macOS
brew install urlfinderlocal Homebrew formula metadata
brew / rank 8671
Extracting URLs and subdomains from JS files on a website. Version 2026.6.16 via Homebrew; verified 2026-07-25. Also installable with nix: nix profile install nixpkgs#urlfinder.
install
brew install urlfinderlocal Homebrew formula metadata
nix profile install nixpkgs#urlfindernixpkgs package indexes · pkgs/by-name/ur/urlfinder/package.nix · source: api.github.com
overview
Extracting URLs and subdomains from JS files on a website
history
URLFinder is a Go command-line reconnaissance utility for extracting JavaScript files, URLs, API-like paths, and sensitive information from web pages. Its official README presents it as a fast and easy page-information extraction tool aimed at finding hidden sensitive information or unauthorized API interfaces in page JavaScript and URLs.
The public GitHub repository was created in June 2022 and the README changelog shows active development beginning later that year with crawl modes, export formats, proxy support, status-code filtering, fuzzing, and YAML-based rule configuration. By 2026 the project had added GitHub Actions and GoReleaser-based release automation, alongside validation for regular expressions and runtime parameters.
The package-manager evidence in this batch lists Homebrew and Nix packaging, which suggests niche but real package-manager availability rather than broad distribution packaging. Its use case aligns with web reconnaissance and bug-bounty workflows more than general-purpose URL browsing.
Typical use is to point URLFinder at one target URL or a batch file, choose a crawl mode, optionally supply cookies, proxy settings, custom headers, or a YAML config file, and export discovered links and findings as CSV, JSON, or HTML.
For package nerds, URLFinder is a compact example of modern security-tool packaging: a single Go binary, CLI flags, generated config, and cross-platform release automation added after the project was already useful.
security posture
narrow executable package without higher-risk signals.
green risk · low confidence · appliance
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
urlfinder | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:urlfinder |
|---|---|
| Version | 2026.6.16 |
| Package manager | Homebrew |
| Homepage | https://github.com/pingc0y/URLFinder |
| Repository | https://github.com/pingc0y/URLFinder |
| Last updated | 2026-07-25T21:47:59+02:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
urlfinder
nix profile install nixpkgs#urlfindersource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.