Skip to main content

Accepts URLs as stdin, replaces query string with supplied value and stdout

Project description


A replacement of qsreplace, accepts URLs as standard input, replaces all query string values with user-supplied values and stdout. Works on every OS. Made with python


$ pip3 install bhedak


  • For linux, unix and debian based systems


    $ waybackurls target.tld | bhedak "payload"
  • For windows based systems


    cmd> type urls.txt | python "payload"
  • If no payload passed

    $ waybackurls | bhedak
  • Example input file

    $ waybackurls | tee -a urls
  • Replace query string values

    $ cat urls | bhedak "FUZZ"
  • Replace query string with custom payloads

    $ cat urls | bhedak "\"><svg/onload=alert(1)>*'/---+{{7*7}}"
  • Remove duplicate urls

    $ cat urls | bhedak "FUZZ" | sort -u
  • Comparsion

    $ echo ";jsessionid=2ed4262dbe69850d25bc7c6424ba59db?hardwareid=14&tarifid=9998" | qsreplace "FUZZ";jsessionid=2ed4262dbe69850d25bc7c6424ba59db?hardwareid=FUZZ&tarifid=FUZZ
    $ echo ";jsessionid=2ed4262dbe69850d25bc7c6424ba59db?hardwareid=14&tarifid=9998" | bhedak "FUZZ";jsessionid=FUZZ?hardwareid=FUZZ&tarifid=FUZZ


If this tool helped you or you like my work

Thanks to @tomnomnom for making an amazing tool called qsreplace, from using qsreplace I got idea to make bhedak

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Built Distribution

bhedak-2.0.3-py3-none-any.whl (3.6 kB view hashes)

Uploaded py3

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Huawei Huawei PSF Sponsor Microsoft Microsoft PSF Sponsor NVIDIA NVIDIA PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page