Arjun V1.1 - Http Parameter Uncovering Suite

Features

• Multi-threading
• 3 modes of detection
• Regex powered heuristic scanning
• Huge listing of 3370 parameter names

Usage

Note: Arjun doesn't operate amongst python < 3.4

Discover parameters
To let on GET parameters, yous tin but do:

python3 arjun.py -u https://api.example.com/endpoint --get

Similarly, role --post to let on POST parameters.

Multi-threading
Arjun uses 2 threads yesteryear default but yous tin melody its functioning according to your network connection.

python3 arjun.py -u https://api.example.com/endpoint --get -t 22

Delay betwixt requests
You tin delay the asking yesteryear using the -d option equally follows:

python3 arjun.py  -u https://api.example.com/endpoint --get -d 2

Adding HTTP Headers
Using the --headers switch volition opened upwards an interactive prompt where yous tin glue your headers. Press Ctrl + S to relieve together with Ctrl + X to procced.

Note: Arjun uses nano equally the default editor for the prompt but yous tin modify it yesteryear tweaking /core/prompt.py.

Credits
The parameter names listing has been taken from @SecLists

Download Arjun