DocumentationWayhack API

Overview

WayHack is a comprehensive URL reconnaissance and OSINT platform designed to help security researchers, penetration testers, and cybersecurity professionals discover and analyze web assets across the internet.

Architecture

WayHack consists of three main components:

  • Web Dashboard: Browser-based interface for managing searches and viewing results

  • CLI Tool: Command-line interface for automation and scripting

  • API Backend: RESTful API that powers both the web and CLI interfaces

Component Integration

All components work together seamlessly:

  • The web dashboard provides an intuitive interface for interactive searches

  • The CLI tool enables automation and integration with existing workflows

  • The API backend ensures consistent functionality across all interfaces

Authentication Methods

WayHack supports multiple authentication methods depending on your access method:

  • Web Interface: Session-based authentication with secure login

  • CLI & API: API key authentication for programmatic access

  • Security: All communications use HTTPS/TLS encryption

API Key Management

API keys provide secure access to WayHack's services:

  • Generate keys through the web dashboard

  • Rotate keys regularly for enhanced security

  • Monitor usage and set rate limits

  • Revoke compromised keys instantly

Core Functionality

WayHack specializes in comprehensive URL reconnaissance through multiple capabilities:

URL Discovery

  • Finding URLs from multiple OSINT sources

  • Historical URL analysis and tracking

  • Real-time URL monitoring and alerts

  • Comprehensive subdomain enumeration

Domain Reconnaissance

  • Comprehensive domain and subdomain research

  • DNS record analysis and monitoring

  • Certificate transparency log analysis

  • Domain relationship mapping

Historical Data

  • Accessing archived web content and URLs

  • Timeline analysis of domain changes

  • Historical subdomain tracking

  • Wayback Machine integration

Real-time Intelligence

  • Current threat intelligence and scanning data

  • Live monitoring of new URLs and subdomains

  • Integration with security feeds

  • Automated alerting for new discoveries

Data Sources Integration

WayHack integrates with 20+ OSINT data sources to provide comprehensive coverage:

  • Archive Sources: Wayback Machine, Common Crawl

  • Security Sources: VirusTotal, AlienVault OTX, URLScan.io

  • Search Engines: Shodan, Censys, FOFA, ZoomEye

  • Certificate Sources: crt.sh, Certificate Transparency logs

  • Code Repositories: GitHub, GitLab

  • Specialized Sources: SecurityTrails, IntelX, LeakIX, Netlas

Use Cases

WayHack is designed for various cybersecurity and research scenarios:

Security Research

  • Asset discovery and inventory

  • Attack surface mapping

  • Vulnerability research preparation

  • Threat intelligence gathering

Penetration Testing

  • Reconnaissance phase automation

  • Target enumeration and profiling

  • Historical analysis for testing scope

  • Continuous monitoring setup

Bug Bounty Hunting

  • Comprehensive target analysis

  • Subdomain and URL discovery

  • Historical change tracking

  • Automated monitoring for new assets

Compliance and Monitoring

  • Asset inventory maintenance

  • Unauthorized subdomain detection

  • Brand protection monitoring

  • Regulatory compliance support

Next Steps: