gau (getallurls)
Fetch known URLs from web archives.
KaliParrotpassive
pkg: gau
gau pulls URLs a domain has exposed from the Wayback Machine, Common Crawl and others — a goldmine for endpoints/params.
Syntax
gau {domain}
Example
echo example.com | gau
Lists historical URLs for the domain to mine for endpoints and parameters.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
gau
Usage examples
echo target.tld | gau
Fetch known URLs from web archives.
gau --subs target.tld | grep "="
Get parameterised URLs incl. subdomains.
Advantages
- Surfaces forgotten endpoints/params
- Passive, fast
Disadvantages
- Lots of noise/dead URLs
- Needs filtering
Tags
#urls#recon#wayback
Official docs: gau ↗
Related commands
Frequently asked questions
What is gau (getallurls) used for?
gau pulls URLs a domain has exposed from the Wayback Machine, Common Crawl and others — a goldmine for endpoints/params.
What is an example gau (getallurls) command?
A common example is: echo example.com | gau — Lists historical URLs for the domain to mine for endpoints and parameters.
Is gau (getallurls) part of Kali Linux?
Yes. gau (getallurls) ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install gau.
What category of security tool is gau (getallurls)?
gau (getallurls) is a Information Gathering tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.