> For the complete documentation index, see [llms.txt](https://wiki.pentestlist.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.pentestlist.com/offensive-security/web-application/discovery/parameter-discovery.md).

# Parameter Discovery

## Arjun 

Arjun can find query parameters for URL endpoints.

* <https://github.com/s0md3v/Arjun>

The following command will execute a rate limited parameter brute force using a large default wordlist. The `--headers` argument is optional but should be used when session cookies or an authorization header is required.

`arjun -u <URL> -w large -c 250 --headers "Cookie: "`