Install and Use Waymore: The Ultimate Recon Tool for Bug Bounty and Pentesting

Install and Run Waymore (for Recon Automation)

---

🛡️ Important: Waymore should only be used for ethical purposes, such as authorized security testing, bug bounty programs or educational research. Never run recon tools like Waymore against systems you don’t own or have explicit permission to test. This guide assumes you’re using Waymore responsibly and legally.

---

If you’re not using Waymore yet, you’re missing out on one of the easiest tools to dump subdomains, URLs, JS files, endpoints, and general recon chaos, all in one command.

It’s basically a wrapper for a bunch of recon tools, minus the headache of stitching everything together yourself.

---

🛠️ Install Waymore Globally

No virtualenvs. No poetry. Just slam it in globally:

pip install waymore

If you’re using Python 3+ (you should be), and pip is mapped to Python 2 on your box, just use:

pip3 install waymore

That’s it. No clone, no build.

---

🚀 Running It

Usage is dead simple:

waymore -iL targets.txt

Or single domain:

waymore -i https://target.com

Want full verbose madness?

waymore -iL targets.txt -mode V

Need JS links, endpoints, and URL params extracted too? It does that. Just explore the modes or check the docs.

---

⚠️ Heads Up

---

• On Kali/Parrot, make sure all system tools it depends on are installed (sublist3r, amass, gau, etc.), or you’ll see a bunch of “command not found” errors.
• You might want to pipe output into a file or your own script if you’re chaining it into a bigger recon setup.

---

⭐ Ready for a reliable, high-performance VPS at an unbeatable price? We host our own Kali labs on Hostinger: 4 vCPU, NVMe storage, 16 GB RAM and 16 TB bandwidth, backed by 24/7 support and a 30-day money-back guarantee. You’ll save up to 20% when you lock in a 24-month plan. Grab a Hostinger VPS using this referral link and support our content.

👉 Claim your Hostinger VPS (from only US$ 7.99/mo)

---