Termux Tools Logo

Termux Tools & Commands

Install as App • Fast Access

Install Termux Tools as an app on your phone for faster access and better experience.

ParamSpider – URL Parameter Discovery & Web Recon Tool

ParamSpider is a simple reconnaissance tool that helps you discover hidden URL parameters from archived web sources. It collects parameterized URLs, organizes the results, and saves them into a file for future testing. It is useful for web reconnaissance, bug bounty hunting, and finding URLs with GET parameters.

Here’s what you can do with ParamSpider in Termux:

  • Find URL parameters from archived URLs.
  • Collect URLs from public web archives.
  • Discover hidden GET parameters.
  • Save discovered URLs to a file.
  • Perform web reconnaissance.
  • Prepare targets for bug bounty testing.

Install ParamSpider in Termux

Installing ParamSpider in Termux is simple. Run the commands below one by one to install the tool and prepare it for parameter discovery.

Update Termux packages.

pkg update && pkg upgrade -y

Install Git and Python.

pkg install git python -y

Clone the ParamSpider repository.

git clone https://github.com/devanshbatham/paramspider.git

Move into the project directory.

cd paramspider

Install ParamSpider.

pip install .

ParamSpider is now installed and ready to use.

Use ParamSpider in Termux

After installing ParamSpider, run the tool with a target domain to collect archived URLs and discover URL parameters.

Display the help menu.

paramspider -h

Scan a target domain.

paramspider -d example.io

Scan multiple domains from a file.

paramspider -l domains.txt

Stream discovered URLs directly in the terminal.

paramspider -d example.io -s

Use a proxy.

paramspider -d example.io --proxy http://127.0.0.1:8080

Use a custom placeholder instead of FUZZ.

paramspider -d example.io -p TEST

After scanning a domain, ParamSpider automatically displays the scan progress.

[INFO] Fetching URLs for example.io
[INFO] Found 781 URLs for example.io
[INFO] Cleaning URLs for example.io
[INFO] Found 153 URLs after cleaning
[INFO] Extracting URLs with parameters
[INFO] Saved cleaned URLs to results/example.io.txt

All discovered URLs are automatically saved inside the results directory.

View the project files.

ls

Example output:

Dockerfile  build                 results
LICENSE     paramspider           setup.py
README.md   paramspider.egg-info  static

Open the results directory.

cd results

List the saved result files.

ls

Example output:

example.io.txt

View the extracted URLs with parameters.

cat example.io.txt

Example output:

https://example.io/wp-json/oembed/1.0/embed?url=FUZZ
https://example.io/wp-login.php?redirect_to=FUZZ&reauth=FUZZ
https://example.io/?p=FUZZ
https://example.io/wp-json/oembed/1.0/embed?url=FUZZ&format=FUZZ

ParamSpider automatically collects archived URLs, extracts parameterized URLs, and saves the output in the results directory. You can access the saved files anytime by using the cd results command.

SHARE THIS POST: