devanshbatham / archivefuzz

Hunt down the secrets from the WebArchives for Fun and Profit

ArchiveFuzz : hunt the archives

What the heck is this thing ?

ArchiveFuzz hunts down the archived data(subdomains/emails/API keys) of domains. Web archiving is the process of collecting portions of the World Wide Web to ensure the information is preserved in an archive for future researchers, historians, and the public.

This tool uses webarchive's cdx to enumerate Emails/Subdomains/IPs/API tokens .

But why ?

I initially made ArchiveFuzz for my personal use , Now making it public . This really helped me a lot , Good luck finding potential assets with this <3

Example

Lets scan example.com for archived secrets :

python3 archivehunter.py mail.ru

Compatibility

It works on anything that has python installed

Installation

note : it only works with python3.+

mkdir Archive-Fuzz

cd Archive-Fuzz

git clone https://github.com/devanshbatham/ArchiveFuzz

virtualenv env

source env/bin/activate

cd ArchiveFuzz

pip install -r requirements.txt

python3 archivefuzz.py example.com

TODO

Implementing checks for more API keys that are passed in GET requests.

Wanna show support for the tool ?

I will be more than happy if you will show some love for Animals by donating to Animal Aid Unlimited ,Animal Aid Unlimited saves animals through street animal rescue, spay/neuter and education. Their mission is dedicated to the day when all living beings are treated with compassion and love. ✨

archivefuzz's Issues

[REGEX ISSUE] False Positives while email enumeration

Well , in some cases this produces false positives while dealing with emails .

What the issue is ?
My current regex matches "[email protected]" , "[email protected]" , "[email protected]" as valid emails but they arnt valid emails , however I created a blacklisted pattern (but ofcourse it is not possible to blacklist all the false positive possibilities)

Steps to reproduce
python3 archivefuzz.py webflow.com

email output :

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[e-mail]

My current Regex and blacklisting pattern is :

"Email": [
            "([a-zA-Z0-9+._-]+@[a-zA-Z0-9._-]+\.[a-zA-Z0-9_-]{2,7})",
            "(-p-|mp4|webm|JPG|pdf|html|jpg|jpeg|png|gif|bmp|svg|1x|2x|3x|4x|5x|6x|7x|9x|10x|11x|12x|13x|14x|15x)"
            ],

I need to improve my regex, tried different flavors , still not able to remove all the false positives !

Help needed !

Thanks

Working fine but .....

Why it couldn't found my DDNS from noip.com ??

404......... ddns.net

subdomain result wrong

its subdomain result showing wrong