1 Repo
Flagging parameters whose values appear in the response body, marking them as potentially valid for security testing.
Distinct from API Parameter Validation: Distinct from API Parameter Validation: detects reflection of parameter values in responses rather than enforcing input rules.
Explore 1 awesome GitHub repository matching web development · Reflected Parameter Flaggers. Refine with filters or upvote what's useful.
Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large dictionaries of parameter names against target URLs. It systematically probes endpoints using GET, POST, JSON, and XML request formats to find which parameters the server accepts, and can detect parameters whose values appear reflected in the response body. The tool distinguishes itself through its multi-method scanning approach, passive parameter collection from public archives like OTX and CommonCrawl, and its ability to detect value-sensitive parameters that only trigger a response
Flags parameters whose values appear in the response body, marking them as potentially valid for security testing.