Urlextract
URLess is a simple but powerful tool that removes paths from URLs, generating multiple variations of the base domain. This is useful for security testing, such as LFI (Local File Inclusion), path traversal, and directory fuzzing.
Install / Use
/learn @KingOfBugbounty/UrlextractREADME
🛠️ Urlextract
Urlextract is a simple tool developed in Go to test potential vulnerabilities in URL paths. 🌐 It progressively removes paths from a URL, leaving only the domain and generating variations with different directory depths.
📥 Installation
git clone https://github.com/KingOfBugbounty/urlextract.git
cd urlextract
chmod +x urlextract
🚀 Usage
Urlextract receives URLs via stdin and prints variations with different path levels.
🔍 Example Usage
echo "https://example.com/dir1/dir2/dir3" | ./urlextract
📌 Expected Output
https://example.com
https://example.com/dir1/dir2/dir3
https://example.com/dir1/dir2
https://example.com/dir1
📑 Example with Multiple URLs
cat urls.txt | ./urlextract
Where urls.txt contains:
https://site.com/a/b/c
https://another.com/x/y/z
The output will be:
https://site.com
https://site.com/a/b/c
https://site.com/a/b
https://site.com/a
https://another.com
https://another.com/x/y/z
https://another.com/x/y
https://another.com/x
📜 License
This project is licensed under the MIT License.
🙌 Acknowledgments
Special thanks to @erickfernandox for the valuable insights and contributions to this project! 🎉
Security Score
Audited on Jan 14, 2026
