arjun
HTTP parameter discovery suite. Finds hidden query/body parameters by inference - great before hunting injection.
Tags: parameters, discovery, python
- Category
- params
- Maintenance signal
- maintained
Use this when: Access control. Parameter names are candidates. The test is two accounts you own.
Install
pipx
pipx install arjunpip
pip install arjunCommand templates
Find params
arjun -u {url} -oT {output}