How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large dictionaries of parameter names against target URLs. It systematically probes endpoints using GET, POST, JSON, and XML request formats to find which parameters the server accepts, and can detect parameters whose values appear reflected in the response body. The tool distinguishes itself through its multi-method scanning approach, passive parameter collection from public archives like OTX and CommonCrawl, and its ability to detect value-sensitive parameters that only trigger a response
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions as a containerized security scanner designed to map public-facing infrastructure, perform subdomain enumeration, and automate the gathering of open-source intelligence. The system employs a recursive discovery engine to iteratively explore target infrastructure, utilizing a plugin-based module architecture to extend scanning capabilities. It integrates third-party APIs for data enrichment and applies YARA rules across discovered assets to identify specific vulnerability patte
Automation for javascript recon in bug bounty.
This tool can be used to brute discover GET and POST parameters
The main features of mak-/parameth are: Parameter Discovery, Reconnaissance Tools, Vulnerability Exploitation Frameworks, Web Reconnaissance.
Projects with overlapping indexed features include: devanshbatham/paramspider — Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing. s0md3v/arjun — Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large… blacklanternsecurity/bbot — This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions… maurosoria/dirsearch — dirsearch is a command-line security tool and web path scanner used for discovering hidden directories and files on… lc/gau — Gau is a command-line tool and passive URL enumerator designed to discover and aggregate known and historical web… kathanp19/jsfscan.sh — Automation for javascript recon in bug bounty.