Endpoint Discovery
endpoint_discoveryDiscover known URLs for a domain by querying public archives like Wayback, Common Crawl, and URLScan without touching the target. Optionally add a shallow crawl to enrich sparse results.
Instructions
Collect known URLs for a domain from public archives.
Sources: gau (Wayback + Common Crawl + URLScan), waybackurls, waymore. These query archives, not the target, so they cost the program nothing.
include_crawl adds a shallow katana crawl, which does touch the target — keep it off unless the archives came back thin.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | ||
| include_crawl | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||