vulns.co
/
GKData.io MCP

Back to Workflows

Live hosts → params → hidden keys

Harvest parameters from JS and history, then brute extra keys on the interesting endpoints.

Level: intermediate

Tools: katana, jsluice, arjun, x8

Pipeline

katana -u {url} -jc -silent | jsluice urls | anew endpoints.txt; arjun -u {url} -oT params.txt