Skip to content
HTTP parameter discovery suite.
Branch: master
Clone or download
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
core ability to supply headers from cli Apr 12, 2019
db Add files via upload Mar 3, 2019
.whitesource Initial WhiteSource configuration file May 5, 2019
CHANGELOG.md fixed a typo Apr 12, 2019
LICENSE Create LICENSE Nov 10, 2018
README.md added god level shit badge Apr 17, 2019
arjun.py track each reflection seperately Apr 17, 2019

README.md


Arjun
Arjun

HTTP Parameter Discovery Suite

demo

Introduction

Web applications use parameters (or queries) to accept user input, take the following example into consideration

http://api.example.com/v1/userinfo?id=751634589

This URL seems to load user information for a specific user id, but what if there exists a parameter named admin which when set to True makes the endpoint provide more information about the user?
This is what Arjun does, it finds valid HTTP parameters with a huge default dictionary of 25,980 parameter names.

The best part? It takes less than 30 seconds to go through this huge list while making just 30-35 requests to the target.
Want to know how Arjun does that? Here's how.

Features

  • Multi-threading
  • Thorough detection
  • GET/POST/JSON methods supported
  • A typical scan takes 30 seconds
  • Regex powered heuristic scanning
  • Huge list of 25,980 parameter names
  • Makes just 30-35 requests to the target

Note: Arjun doesn't work with python < 3.4

How to use Arjun?

A detailed usage guide is available on Usage section of the Wiki.
An index of options is given below:

Credits

The parameter names are taken from @SecLists.

You can’t perform that action at this time.