http://ao3kahwiv3nyjch2hnx4xlstcir3xh2sw4tvue2uohmem4cfsxiussqd.onion/HOW-TO-MAKE-COMBOS-IN-2021%20-%20DUMP-FORUMS-DATABASES%20-%20TOOLS-INCLUDED.html
To get URLs there are many way, juji stated a site - publicwww.com which is a search engine for source codes that uses dorks as well, but you can also use google with google dorks, example: Game "Powered by vBulletin® Version 4.2.3" Now, once you get URLs, to use thise tool that scans if the site is vulnerable, you will need to parse them in form: http://domain.com (eg. https://sawstudiouser.com) Once you do that you will the tool to scan the urls if vulnerable.