# Paramspider (otlite)

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing.

- Takes: Domain, URL
- Install: `otlite install paramspider`, into its own virtualenv
- Pinned: [github.com/devanshbatham/ParamSpider at c44bdaa](https://github.com/devanshbatham/ParamSpider/tree/c44bdaae54789b237028e309b603d1aa5ad52e5e)
- Command: `paramspider`
- Python: any otlite runs on (3.10 or newer)
- Verified: 24 Sept 2026, version 0.1.0 on Ubuntu 26.04 LTS, Python 3.12.14
- Licence: MIT; 3,174 GitHub stars
- Source: https://github.com/devanshbatham/ParamSpider

otlite is the no-Docker edition of OTInstaller for Linux and macOS: [install it](https://otinstaller.com/otlite) with `curl -fsSL https://get.otinstaller.com/otlite | sh`.

## Run it

| Input | otlite command | Paramspider receives |
| --- | --- | --- |
| Domain | `otlite run paramspider -- d:example.com` | `paramspider --domain example.com` |

Arguments after `--` that aren't typed inputs go to the tool unchanged.

## What a run leaves

- `results/paramspider/example.com/<time>_paramspider_example.com_<run id>.txt`
- `results/paramspider/example.com/<time>_paramspider_example.com_<run id>.meta.json`
- `results/paramspider/example.com/<time>_paramspider_example.com_<run id>.envelope.json`

The envelope is the same shape for every tool: the tool and version, the input, timing, exit code and status, the emails, domains, IP addresses and URLs found in the output, and the output file's path, hash and size. `otlite results --tool paramspider` lists saved runs, `otlite extract paramspider` pulls out indicators and `otlite diff paramspider example.com` compares the two latest runs.

## With other tools

`otlite run --all d:example.com` and `otlite auto example.com` run it with every other installed tool that takes the same input.

## Related tools

- [Torbot](https://otinstaller.com/otlite/tools/torbot.md): Dark Web OSINT Tool
- [Finalrecon](https://otinstaller.com/otlite/tools/finalrecon.md): All In One Web Recon
- [Sitedorks](https://otinstaller.com/otlite/tools/sitedorks.md): Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection
- [Spiderfoot](https://otinstaller.com/otlite/tools/spiderfoot.md): SpiderFoot automates OSINT for threat intelligence and mapping your attack surface
- [Instaloader](https://otinstaller.com/otlite/tools/instaloader.md): Download pictures (or videos) along with their captions and other metadata from Instagram
- [Bbot](https://otinstaller.com/otlite/tools/bbot.md): The recursive internet scanner for hackers

[All 47 otlite tools](https://otinstaller.com/otlite/tools) · [otlite docs](https://otinstaller.com/docs/otlite.md)