readme.md 1.78 KB
Newer Older
Nong Hoang Tu's avatar
Nong Hoang Tu committed
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
# ArchiveFuzz : hunt the archives

![ArchiveFuzz](static/banner.PNG)
# What the heck is this thing ? 

ArchiveFuzz hunts down the archived data(subdomains/emails/API keys) of domains. **Web archiving** is the process of collecting portions of the [World Wide Web](https://en.wikipedia.org/wiki/World_Wide_Web "World Wide Web") to ensure the information is [preserved](https://en.wikipedia.org/wiki/Digital_preservation "Digital preservation") in an [archive](https://en.wikipedia.org/wiki/Archive "Archive") for future researchers, historians, and the public.

This tool uses webarchive's cdx to enumerate Emails/Subdomains/IPs/API tokens .

# But why ?
I initially made ArchiveFuzz for my personal use , Now making it public . This really helped me a lot , Good luck finding potential assets with this <3 

# Example

Lets scan example.com for archived secrets :

`python3 archivehunter.py mail.ru`


![example](https://raw.githubusercontent.com/devanshbatham/ArchiveFuzz/master/static/mailru-example.PNG)

# Compatibility
**It works on anything that has python installed** 

# Installation
`note : it only works with python3.+`

`mkdir Archive-Fuzz`

`cd Archive-Fuzz`

`git clone https://github.com/devanshbatham/ArchiveFuzz`

`virtualenv env `

`source env/bin/activate`

`cd ArchiveFuzz`

`pip install -r requirements.txt`

`python3 archivefuzz.py example.com`

# TODO
Implementing checks for more API keys that are passed in GET requests.

# Wanna show support for the tool ?

**I will be more than happy if you will show some love for Animals by donating to [Animal Aid Unlimited](https://animalaidunlimited.org/)** **,Animal Aid Unlimited saves animals through street animal rescue, spay/neuter and education. Their mission is dedicated to the day when all living beings are treated with compassion and love.**