-corners-of-web-archives/96094/1 "2020-07-12T12:01:35Z")
![image](https://onehack.st/uploads/default/original/3X/7/0/7003673c4fcaf7abe3e0abdffa1377accdbdbb6a.png) ParamSpider : Parameter miner for humans. **Key Features :** - Finds parameters from web archives of the entered domain. - Finds parameters from subdomains as well. - Gives support to exclude urls with specific extensions. - Saves the output result in a nice and clean manner. - It mines the parameters from web archives (without interacting with the target host) **Usage instructions :** ```auto Note : Use python 3.7+$ git clone https://github.com/devanshbatham/ParamSpider$ cd ParamSpider$ pip3 install -r requirements.txt$ python3 paramspider.py --domain hackerone.com ``` **Usage options :** ```auto 1 - For a simple scan [without the --exclude parameter]$ python3 paramspider.py --domain hackerone.com-> Output ex : https://hackerone.com/test.php?q=FUZZ2 - For excluding urls with specific extensions$ python3 paramspider.py --domain hackerone.com --exclude php,jpg,svg3 - For finding nested parameters$ python3 paramspider.py --domain hackerone.com --level high-> Output ex : https://hackerone.com/test.php?p=test&q=FUZZ4 - Saving the results$ python3 paramspider.py --domain hackerone.com --exclude php,jpg --output hackerone.txt5 - Using with a custom placeholder text (default is FUZZ), e.g. don't add a placeholder$ python3 paramspider.py --domain hackerone.com --placeholder FUZZ26 - Using the quiet mode (without printing the URLs on screen)$ python3 paramspider.py --domain hackerone.com --quiet7 - Exclude subdomains [for parameters from domain+subdomains, do not spe cify this argument]$ python3 paramspider.py --domain hackerone.com --subs False ``` **ParamSpider + GF (for massive pwnage)** Lets say you have already installed ParamSpider and now you want to filter out the juicy parameters from plethora of parameters. No worries you can easily do it using [GF(by tomnomnom)](https://github.com/tomnomnom/gf) . **Note** : Make sure you have [go](https://golang.org/doc/install) properly installed on your machine . **Follow along this :** ```auto $ go get -u github.com/tomnomnom/gf$ cp -r $GOPATH/src/github.com/tomnomnom/gf/examples ~/.gfNote : Replace '/User/levi/go/bin/gf' with the path where gf binary is located in your system.$ alias gf='/User/levi/go/bin/gf'$ cd ~/.gf/Note : Paste JSON files(https://github.com/devanshbatham/ParamSpider/tree/master/gf_profiles) in ~/.gf/ folderNow run ParamSpider and navigate to the output directory$ gf redirect domain.txt //for potential open redirect/SSRF parameters$ gf xss domain.txt //for potential xss vulnerable parameters$ gf potential domain.txt //for xss + ssrf + open redirect parameters$ gf wordpress domain.txt //for wordpress urls[More GF profiles to be added in future] ``` **Example :** ```auto $ python3 paramspider.py --domain bugcrowd.com --exclude woff,css,js,png,svg,php,jpg --output bugcr ``` ![image](https://onehack.st/uploads/default/original/3X/2/6/267ee42b42a8bccd51edcdf86ea0dc3d98345ea1.png) **Note :** ```auto As it fetches the parameters from web archive data ,so chances of false positives are high. ``` **Contributing to ParamSpider :** - Report bugs , missing best practices - Shoot my [DM](https://twitter.com/0xAsm0d3us) with new ideas - Make more GF profiles (.json files) - Help in Fixing bugs - Submit Pull requests ## GitHub: > **[GitHub - devanshbatham/ParamSpider: Mining URLs from dark corners of Web Archives for...](https://github.com/devanshbatham/ParamSpider)** > > Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing