s0md3v/Arjun
Arjun
Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large dictionaries of parameter names against target URLs. It systematically probes endpoints using GET, POST, JSON, and XML request formats to find which parameters the server accepts, and can detect parameters whose values appear reflected in the response body.
The tool distinguishes itself through its multi-method scanning approach, passive parameter collection from public archives like OTX and CommonCrawl, and its ability to detect value-sensitive parameters that only trigger a response when a specific value is supplied. It also extracts form field names from HTML responses and can inject parameters into structured JSON or XML payloads for deeper probing.
Arjun supports batch scanning of multiple targets from a file, concurrent processing, and imports targets from Burp Suite logs or raw HTTP request files. It handles rate limiting by slowing requests and automatically retrying, and exports discovered parameters in JSON, plain text, or Burp Suite compatible formats.
Features
- HTTP Method Parameter Scanners - Probes endpoints with GET, POST, JSON, and XML request formats to discover parameters across different input types.
- Multi-Format Request Parameter Scanners - Probes endpoints using GET, POST, JSON, and XML request formats to find parameters across different input types.
- HTTP Parameter Brute Forcing - Tests large wordlists of parameter names against target URLs to find accepted parameters.
- Hidden Parameter Discovery - Identifies hidden or undocumented parameters in web applications to uncover potential attack surfaces.
- HTTP Methods - Probes endpoints with GET, POST, JSON, and XML methods to discover accepted parameters.
- Multi-Format Request Probes - Sends probes using GET, POST, JSON, and XML formats to discover parameters across different input types.
- URL Parameter Extraction - Tests a large dictionary of parameter names against a target URL to find accepted parameters.
- Endpoint Parameter Probers - Tests a large dictionary of parameter names against a URL to find accepted parameters.
- Valid Parameter Identifiers - Tests a large dictionary of parameter names against a target URL, identifying which ones alter the response.
- Batch URL Scanners - Runs parameter discovery against multiple target URLs from a file with concurrent scanning and export.
- Reflected Parameter Detectors - Flags parameters whose values appear in the response body, confirming their validity.
- Value-Sensitive Parameter Detectors - Identifies parameters that only trigger a response when a specific value is supplied.
- Scan Result Exporters - Exports discovered parameters as JSON, plain text, or Burp Suite compatible output.
- File-Based Target Loading - Loads target URLs from a file and runs parameter discovery against each one automatically.
- Scan Result Exporters - Saves discovered parameters to BurpSuite, plain text, or JSON files for further analysis.
- Concurrent Target Scanners - Processes multiple target URLs concurrently, exporting results as each scan completes.
- Passive Intelligence Gathering - Gathers parameter names from public archives like OTX, CommonCrawl, and Archive.org without sending requests.
- Web Archive Parameter Collectors - Gathers parameter names from public archives and JavaScript files without sending direct requests to the target.
- Web Archive Parameter Gatherers - Gathers parameter names from public archives like OTX, CommonCrawl, and Archive.org without sending any requests.
- Conditional Response Parameter Probes - Identifies parameters that only trigger a response when a specific value is supplied.
- Reflected Value Detectors - Flags parameters whose values appear in the server response body to confirm validity.
- HTML Form Field Extractors - Parses HTML forms in responses and adds their field names to the parameter dictionary.
- Structured Payload Injections - Injects test parameters into JSON and XML templates to probe nested data structures.
- Reflected Parameter Flaggers - Flags parameters whose values appear in the response body, marking them as potentially valid for security testing.
- Passive Parameter Sources - Collects parameter names from OTX, CommonCrawl, and JavaScript files without sending requests.
- Archive-Based Parameter Harvesters - Collects parameter names from public archives like OTX and CommonCrawl without sending requests.
- Brute Force Tools - Tool for discovering hidden HTTP parameters.
- JavaScript and API Analysis - Discover hidden HTTP parameters for API testing.
- Parameter Discovery - HTTP parameter discovery suite.
- Reconnaissance and Discovery - HTTP parameter discovery tool.
- Reconnaissance Tools - Suite for HTTP parameter discovery.
- Utility Tools - HTTP parameter discovery and fuzzing tool.
- Parameter Bruteforcing - Automated discovery of hidden query parameters for URL endpoints.
- REST API Security Tools - Suite for discovering hidden HTTP parameters.
- Web Reconnaissance - Discovers hidden HTTP parameters.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
