Sh1Yo/x8

Health v2 · maintenance only

Adoption not part of the score

2093 stars · 196 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

x8 is a hidden parameter discovery suite written in Rust for security testing of web applications. It brute-forces parameter names against URLs and bodies, using response comparison and reflection analysis to accurately identify hidden parameters.

Use cases

• discover hidden query parameters on a web endpoint
• find hidden POST body parameters during bug bounty recon
• brute-force parameter names with a custom wordlist
• check thousands of URLs for hidden parameters in parallel
• detect parameters with non-random values like admin=true
• integrate hidden parameter discovery into Burp Suite workflows

When to choose

• you need fast, accurate hidden parameter discovery for web security testing
• you want to fuzz query strings, bodies, or custom parameter templates
• you need a scalable CLI tool for large-scale recon in bug bounty programs

When to avoid

• you need a general-purpose web vulnerability scanner rather than parameter discovery
• you want a GUI-based testing tool
• you are not authorized to test the target web application

Facets

cli-tool · maturity active

security penetration-testing http-client cli security penetration-testing web-development windows cli rust bugbounty recon hidden-parameters content-discovery wordlists fuzzing command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Sh1Yo/x8")