2 مستودعات
Automated testing of potential HTTP parameter names using wordlists to discover accepted parameters on web endpoints.
Distinct from Resource Discovery Brute-Forcing: Distinct from Resource Discovery Brute-Forcing: targets HTTP query/body parameters rather than file or directory names.
Explore 2 awesome GitHub repositories matching security & cryptography · HTTP Parameter Brute Forcing. Refine with filters or upvote what's useful.
Yakit is a comprehensive cybersecurity all-in-one platform designed for security assessments. It integrates a suite of core tools including an HTTP interception proxy for real-time traffic modification, an out-of-band interaction detector for verifying remote command execution via TCP, DNSLog, and ICMP, and a reverse shell manager for controlling remote server connections. The platform is distinguished by its dedicated security scripting environment, which allows for the development and execution of custom logic and plugins using a specialized high-performance language. It further extends fun
Provides automated brute-forcing of HTTP parameters using wordlists and dynamic tags to discover accepted parameters.
Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large dictionaries of parameter names against target URLs. It systematically probes endpoints using GET, POST, JSON, and XML request formats to find which parameters the server accepts, and can detect parameters whose values appear reflected in the response body. The tool distinguishes itself through its multi-method scanning approach, passive parameter collection from public archives like OTX and CommonCrawl, and its ability to detect value-sensitive parameters that only trigger a response
Tests large wordlists of parameter names against target URLs to find accepted parameters.