{"id":30722730,"url":"https://github.com/muhammadwaseem29/backupfinder","last_synced_at":"2025-09-03T11:36:59.582Z","repository":{"id":306446553,"uuid":"1026190147","full_name":"MuhammadWaseem29/BackupFinder","owner":"MuhammadWaseem29","description":"BackupFinder discovers backup files on web servers by generating intelligent patterns.","archived":false,"fork":false,"pushed_at":"2025-07-25T21:10:34.000Z","size":1405,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-07-25T21:17:26.832Z","etag":null,"topics":["backupfinder","bug","bugbounty","bugcrowd","ffuf","hackerone","wordlist-generator","yeswehack"],"latest_commit_sha":null,"homepage":"https://github.com/MuhammadWaseem29/BackupFinder.git","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/MuhammadWaseem29.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-07-25T13:10:09.000Z","updated_at":"2025-07-25T21:10:38.000Z","dependencies_parsed_at":"2025-07-25T21:19:33.599Z","dependency_job_id":"23612994-d005-46ec-b0d4-8d824c24e216","html_url":"https://github.com/MuhammadWaseem29/BackupFinder","commit_stats":null,"previous_names":["muhammadwaseem29/backupfinder"],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/MuhammadWaseem29/BackupFinder","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MuhammadWaseem29%2FBackupFinder","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MuhammadWaseem29%2FBackupFinder/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MuhammadWaseem29%2FBackupFinder/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MuhammadWaseem29%2FBackupFinder/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/MuhammadWaseem29","download_url":"https://codeload.github.com/MuhammadWaseem29/BackupFinder/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MuhammadWaseem29%2FBackupFinder/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273437762,"owners_count":25105847,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-03T02:00:09.631Z","response_time":76,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["backupfinder","bug","bugbounty","bugcrowd","ffuf","hackerone","wordlist-generator","yeswehack"],"created_at":"2025-09-03T11:36:58.057Z","updated_at":"2025-09-03T11:36:59.552Z","avatar_url":"https://github.com/MuhammadWaseem29.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# BackupFinder ❤️\r\n\r\nGood Day!\r\n\r\nI truly hope everything is awesome on your side of the screen! 😊\r\n\r\n**BackupFinder** discovers backup files on web servers by generating intelligent patterns.  \r\nIt creates thousands of potential backup file names based on your target domain.  \r\nPerfect for penetration testing, bug bounty hunting, and security audits.\r\n\r\n---\r\n\r\n## Some Results \r\n\r\n\u003cimg width=\"1512\" height=\"982\" alt=\"Screenshot 2025-07-26 at 3 20 51 AM\" src=\"https://github.com/user-attachments/assets/2d12d61f-7747-4319-bd3a-885f68e39fb7\" /\u003e\r\n\r\n## Hackerone Disclose Report \r\n\r\nFor reference, here is an H1 report showing a backup file named after the domain:\r\n[https://hackerone.com/reports/1516520](https://hackerone.com/reports/1516520)\r\nBackup file: `https://mtn.co.rw/mtn.zip`\r\n\r\n\u003cimg width=\"1512\" height=\"982\" alt=\"image\" src=\"https://github.com/user-attachments/assets/2b0d12a6-6c4d-4add-bddb-c27e050d2d2e\" /\u003e\r\n\r\n\r\n\r\n\r\n## Special Thanks ❤️\r\n\r\n\r\n\r\nThanks to everyone who made this tool possible:\r\n\r\n\r\n- [@infosec_au](https://x.com/infosec_au) for wordlists ([wordlists.assetnote.io](https://wordlists.assetnote.io/))\r\n- [@coffinxp7](https://x.com/coffinxp7) for inspiration and support\r\n- [@GodfatherOrwa](https://x.com/GodfatherOrwa) for support\r\n- [Nishantbhagat57/backup-gen](https://github.com/Nishantbhagat57/backup-gen) — inspired by and credit to this project\r\n- [ffuf](https://github.com/ffuf/ffuf.git) — Fast web fuzzer\r\n- [ProjectDiscovery](https://github.com/projectdiscovery) — Security automation tools\r\n  - [subfinder](https://github.com/projectdiscovery/subfinder.git) — Subdomain discovery\r\n  - [httpx](https://github.com/projectdiscovery/httpx.git) — HTTP probing\r\n\r\nThank you to the authors, maintainers, and the security community for your contributions and inspiration!\r\n\r\n---\r\n\r\n\r\n## Requirements\r\n\r\n- Go 1.21 or higher\r\n- Internet connection for installation\r\n\r\n---\r\n\r\n\r\n##  Latest Install Command (Recommended)\r\n\r\n```bash\r\ngo install github.com/MuhammadWaseem29/BackupFinder/cmd/backupfinder@v1.0.2\r\n```\r\n\r\n## Installation\r\n\r\n```bash\r\ngo install github.com/MuhammadWaseem29/BackupFinder/cmd/backupfinder@v1.0.2\r\n```\r\n\r\n### Manual Installation\r\n\r\n```bash\r\ngit clone https://github.com/MuhammadWaseem29/BackupFinder.git\r\ncd BackupFinder\r\ngo build -o backupfinder ./cmd/backupfinder/\r\nsudo mv backupfinder /usr/local/bin/\r\n```\r\n\r\n### Verify Installation\r\n\r\n```bash\r\n# Check version\r\nbackupfinder version\r\n\r\n# Verify assets are embedded  \r\nbackupfinder health-check\r\n\r\n# Quick test\r\nbackupfinder -u https://example.com --silent | head -3\r\n```\r\n\r\n---\r\n\r\n## Usage\r\n\r\n```\r\nUsage:\r\n  backupfinder [flags]\r\n\r\nFlags:\r\nINPUT:\r\n  -u, -target string       target URL/domain to scan\r\n  -l, -list string         file containing list of targets\r\n\r\nPATTERNS:\r\n  -w, -wordlist            use wordlist mode (comprehensive 1900+ patterns)\r\n  -e, -extensions string   custom extensions file\r\n\r\nOUTPUT:\r\n  -o, -output string       file to write output to\r\n      -je string           export to JSON file\r\n      -json                JSON output format\r\n      -silent              show only results\r\n  -v, -verbose             verbose mode\r\n\r\nPERFORMANCE:\r\n  -c, -concurrency int     number of concurrent workers (default 10)\r\n      -rate-limit int      rate limit for requests (default 50)\r\n      -timeout int         request timeout in seconds (default 30)\r\n      -retries int         maximum number of retries (default 3)\r\n\r\nCONFIGURATION:\r\n      -no-color            disable colored output\r\n      -timestamp           add timestamps to output\r\n      -stats               show statistics (default true)\r\n      -store-resp          store responses\r\n      -store-resp-dir      response storage directory (default \"responses\")\r\n\r\nCOMMANDS:\r\n  version                  show version information\r\n  health-check             verify installation and assets\r\n  templates                list available pattern templates\r\n  help                     show this help message\r\n```\r\n\r\n---\r\n\r\n## Examples\r\n\r\n\u003cimg width=\"1512\" height=\"982\" alt=\"image\" src=\"https://github.com/user-attachments/assets/9d208507-f1b5-42d9-8bb5-859902523505\" /\u003e\r\n\r\n\r\n### Basic Usage\r\n```bash\r\n# Basic scan (92 extension patterns)\r\nbackupfinder -u https://admin.microsoft.com\r\n\r\n\r\n# Comprehensive scan (1907 wordlist patterns)  \r\nbackupfinder -u https://admin.microsoft.com -w\r\n\r\n\r\n# Multiple targets\r\nbackupfinder -l targets.txt\r\n```\r\n\r\n##  Dont miss use -w flag\r\n\r\n\u003cimg width=\"1512\" height=\"982\" alt=\"image\" src=\"https://github.com/user-attachments/assets/2c42bdc6-b318-4c34-a977-2d6613e8724d\" /\u003e\r\n\r\n\r\n### Pattern Generation\r\n```bash\r\n# Generate patterns silently for piping\r\nbackupfinder -u https://admin.microsoft.com --silent\r\nbackupfinder -u https://admin.microsoft.com -w --silent \r\n\r\n# Save to file\r\nbackupfinder -u https://admin.microsoft.com -w -o patterns.txt\r\n```\r\n\r\n### Output Formats\r\n```bash\r\n# Verbose mode with statistics\r\nbackupfinder -u https://admin.microsoft.com -w -v\r\n\r\n# JSON export\r\nbackupfinder -u https://admin.microsoft.com -w --json -o results.json\r\n\r\n# Silent mode (perfect for automation)\r\nbackupfinder -u https://admin.microsoft.com -w --silent\r\n```\r\n\r\n### FFUF Integration\r\n```bash\r\nbackupfinder -u https://admin.microsoft.com --silent | ffuf -w /dev/stdin -u https://admin.microsoft.com/FUZZ -mc 200,403,500 -t 50\r\nffuf -w patterns.txt -u https://admin.microsoft.com/FUZZ -mc 200,403,500 -fc 404 -t 50 -o results.txt\r\n```\r\n\r\n\u003cimg width=\"1510\" height=\"732\" alt=\"image\" src=\"https://github.com/user-attachments/assets/9a66801b-80e7-49b7-a8ae-fda677a50114\" /\u003e\r\n\r\n\r\n---\r\n\r\n## Integration 😊\r\n\r\n### Complete Bug Bounty Workflow\r\n```bash\r\n# Find subdomains\r\nsubfinder -d microsoft.com -silent \u003e subdomains.txt\r\n\r\n# Check live targets\r\ncat subdomains.txt | httpx -silent \u003e live_subdomains.txt\r\n\r\n# Generate patterns for all subdomains\r\ncat live_subdomains.txt | while read url; do \r\n    backupfinder -u \"$url\" --silent \u003e\u003e all_patterns.txt\r\ndone\r\n\r\n# Scan with ffuf\r\ncat live_subdomains.txt | while read url; do \r\n    backupfinder -u \"$url\" --silent | ffuf -w /dev/stdin -u \"$url/FUZZ\" -mc 200,403,500 -fc 404 -t 50 \u003e results.txt\r\ndone\r\n```\r\n\r\n### Direct Piping\r\n```bash\r\nbackupfinder -u https://admin.microsoft.com --silent | ffuf -w /dev/stdin -u https://admin.microsoft.com/FUZZ\r\nbackupfinder -u https://admin.microsoft.com --silent | httpx -status-code\r\n```\r\n\r\n### Automation Pipeline\r\n```bash\r\nsubfinder -d microsoft.com -silent | httpx -silent | head -5 | while read url; do \r\n    backupfinder -u \"$url\" -w --silent | ffuf -w /dev/stdin -u \"$url/FUZZ\" -mc 200,403,500 -fc 404 -t 50\r\ndone\r\n```\r\n\r\n### Multiple Targets\r\n```bash\r\necho -e \"https://admin.microsoft.com\\nhttps://api.microsoft.com\" | while read url; do \r\n    backupfinder -u \"$url\" --silent | ffuf -w /dev/stdin -u \"$url/FUZZ\" -mc 200,403,500 -t 30\r\ndone\r\n```\r\n\r\n---\r\n\r\n\u003cimg width=\"1510\" height=\"982\" alt=\"image\" src=\"https://github.com/user-attachments/assets/ee07492e-20ad-4c4a-8690-9c19de9226be\" /\u003e\r\n\r\n\r\n---\r\n\r\n## Features\r\n\r\n- 9000+ backup patterns in wordlist mode\r\n- Smart subdomain handling (admin.example.com → admin.zip, admin-example.sql)  \r\n- Professional JSON export for automation\r\n- Real-time statistics with performance metrics\r\n- Concurrent processing for fast pattern generation\r\n- Custom wordlists support\r\n- Silent mode for integration with other tools\r\n\r\n\u003cimg width=\"1510\" height=\"732\" alt=\"image\" src=\"https://github.com/user-attachments/assets/ac02078f-e228-4a11-ba33-5a10f9e08aa5\" /\u003e\r\n\r\n\r\n\r\n---\r\n\r\n## Pattern Types\r\n\r\n### Extension Mode (Default - 92 patterns)\r\nCommon backup extensions: `.bak`, `.backup`, `.old`, `.sql`, `.zip`, etc.\r\n\r\n### Wordlist Mode (-w - 1900+ patterns)  \r\nComprehensive patterns for database dumps, configuration backups, archive variants\r\n\r\n### Custom Extensions (-e)\r\nUse your own pattern file (one pattern per line, supports `#` comments)\r\n\r\n\r\n\r\n\r\n---\r\n\r\n## License\r\n\r\nThis project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.\r\n\r\n---\r\n\r\n\r\n### Getting Help\r\n\r\n-  **Issues**: [GitHub Issues](https://github.com/MuhammadWaseem29/BackupFinder/issues)\r\n-  **Documentation**: This README\r\n-  **Discussions**: [GitHub Discussions](https://github.com/MuhammadWaseem29/BackupFinder/discussions)\r\n\r\n\r\n## Author\r\n\r\n**MuhammadWaseem**  \r\nGitHub: [@MuhammadWaseem29](https://github.com/MuhammadWaseem29)  \r\nTool: BackupFinder v1.0.0\r\n\r\n---\r\n\r\n Thank you for using BackupFinder! We appreciate your support! ❤️\r\n\r\n---\r\n\r\n---\r\n\r\n\r\n\r\nMay you be well on your side of the screen :)\r\n\r\n---\r\n\r\n\r\n\r\n## Star History\r\n\r\n\r\n\u003ca href=\"https://star-history.com/#MuhammadWaseem29/BackupFinder\u0026Date\"\u003e\r\n  \u003cimg alt=\"Star History Chart\" src=\"https://api.star-history.com/svg?repos=MuhammadWaseem29/BackupFinder\u0026type=Date\u0026theme=light\" style=\"background:white;\" /\u003e\r\n\u003c/a\u003e\r\n\r\n---\r\n\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmuhammadwaseem29%2Fbackupfinder","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmuhammadwaseem29%2Fbackupfinder","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmuhammadwaseem29%2Fbackupfinder/lists"}