Extract historical endpoints and data from Wayback snapshots

chronos walks a target's Wayback Machine history and pulls useful data out of the archived snapshots. Old pages often expose things the live site has since removed: forgotten endpoints, leaked parameters, internal hostnames, and references that point at the wider attack surface. chronos lets you mine that history without hitting the live target, since everything comes from the archive.

Extraction runs through modules, so you choose what to harvest and configure each extractor for the job. Date filters bound the window, a limit keeps you to the newest or oldest N snapshots, and MIME and status filters keep the run to the content types and responses you care about. A snapshot-interval option thins dense history down to roughly one capture per hour, day, month, or year.

On Trickest, chronos is a Recon node that takes a target URL or domain and writes a file and a folder of results. Run it during passive discovery to recover historical endpoints, then feed those URLs into a prober and scanner to see which still resolve and respond.