otinstaller · Web and search

Install ParamSpider on Linux in one command

ParamSpider pulls every archived URL for a domain from the Wayback Machine and keeps the ones with query parameters. The result is a list of endpoints and parameter names without touching the live site.

ParamSpider in three lines

pipx install otinstaller
ot install paramspider
ot run paramspider -- d:example.com

Runs devanshbatham/ParamSpider (MIT, ★ 3.2k, otinstaller v0.0.4, registry updated Oct 13, 2026). otinstaller installs and runs it; it does not change or verify it.

What ParamSpider is for

Passive endpoint discovery before an authorised test.
Finding old parameters a site may still accept.

Typed inputs for ParamSpider

otinstaller translates these prefixes into ParamSpider's own flags. Anything else after -- is passed through unchanged, so every original flag still works.

d:: domain · ot run paramspider -- d:example.com
url:: url · ot run paramspider -- url:https://example.com

Run every installed tool that takes the same input at once: ot run --all d:example.com

Where the results go

Every run lands under ./results/paramspider/<target>/ as a timestamped output file plus a .meta.json sidecar: the exact command, start and end time, exit code, and the SHA-256 of the output. Group runs with --case, compare the last two with ot diff paramspider <target>, and pull indicators out with ot extract.

Before you run it

Installed from the repo's main branch, so ot update paramspider tracks it.

Update, remove, inspect

ot info paramspider      # inputs, flags, keys
ot example paramspider   # sample output
ot update paramspider    # move to the next tested version
ot remove paramspider    # delete its virtualenv

Full reference for this tool: docs for paramspider.

Pairs with

Sitedorks

Sitedorks builds search-engine queries that look for a term across a curated set of sites, such as paste sites, code hosts, and social networks, and opens them in your browser.

FinalRecon

FinalRecon runs a set of web recon checks against a URL in one go: headers, SSL certificate, WHOIS, crawler, DNS, subdomains, directory search, and a port scan.

BlackWidow

BlackWidow crawls a website, collects its URLs, parameters, emails, and phone numbers, and can fuzz the parameters it finds for common web vulnerabilities.

FAQ

ParamSpider with otinstaller, answered

How do I install ParamSpider on Kali or Ubuntu?

Install otinstaller once with pipx install otinstaller, run ot init, then ot install paramspider. The tool lands in its own virtualenv under ~/.otinstaller/, pinned to a version that was tested on Ubuntu, so nothing touches your system Python. ot doctor flags a missing git or venv module.

Which inputs does ParamSpider take through otinstaller?

d: (domain), url: (url). otinstaller maps each prefix to ParamSpider's own flag. Everything after -- that is not a typed input is passed through unchanged, so the original flags still work.

Where does otinstaller save ParamSpider results?

Under ./results/paramspider/<target>/ in the folder you run from, as a timestamped output file plus a .meta.json sidecar with the exact command, timing, exit code, and SHA-256. Add --case <name> to group runs, and ot diff paramspider <target> to compare the last two.

Does ParamSpider need an API key or a login?

No key is required for the basic run. Optional keys, where the project supports them, go in ~/.otinstaller/.env and are passed only to tools that declare them.

Can I run ParamSpider together with other tools?

Yes. ot run --all d:example.com runs every installed tool that accepts domain input, in parallel, including ParamSpider. Save the combination as a playbook to repeat it.