What problem does it solve? Dead, replaced, or superseded hosts and deployments can still leak credentials and sensitive data through the Internet Archive, and live-host-only testing misses this entire disclosure surface. ## Core Features & Use Cases - CDX-based candidate discovery: Query the Wayback CDX API for dead or replaced hosts, filter to JS/JSON captures, and dedupe to the most recent capture per URL. - Archived bundle mining: Fetch raw bodies via the id_ endpoint and scan them with the same secret patterns used on live bundles, with gzip-decompression handling to avoid silent false negatives. - Rate-limit failover: Pace archive.org requests and fail over to urlscan.io, CommonCrawl, and Shodan/Censys when the source IP gets banned. - Use Case: During a bug bounty engagement, a target's old API host no longer resolves. Query the CDX index for its archived JS bundles, recover a still-valid API key, and verify it against the current in-scope service. ## Quick Start Check the Wayback Machine CDX index for archived JavaScript bundles from this target's dead hosts and tell me whether any recovered secrets still work against the live in-scope endpoints.
