security enabled verified low v1.0.0

arjun

HTTP parameter discovery tool that finds hidden GET/POST parameters by analyzing server responses.

📋 Live Preview 
arjun -u {target}
🌍 target → url 
arjun -u {target}

Sandbox: execFile · Timeout: 300s

Capabilities

web.discovery.parameter
web.enumeration.endpoint
web.fingerprint.application

Parameters

Name Type Required Default Description Aliases
url string Yes - Target URL for parameter discovery -u, --url
output string No - Save output as JSON file -o, --output
output-text string No - Save output as text file -oT, --output-text
output-burp string No - Export results in Burp Suite format -oB, --output-burp
delay integer No 0 Delay between requests in seconds -d, --delay
threads integer No 2 Number of concurrent threads -t, --threads
wordlist file No - Custom parameter wordlist file -w, --wordlist
method string No GET HTTP method to use (GET or POST) -m, --method
import string No - Import parameters from a file -i, --import
timeout integer No 15 Request timeout in seconds -T, --timeout
chunks integer No 10 Number of parameter chunks to process -c, --chunks
rate-limit integer No - Maximum requests per second --rate-limit
headers string No - Custom HTTP headers (JSON format) --headers
passive boolean No - Use passive sources (no active requests) --passive
include string No - Include specific parameters to test --include
disable-redirects boolean No - Do not follow HTTP redirects --disable-redirects
stable boolean No - Use stable mode (no concurrency) --stable
quiet boolean No - Suppress banner and progress output -q, --quiet
disable_redirects boolean No - No redirects --disable-redirects
i boolean No - FILE Import parameters from file -i, --import

Artifacts

TypeDescriptionMIMESchemaTrust
report.jsonDiscovered parameters as JSONapplication/json-verified
report.txtDiscovered parameters as texttext/plain-verified

Contract

Inputs

web.target.url

Target URL for parameter discovery

web.target.headers

Custom HTTP headers for requests

web.target.method

HTTP method (GET/POST) for parameter scanning

Outputs

report.json

Discovered parameters as JSON

report.txt

Discovered parameters as text

Side effects: network_traffic

Workflow Edges

Produces

report.jsonreport.txt

Consumes

web.target.urlweb.target.headersweb.target.method

Resource Profile

ResourceValue
CPUlow
Memory128 MB
Networkmedium
Disk I/Olow

Examples

Basic parameter discovery

arjun -u http://target.com/api/endpoint

Multi-threaded discovery with 10 threads

arjun -u http://target.com/api/endpoint -t 10

POST method parameter discovery

arjun -u http://target.com/login -m POST

Save results as JSON

arjun -u http://target.com/api -o params.json

Passive parameter discovery (no active requests)

arjun -u http://target.com/api --passive

Scan with custom wordlist and headers

arjun -u http://target.com/api -w custom_params.txt --headers '{"X-Custom": "value"}'

Documentation

Arjun — HTTP Parameter Discovery Tool

Arjun is a fast HTTP parameter discovery tool that finds hidden GET and POST parameters by analyzing server response variations. It uses both active brute-forcing and passive sources to uncover undocumented API parameters.

Basic Usage

# Basic parameter discovery
arjun -u http://target.com/api/endpoint

# POST method with threads
arjun -u http://target.com/login -m POST -t 10

# Save output as JSON
arjun -u http://target.com/api -o params.json

# Passive mode
arjun -u http://target.com/api --passive

Output Formats

Format Flag Description
JSON -o Structured JSON output
Text -oT Plain text parameter list
Burp -oB Burp Suite compatible format

Related Tools

ffufwfuzzdirsearch

References