How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large dictionaries of parameter names against target URLs. It systematically probes endpoints using GET, POST, JSON, and XML request formats to find which parameters the server accepts, and can detect parameters whose values appear reflected in the response body. The tool distinguishes itself through its multi-method scanning approach, passive parameter collection from public archives like OTX and CommonCrawl, and its ability to detect value-sensitive parameters that only trigger a response
This tool can be used to brute discover GET and POST parameters
Gau is a command-line tool and passive URL enumerator designed to discover and aggregate known and historical web addresses for specific target domains. It functions as a collection framework that retrieves domain-specific data from public web archives and threat intelligence providers. The tool focuses on passive reconnaissance and open-source intelligence research to map attack surfaces without sending requests directly to target infrastructure. It aggregates data from multiple external sources to identify accessible web endpoints and forgotten pages. The system includes capabilities for r
Gobuster is a command-line security utility designed for brute-force discovery of hidden infrastructure and content. It operates by systematically testing wordlists against target network services to identify files, directories, subdomains, and cloud storage buckets. The tool utilizes a concurrent worker pool to execute these requests in parallel, ensuring efficient scanning across various network environments. The project distinguishes itself through a modular plugin architecture that supports multiple discovery modes, including HTTP, DNS, and TFTP. This design allows for protocol-agnostic r
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
The main features of devanshbatham/paramspider are: JavaScript and API Analysis, Parameter Discovery, Reconnaissance and Discovery, Reconnaissance Tools, Web Reconnaissance.
Projects with overlapping indexed features include: s0md3v/arjun — Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large… oj/gobuster — Gobuster is a command-line security utility designed for brute-force discovery of hidden infrastructure and content.… mak-/parameth — This tool can be used to brute discover GET and POST parameters. lc/gau — Gau is a command-line tool and passive URL enumerator designed to discover and aggregate known and historical web… sh1yo/x8. blacklanternsecurity/bbot — This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions…