Enter a target
Accepted input: Domain, URL.
fleet module
xnLinkFinder OSINT search
Extracts links, endpoints and parameters from web pages and scripts. Results land in a Command One case with their source and confidence, alongside the rest of your investigation. Part of Archive OSINT · all tools.
public sources only · free registration
how it works
From domain to evidence
Run the module
The job is sent to a live worker. If no worker can run it, you are not charged.
Review results
Discovered URLs, API endpoints and parameter names.
Verify and export
Link findings in CommandDeck, add notes and export a PDF or CSV case report.
related modules
Pair xnLinkFinder with
Combining modules gives independent sources that confirm or rule out a lead.
ExifTool
Reads embedded metadata from images and documents.
waybackurls
Pulls every URL the Wayback Machine has recorded for a domain.
gau
Gathers known URLs for a domain from several archive and crawl indexes.
Wayback CDX
Queries the Internet Archive's capture index for a host.
urlscan.io
Looks up public urlscan.io scans for a domain or page.
questions
xnLinkFinder questions
What does xnLinkFinder find?
Discovered URLs, API endpoints and parameter names.
What do I need to start a xnLinkFinder search?
Domain, URL. Command One only runs a module against targets it accepts.
What are the limits of xnLinkFinder?
Found endpoints are not tested; they still need review.
How much does xnLinkFinder cost?
Registration is free. The module uses credits from your daily allowance or purchased balance. Current costs are listed on the credits page, and you are only charged when the module can actually run.
Try xnLinkFinder in a case
Create a free account to run available modules. For lawful research and authorised assessments only.