s0md3v/Arjun

Health v2 · maintenance only

Adoption not part of the score

6385 stars · 862 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Arjun is a Python command-line tool that discovers hidden HTTP query parameters for URL endpoints using a large dictionary of over 25,000 parameter names. It supports GET/POST/JSON/XML requests, handles rate limits automatically, and can export results to BurpSuite, text, or JSON.

Use cases

• find hidden query parameters on an api endpoint
• discover parameters for bug bounty recon
• fuzz http endpoints for valid parameter names
• extract parameters from javascript files passively
• import targets from burp suite and export findings

When to choose

• you need fast parameter discovery with a large built-in wordlist
• you want automatic rate-limit and timeout handling during scanning
• you need BurpSuite integration for import/export in a pentest workflow

When to avoid

• you need full web application vulnerability scanning rather than parameter discovery
• you require a GUI tool instead of a command-line interface
• your targets require authenticated sessions with complex flows beyond custom headers

Facets

cli-tool · maturity active

security http-client web-scraping cli security penetration-testing web-development apis python cli windows parameter-discovery bug-bounty recon api-fuzzing pentesting linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="s0md3v/Arjun")