ParamSpider
Mine parameters from web archives.
KaliParrotpassive
pkg: paramspider
ParamSpider extracts URLs with parameters from archive data — a passive way to find injection points.
Syntax
paramspider -d {domain}
Example
paramspider -d example.com
Collects parameterised URLs from archives for fuzzing.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
paramspider
Usage examples
paramspider -d target.tld
Mine parameterised URLs from archives.
Advantages
- Passive parameter discovery
- Feeds fuzzers
Disadvantages
- Archive coverage varies
- Dead URLs
Tags
#web#parameters
Official docs: ParamSpider ↗
Related commands
Frequently asked questions
What is ParamSpider used for?
ParamSpider extracts URLs with parameters from archive data — a passive way to find injection points.
What is an example ParamSpider command?
A common example is: paramspider -d example.com — Collects parameterised URLs from archives for fuzzing.
Is ParamSpider part of Kali Linux?
Yes. ParamSpider ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install paramspider.
What category of security tool is ParamSpider?
ParamSpider is a Web Application tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.