Parameter Discovery

How to discover web parameters.

Arjun

Arjun can find query parameters for URL endpoints.

• https://github.com/s0md3v/Arjun

The following command will execute a rate limited parameter brute force using a large default wordlist. The --headers argument is optional but should be used when session cookies or an authorization header is required.

arjun -u <URL> -w large -c 250 --headers "Cookie: "