DocumentationWayhack API

Web Interface Guide

The WayHack web dashboard provides an intuitive interface for managing URL reconnaissance searches, configuring data sources, and analyzing results. This guide covers all aspects of using the web interface effectively.

Dashboard Navigation

Main Dashboard

The dashboard provides an overview of your reconnaissance activity:

  • Active Searches: Currently running URL discovery searches

  • Recent Results: Latest completed searches with quick access to findings

  • Source Status: Health check of available OSINT data sources

  • Usage Statistics: API calls, search counts, and data consumption

Sidebar Navigation

The main navigation menu provides access to all platform features:

  • 🏠 Dashboard: Main overview page

  • 🔍 URL Search: Start new reconnaissance searches

  • 📊 Results: Browse and analyze your search results

  • 🌐 Sources: Configure and manage data sources

  • ⚙️ Settings: Account settings, API keys, and preferences

Quick Actions

The dashboard includes quick action buttons for common tasks:

  • New Search: Start a reconnaissance search immediately

  • View Latest Results: Access your most recent findings

  • Check Source Status: Verify data source connectivity

  • Download Reports: Export search results in various formats

Managing URL Searches

Search Queue

The search queue helps you manage multiple reconnaissance operations:

  1. View Pending Searches: See all queued searches waiting for execution

  2. Monitor Running Searches: Track progress of active reconnaissance

  3. Review Completed Searches: Access results from finished searches

  4. Search History: Browse through all previous reconnaissance activities

Starting New Searches

To initiate a new URL reconnaissance search:

  1. Navigate to "URL Search"

  2. Click "New Search"

  3. Configure your search parameters:

    • Target Domain: Enter the domain to investigate

    • Data Sources: Select which OSINT sources to query

    • Search Type: Choose domain URLs, subdomains, or specific paths

    • Filters: Apply custom filters to results

Search Configuration Options

Basic Settings

  • Domain: Primary target domain (e.g., example.com)

  • Include Subdomains: Expand search to include all subdomains

  • Search Depth: Control how deep to search for URLs

  • Result Limit: Maximum number of URLs to discover

Advanced Filters

  • Path Patterns: Search for specific URL patterns

  • File Extensions: Filter by file types (php, asp, jsp, etc.)

  • Date Range: Limit results to specific time periods

  • Status Codes: Filter by HTTP response codes

Search Status Management

Searches progress through these states:

  • Pending: Waiting in queue for execution

  • Running: Currently querying data sources

  • Completed: Finished successfully with results

  • Failed: Encountered an error during execution

Managing Active Searches

  • Pause Search: Temporarily halt a running search

  • Resume Search: Continue a paused search

  • Cancel Search: Stop and remove a search from queue

  • Priority Adjustment: Change search execution priority

Data Source Configuration

Available Sources

WayHack integrates with 20+ OSINT data sources:

Archive Sources

  • Wayback Machine: Internet Archive historical snapshots

  • Common Crawl: Web crawl archives

Security Intelligence

  • URLScan.io: Real-time URL scanning and analysis

  • VirusTotal: Malware and URL analysis

  • AlienVault OTX: Open Threat Exchange intelligence

Search Engines

  • Shodan: Internet-connected device search

  • Censys: Internet-wide scanning data

  • FOFA: Cyberspace search engine

  • ZoomEye: Cyberspace search engine

Certificate Sources

  • crt.sh: Certificate transparency logs

  • SecurityTrails: DNS and domain intelligence

Specialized Sources

  • IntelX: Search engine for leaked data

  • LeakIX: Public information leak database

  • Netlas: Internet asset discovery

  • BuiltWith: Technology profiling

  • Hunter.io: Email finder and domain search

Code Repositories

  • GitHub: Code repository search

  • GitLab: Code repository search

Google Dorking

  • Dorki: Google dorking automation

Source Settings Page

To configure data sources:

  1. Go to "Sources"

  2. Configure each source individually:

    • Enable/Disable: Toggle source availability

    • API Keys: Configure authentication for premium sources

    • Rate Limits: Set request throttling

    • Custom Parameters: Advanced source-specific settings

Customization Options

For each data source, you can configure:

  • Query Timeout: Maximum time to wait for responses

  • Result Limits: Maximum number of results per source

  • Filtering: Pre-filter results at the source level

  • Priority: Set search order for sources

API Key Management

  • Add Keys: Configure authentication for premium sources

  • Test Connectivity: Verify API key functionality

  • Usage Monitoring: Track API quota consumption

  • Key Rotation: Update keys for security

URL Search & Discovery

Search Interface

The search interface provides comprehensive options for URL discovery:

  1. Navigate to "URL Search"

  2. Enter your search parameters:

    • Domain: Target domain (e.g., example.com)

    • Include Subdomains: Expand search to subdomains

    • Path Filters: Search for specific paths or file types

    • Date Range: Limit results to specific time periods

Advanced Search Syntax

Use powerful search operators for precise targeting:

# Basic domain search
example.com

# Include subdomains
*.example.com

# Path-specific search
example.com/api/*

# File type filtering
example.com filetype:pdf

# Multiple conditions
example.com AND (admin OR api OR login)

# Exclude certain paths
example.com NOT /static/*

# Date range filtering
example.com after:2023-01-01 before:2023-12-31

Result Management

Once searches complete, you can manage results effectively:

  • Filter Results: Apply post-search filters to narrow findings

  • Sort Options: Order by date, source, or relevance

  • Export Data: Download results in JSON, CSV, or TXT format

  • Deduplicate: Remove duplicate URLs automatically

  • Source Attribution: See which source found each URL

Export Options

  • JSON: Structured data with full metadata

  • CSV: Spreadsheet-compatible format

  • TXT: Simple text list of URLs

  • PDF Report: Formatted report with analysis

Next Steps: