# PortSwigger/param-miner

Repository: https://github.com/PortSwigger/param-miner
Canonical: https://ross.abutalabs.com/products/param-miner
Homepage: https://portswigger.net/blog/practical-web-cache-poisoning
Language: Java
License: NOASSERTION
License Family: other
Topics: extension
Last push: 2026-08-13T10:43:38+00:00

## Health v2 (maintenance only)
Score: 78/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 97, release rhythm 40, longevity 100
- inputs: {"age_days": 2960, "days_push": 20, "days_rel": 723, "gap_med": 5, "n_releases_24m": 2}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1460, forks 186 (observed 2026-08-28T04:04:47.264682+00:00)

## What it is
Param Miner is a Burp Suite extension that identifies hidden, unlinked HTTP parameters, headers, and cookies using diffing logic and binary search to guess up to 65,000 parameter names per request. It is particularly useful for discovering web cache poisoning vulnerabilities and supports scalable, automated mining of in-scope traffic.

## Use cases
- find hidden parameters in http requests
- discover web cache poisoning vulnerabilities
- brute force unlinked request headers and cookies
- mine parameters from all in-scope burp traffic automatically
- audit web applications for cache entanglement issues
- run scalable parameter guessing attacks on thousands of requests

## When to choose
- you use Burp Suite and need to uncover hidden parameters, headers, or cookies
- you are hunting web cache poisoning or web cache entanglement bugs
- you need scalable, automated parameter discovery during penetration tests or bug bounty work

## When to avoid
- you do not use Burp Suite
- you need a standalone scanner outside of Burp's proxy workflow
- your target cannot tolerate the request volume of parameter guessing attacks

## Facets
- artifact type: plugin
- maturity: active
- function: security, penetration-testing, developer-tools
- domain: security, penetration-testing, web-development
- platform: cross-platform, jvm
- tags: burp-suite-extension, web-cache-poisoning, parameter-discovery, vulnerability-scanning, bug-bounty

## Member repositories
- PortSwigger/param-miner (main) score 78

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:47.264682+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:35:23.032680+00:00, confidence not recorded.
  - readme: https://github.com/PortSwigger/param-miner (fetched 2026-08-28T04:04:47.264682+00:00, sha dbc095726d15)
  - homepage: https://portswigger.net/blog/practical-web-cache-poisoning (fetched 2026-08-29T11:44:09.981276+00:00, sha 2602652c46e6)
  - site_page: https://portswigger.net/about (fetched 2026-08-29T11:44:09.984933+00:00, sha 169c41376de5)
  - site_page: https://portswigger.net/burp/documentation (fetched 2026-08-29T11:44:09.988345+00:00, sha 81bf81a32b5c)
  - site_page: https://portswigger.net/burp/documentation/desktop/getting-started (fetched 2026-08-29T11:44:09.989819+00:00, sha 65c8225eb7bb)
  - site_page: https://portswigger.net/burp/documentation/dast/setup (fetched 2026-08-29T11:44:09.991910+00:00, sha 61320640eca8)
  - site_page: https://portswigger.net/about/contact (fetched 2026-08-29T11:44:09.996073+00:00, sha 92c2df0aac75)
  - site_page: https://portswigger.net/support/reseller-faqs (fetched 2026-08-29T11:44:09.986711+00:00, sha 9ecd32d4698e)
  - site_page: https://portswigger.net/burp/releases (fetched 2026-08-29T11:44:09.994069+00:00, sha d83cfa415479)
- Data as of 2026-08-30T08:39:29.467469+00:00.