xnLinkFinder

No entries match these filters. Clear filters

1. v8.1 Jan 15, 2026 · release notes

   xnLinkFinder v8.1 adds request proxying via -rp with support for HTTP, HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate., SOCKS4/5SOCKS4/5A proxy protocol that relays TCP connections (and UDP in version 5) through an intermediary host, letting cyber tools tunnel traffic through firewalls or pivot points without needing IP-level routing., and proxy-list files.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v8.1 https://github.com/xnl-h4ck3r/xnLinkFinder.git
   # already have the repo? check out this version:
   $ git checkout v8.1

   └──▷ TRY IT
   Route all xnLinkFinder requests through Burp Suite to inspect or intercept traffic during a recon run.
   copy

   $ xnLinkFinder -i https://example.com -rp http://127.0.0.1:8080

   Rotate through a list of SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxies to distribute recon traffic and avoid rate-limiting.
   copy

   $ xnLinkFinder -i https://example.com -rp proxies.txt

   • New -rp/--request-proxy argument supports proxying requests through a single proxy string (HTTP, HTTPS, SOCKS4, SOCKS5) or a file containing a list of proxies with random selection.
   • Proxy value validation ensures -rp inputs have a recognized scheme before use.
   • The -fp/--forward-proxy mode now runs in a background thread, letting link processing continue while proxying is active, and now proxies ALL discovered full links — not only outbound requests.

   3 details in Everything

2. v8.0 Jan 14, 2026 · release notes

   xnLinkFinder v8.0 adds secrets detection output with -os, surfacing AWS keys, JWTsJWTsJSON Web Tokens — an open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object. Cyber tools use them for stateless authentication without server-side session storage., OAuth tokens, and more in JSON.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v8.0 https://github.com/xnl-h4ck3r/xnLinkFinder.git
   # already have the repo? check out this version:
   $ git checkout v8.0

   └──▷ TRY IT
   Crawl a target and dump all detected secrets (AWS keys, JWTs, Stripe keys, etc.) to a JSON file for triage alongside your link output.
   copy

   $ python3 xnLinkFinder.py -i https://example.com -o links.txt -os secrets.json

   • New -os / --output-secrets argument writes discovered secrets to a JSON file, grouped by type and value with source URLs and counts.
   • Detects AWS Keys (AKIA...), GitHub Tokens (ghp_, gho_, ghu_, ghs_, github_pat_), Google API Keys (AIza...), JWTs (eyJ...), OAuth/Bearer Tokens, Private Keys (RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it., DSA, EC, OpenSSH, PGP), Slack Webhooks, Stripe Keys (sk_live_, rk_live_), database connection strings (MongoDB, PostgreSQL, MySQL), cloud provider keys (Azure, DigitalOcean, Heroku), and generic high-entropy API tokens from responses and files.

   2 details in Everything

3. v7.18 Jan 8, 2026 · release notes

   xnLinkFinder v7.18 adds configurable max response size and streaming HTTP to skip large/binary files automatically.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v7.18 https://github.com/xnl-h4ck3r/xnLinkFinder.git
   # already have the repo? check out this version:
   $ git checkout v7.18

   └──▷ TRY IT
   Cap bandwidth consumption during a large crawl by skipping any response over 10 MB — useful when targeting hosts that serve large binary assets.
   copy

   $ xnLinkFinder -i https://example.com -mrs 10

   • New -mrs / --max-response-size argument sets the maximum response size in MB (default: 100 MB); responses exceeding this limit are skipped.
   • HTTP requests now use streaming to inspect Content-Length and Content-Type headers before downloading, automatically skipping large or binary-content responses (e.g., .pth, .bin, .exe, archives).
   • Faster startup via lazy-loading of heavy imports (playwright, tldextract, inflect) and deferred PDF-related checks — each loaded only when the relevant feature is actually used.

   3 details in Everything

4. v7.16 Jan 7, 2026 · release notes

   xnLinkFinder v7.16 adds BeautifulSoup-powered readable HTML parsing and a new -ro flag to extract only human-visible links.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v7.16 https://github.com/xnl-h4ck3r/xnLinkFinder.git
   # already have the repo? check out this version:
   $ git checkout v7.16

   └──▷ TRY IT
   Hunt for outbound links on a blog without picking up the blog platform's own JS/CSS infrastructure links.
   copy

   $ xnLinkFinder -i https://target-blog.example.com -ro -d target-blog.example.com

   • Adds BeautifulSoup-based readable HTML extraction that strips <script>, <style>, <noscript>, and <template> tags before searching for links, surfacing encoded URLs that raw parsing misses.
   • New -ro/--readable-only flag restricts link extraction to human-visible page content, filtering out JS/CSS links — useful when hunting domain-specific links in blogs or CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly.-heavy sites.

   2 details in Everything

5. v7.15 Jan 7, 2026 · release notes

   xnLinkFinder v7.15 adds OCROCROptical character recognition, converting text in an image or scanned document into machine-readable characters. It lets software search or process text that was stored as pixels. fallback for scanned PDFs and smarter PDF detection via magic bytes.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v7.15 https://github.com/xnl-h4ck3r/xnLinkFinder.git
   # already have the repo? check out this version:
   $ git checkout v7.15

   • Adds OCR fallback using ocrmypdf to extract links from scanned or image-only PDFs when pdftotext and pypdf yield no text.
   • Supports PDF link extraction when a directory or a single .pdf file is passed directly as input.

   2 details in Everything

6. v7.14 Jan 6, 2026 · release notes

   xnLinkFinder v7.14 adds PDF link extraction via pdftotext or pypdf fallback.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v7.14 https://github.com/xnl-h4ck3r/xnLinkFinder.git
   # already have the repo? check out this version:
   $ git checkout v7.14

   • Extracts links and parameters from PDF files by converting .pdf URL responses to text using pdftotext (if installed) or the pypdf Python library as a fallback.

   1 detail in Everything

7. v7.13 Jan 6, 2026 · release notes

   xnLinkFinder v7.13 adds HTTP Keep-Alive via persistent sessions and per-worker session init for faster multi-URL crawling.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v7.13 https://github.com/xnl-h4ck3r/xnLinkFinder.git
   # already have the repo? check out this version:
   $ git checkout v7.13

   • Implements HTTP Keep-Alive by reusing requests.Session objects across requests, reducing TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it./TLS handshake overhead when crawling multiple URLs on the same host.
   • Adds init_worker function to initialize a persistent requests.Session in each worker process under multiprocessing, improving throughput in parallel crawls.

   2 details in Everything

8. v7.12 Jan 3, 2026 · release notes

   xnLinkFinder v7.12 adds --heap to capture browser heap snapshots via Playwright and extract dynamically generated links from memory.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v7.12 https://github.com/xnl-h4ck3r/xnLinkFinder.git
   # already have the repo? check out this version:
   $ git checkout v7.12

   └──▷ TRY IT
   Discover dynamically generated links on a target that would be invisible to static scraping — useful for SPAs or apps that build URLs at runtime.
   copy

   $ python xnLinkFinder.py -i https://example.com --heap

9. v7.9 Dec 17, 2025 · release notes

   xnLinkFinder v7.9 improves wordlist generation with the inflect library for accurate singular/plural variations.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v7.9 https://github.com/xnl-h4ck3r/xnLinkFinder.git
   # already have the repo? check out this version:
   $ git checkout v7.9

   • Replaces rule-based plural handling with the inflect library, correctly generating irregular plurals (child→children, person→people), -f/-fe words (knife→knives, leaf→leaves), and Latin/Greek plurals (analysis→analyses, criterion→criteria) in wordlist output.

   1 detail in Everything

10. v7.8 Dec 15, 2025 · release notes

    xnLinkFinder v7.8 adds HARHARAn HTTP Archive file, a JSON-format log of all network requests and responses captured by a browser's developer tools, used by cyber tools to replay, inspect, or analyze web traffic without re-running a live session. file support, enabling link and parameter extraction from recorded browser sessions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v7.8 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v7.8

    └──▷ TRY IT
    Extract links and parameters from a recorded browser session exported as a HAR file — useful for mapping attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. from authenticated app traffic.
    copy

    $ xnLinkFinder -i session.har

    • Supports HAR (HTTP Archive) files as input via -i, extracting links and parameters from both requests and responses.

    1 detail in Everything

11. v7.7 Dec 15, 2025 · release notes

    xnLinkFinder v7.7 now searches proxy Request data (not just Responses) for links and parameters.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v7.7 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v7.7

    • Adds link and parameter extraction from proxy Request data in addition to Responses when a proxy file is passed as input.

    1 detail in Everything

12. v7.5 Dec 11, 2025 · release notes

    xnLinkFinder v7.5 adds unicode/percent-encoded domain detection and intelligent chunking for large responses.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v7.5 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v7.5

    • Supports unicode and percent-encoded characters in domain matching, catching domains like thisätest.com and this%C3%A4test.com.
    • Adds automatic content chunking for responses over 50KB, splitting into overlapping 40KB chunks with 5KB overlap to ensure complete link discovery without regex timeouts.

    2 details in Everything

13. v7.3 Oct 17, 2025 · release notes

    xnLinkFinder v7.3 adds domain-format detection so domain-only input files are correctly processed as URL inputs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v7.3 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v7.3

    • Adds is_domain_format() function to detect domain/subdomain-formatted lines (e.g., example.com, sub.example.com, example.co.uk), enabling input files and STDIN starting with bare domains to be correctly identified and processed as URL files rather than content files.

    1 detail in Everything

14. v7.1 Oct 8, 2025 · release notes

    xnLinkFinder v7.1 adds configurable request retries with automatic back-off on 429/5xx errors.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v7.1 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v7.1

    └──▷ TRY IT
    Scrape a target that rate-limits aggressively by retrying up to 5 times on 429 or transient 5xx errors before giving up.
    copy

    $ xnLinkFinder -i https://target.example.com -r 5

    • New -r/--retries argument lets you specify up to 5 automatic retries on timeout, connection error, or HTTP 429/500/502/503/504 responses.
    • New HTTPAdapter automatically retries failed requests the specified number of times without extra scripting.

    2 details in Everything

15. v7.0 Sep 30, 2025 · release notes

    xnLinkFinder v7.0 adds rate limiting and broader HTML form field parameter extraction.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v7.0 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v7.0

    └──▷ TRY IT
    Crawl a target while staying within a bug bounty program's stated rate limit to avoid being blocked or violating scope rules.
    copy

    $ python3 xnLinkFinder.py -i https://target.example.com -rl 5

    • New -rl/--rate-limit flag sets a maximum requests-per-second cap to respect bug bounty scope rate limits.
    • When respParamInputField is enabled in config.yml, parameter names are now extracted from <select> and <button> HTML fields in addition to <input> and <textarea>.

    2 details in Everything

16. v6.17 Sep 29, 2025 · release notes

    xnLinkFinder v6.17 adds SPA hash-route link extraction and filters out ellipsis-prefixed false positives.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.17 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.17

    • Extracts links starting with #/ to surface hash-based routing endpoints in single-page applications (e.g., AngularJS).
    • Automatically excludes links starting with ... to reduce noise from false-positive matches.

    2 details in Everything

17. v6.15 Apr 21, 2025 · release notes

    xnLinkFinder v6.15 extracts potential links from S3 bucket file listings via <Key> XML tags.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.15 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.15

18. v6.14 Apr 13, 2025 · release notes

    xnLinkFinder now extracts parameter names from textarea fields and searches JS responses when respParamInputField is enabled.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.14 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.14

    • Expands respParamInputField extraction to include HTML textarea fields in addition to input fields.
    • Extends respParamInputField response scanning to JavaScript content types, catching parameters built dynamically in JS code.

    2 details in Everything

19. v6.13 Mar 19, 2025 · release notes

    xnLinkFinder v6.13 improves Waymore mode: supports new waymore_index.txt format and enables depth-0 link extraction from index files.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.13 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.13

    └──▷ TRY IT
    Run Waymore mode with depth 0 to extract links only from the waymore index file without recursing into subdirectories.
    copy

    $ xnLinkFinder -i <waymore_output_dir> -d 0

    • Supports both waymore_index.txt (waymore v6.0+) and legacy index.txt (pre-v6.0) index file formats in Waymore mode.
    • Extracts links from the waymore index file even when -d/--depth is set to 0 in Waymore mode.
    • Displays the -d/--depth parameter value in -vv verbose output when a directory is passed as input.

    3 details in Everything

20. v6.9 Mar 4, 2025 · release notes

    xnLinkFinder v6.9 auto-detects URL lists vs. raw file content when using -i/--input.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.9 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.9

    • Adds auto-detection for -i/--input files: if the first line starts with // or http, the file is processed as a URL list; otherwise its content is searched for links (Burp/Zap/Caido files remain handled as before).

    1 detail in Everything

21. v6.8 Feb 28, 2025 · release notes

    xnLinkFinder v6.8 adds Content-Length display during crawling to quickly spot heavy or anomalous responses.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.8 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.8

    └──▷ TRY IT
    Surface large or unexpected responses (e.g. admin pages returning full content) while crawling a target.
    copy

    $ python3 xnLinkFinder.py -i https://target.com -cl

    • Adds -cl/--content-length flag to display the Content-Length of each crawled response alongside the status code and URL.

    1 detail in Everything

22. v6.7 Feb 26, 2025 · release notes

    xnLinkFinder v6.7 adds TLDTLDThe rightmost label in a domain name (e.g., .com, .gov, .uk), maintained by IANA's root zone. Cyber tools filter or pivot on TLDs to scope scans, flag suspicious registrations, or classify traffic by geography or type.-aware filtering and a new --all-tlds flag to control domain false-positive rates.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.7 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.7

    └──▷ TRY IT
    Restrict discovered domain links to a custom TLD list by editing commonTLDs in your config before running a focused engagement.
    copy

    $ # In config.yml, add or trim entries under commonTLDs:
    # commonTLDs:
    #   - com
    #   - io
    #   - net
    xnLinkFinder -i https://example.com

    • New commonTLDs config key in config.yml (top 50 TLDs) lets users define which TLD set is used to filter discovered domain links.
    • New -all/--all-tlds flag returns links with any TLD, trading precision for recall when broader coverage is needed.
    • Extra-regex domain extraction now filters out invalid TLDs, too-short labels, and a hardcoded blocklist of common variable/JS names to cut false positives.
    • Excludes any discovered links that begin with a - character.

    4 details in Everything

23. v6.5 Feb 25, 2025 · release notes

    xnLinkFinder v6.5 adds TLDTLDThe rightmost label in a domain name (e.g., .com, .gov, .uk), maintained by IANA's root zone. Cyber tools filter or pivot on TLDs to scope scans, flag suspicious registrations, or classify traffic by geography or type.-validated regex expansion and quote-encoding normalization to surface more links with fewer false positives.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.5 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.5

    • Adds a secondary regex pass that catches previously missed links by validating discovered URLs against a TLD check before including them.
    • Normalizes multiple encodings of double quotes to " before link extraction to maximize links found in encoded content.
    • Filters outbound requests to only follow links whose TLD is valid, reducing noise during active crawling.

    3 details in Everything

24. v6.2 May 27, 2024 · release notes

    Adds support for extracting parameter names from nested objects and extends content type exclusions

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.2 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.2

    • Add same functionality as GAP Burp extension to extract parameter names from nested objects too.
    • Added video/x-ms-wmv,image/x-png,video/quicktime,image/x-ms-bmp,font/opentype,application/x-font-opentype,application/x-woff,audio/aiff to DEFAULT_CONTENTTYPE_EXCLUSIONS constant and also to CONTENTTYPE_EXCLUSIONS in config.yml.

    2 details in Everything

25. v6.1 May 14, 2024 · release notes

    xnLinkFinder v6.1 adds -uc/--user-agent-custom for overriding User-Agent headers

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v6.1 https://github.com/xnl-h4ck3r/xnLinkFinder.git
    # already have the repo? check out this version:
    $ git checkout v6.1

    └──▷ USE IT
    Override the tool's default User-Agent with a custom string for specific target identification requirements.
    shell copy

    xnLinkFinder -uc 'CustomBot/1.0' https://example.com

    • Adds -uc/--user-agent-custom CLI argument to specify a single custom User Agent string that overrides the default -u/--user-agent argument

    1 detail in Everything