{"id":43705978,"url":"https://github.com/ImAyrix/fallparams","last_synced_at":"2026-03-01T06:00:42.453Z","repository":{"id":214835905,"uuid":"737479932","full_name":"ImAyrix/fallparams","owner":"ImAyrix","description":"Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist ","archived":false,"fork":false,"pushed_at":"2024-08-25T06:10:09.000Z","size":96,"stargazers_count":415,"open_issues_count":0,"forks_count":52,"subscribers_count":3,"default_branch":"master","last_synced_at":"2026-01-22T22:32:47.862Z","etag":null,"topics":["bug-bounty-hunters","bugbounty","penetration-testing","pentest","ssrf","web-application-security","web-security","wordlist","wordlist-generator","xss"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ImAyrix.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2023-12-31T07:28:28.000Z","updated_at":"2026-01-13T11:20:05.000Z","dependencies_parsed_at":"2023-12-31T08:27:15.689Z","dependency_job_id":"02e2e870-84cd-4841-a5cd-369087808a6d","html_url":"https://github.com/ImAyrix/fallparams","commit_stats":null,"previous_names":["imayrix/fallparams"],"tags_count":13,"template":false,"template_full_name":null,"purl":"pkg:github/ImAyrix/fallparams","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ImAyrix%2Ffallparams","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ImAyrix%2Ffallparams/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ImAyrix%2Ffallparams/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ImAyrix%2Ffallparams/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ImAyrix","download_url":"https://codeload.github.com/ImAyrix/fallparams/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ImAyrix%2Ffallparams/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29961846,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-01T05:59:08.471Z","status":"ssl_error","status_checked_at":"2026-03-01T05:58:04.208Z","response_time":124,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bug-bounty-hunters","bugbounty","penetration-testing","pentest","ssrf","web-application-security","web-security","wordlist","wordlist-generator","xss"],"created_at":"2026-02-05T06:00:17.294Z","updated_at":"2026-03-01T06:00:42.442Z","avatar_url":"https://github.com/ImAyrix.png","language":"Go","funding_links":[],"categories":["信息搜集"],"sub_categories":[],"readme":"\u003ch4 align=\"center\"\u003e Find all parameters and generate a custom target parameter wordlist  \u003c/h4\u003e\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"#installation\"\u003eInstall\u003c/a\u003e •\n  \u003ca href=\"#usage-parameters\"\u003eUsage Parameters\u003c/a\u003e •\n  \u003ca href=\"#preview\"\u003ePreview\u003c/a\u003e •\n  \u003ca href=\"#full-guide\"\u003eFull Guide\u003c/a\u003e •\n  \u003ca href=\"#contributing\"\u003eContributing\u003c/a\u003e •\n  \u003ca href=\"https://t.me/ImAyrix\"\u003eContact me\u003c/a\u003e\n\u003c/p\u003e\n\n---\n\nFallParams meticulously analyzes website links to craft targeted parameter wordlists, fueling efficient bug hunting and vulnerability discovery. It accepts a list of URLs as input, expertly scanning their source code to uncover valuable parameters. For comprehensive exploration, unleash its crawling capabilities to unearth hidden parameters within linked pages. FallParams seamlessly navigates dynamic content with headless browser support, ensuring thorough parameter extraction across all website facets.\n\n## Preview\n\n![Fallparams Demo](https://github.com/ImAyrix/fallparams/assets/89543912/ad65c1df-fe40-4dd8-a069-4e352029bc21)\n\n## Installation\n\n```\ngo install github.com/ImAyrix/fallparams@latest\n```\n\n## Usage Parameters\n```\nfallparams -h\n```\n\nThis will display help for the tool. Here are all the switches it supports.\n```\nFind All Parameters\n\nUsage:\n  fallparams [flags]\n\nFlags:\nINPUT:\n   -u, -url string          Input [Filename | URL]\n   -dir, -directory string  Stored requests/responses files directory path (offline)\n   -r, -request string      File containing the raw http request\n\nRATE-LIMIT:\n   -t, -thread int  Number of Threads [Number] (default 1)\n   -rd, -delay int  Request delay between each request in seconds\n\nCONFIGURATIONS:\n   -c, -crawl                  Crawl pages to extract their parameters\n   -d, -depth int              maximum depth to crawl (default 2)\n   -ct, -crawl-duration value  maximum duration to crawl the target\n   -hl, -headless              Discover parameters with headless browser\n   -H, -header \"Name: Value\"   Header \"Name: Value\", separated by colon. Multiple -H flags are accepted.\n   -X, -method string          HTTP method to use (default \"GET\")\n   -b, -body string            POST data\n   -x, -proxy string           Proxy URL (SOCKS5 or HTTP). For example: http://127.0.0.1:8080 or socks5://127.0.0.1:8080\n\nOUTPUT:\n   -o, -output string    File to write output to (default \"parameters.txt\")\n   -xl, -max-length int  Maximum length of words (default 30)\n   -nl, -min-length int  Minimum length of words\n   -silent               Disables the banner and prints output to the command line.\n\nUPDATE:\n   -duc, -disable-update-check  Disable automatic fallparams update check\n\n```\n\n## Full Guide\n### Troubleshooting Installation and Execution\nIf you encounter problems installing and running Fallparams, ensure that the version of Go installed on your system is the latest. Additionally, verify that you have GCC installed.\n\n### Start\nTo create a parameter wordlist suitable for the page you are working on, simply provide the page link to fallparams.\n\n```bash\nfallparams -u \"https://target.tld/page\"\n```\nIf you have many URLs for which you want to create a parameter wordlist, save all your URLs in a file and then provide the file name to fallparams.\n```bash\nfallparams -u \"/path/to/file.txt\"\n```\nYou can also save the entire HTTP packet to a file and use it as an input for the tool, ensuring that it sends the exact same headers, cookies, and other details in the requests.\n```bash\nfallparams -r \"request.txt\"\n```\n\n### Custom Header\nThe URLs you provide might require a specific header to open or may return a different response based on the header. For example, the user information change section on most sites requires an authentication cookie. Using the following method, you can set as many headers as needed for sending the requests.\n```bash\nfallparams -u \"https://target.tld/profile/edit\" -H \"Cookie: auth=token\" -H \"Role: Admin\"\n```\n\n### Post Data\nIf your target responds differently when a POST request with a specific value is sent, you can execute the fallparams command using the following method:\n```bash\nfallparams -u \"https://target.tld/path\" -X POST -b \"param=value\" -H \"Content-Type: application/x-www-form-urlencoded\"\n```\n\n### Headless\nMany modern websites utilize JavaScript to dynamically generate their DOM, leading to variations between HTTP responses and browser DOM. To bridge this disparity, employing the headless switch can be advantageous.\n```bash\nfallparams -u \"https://target.tld/page\" -headless\n```\n\n### More Parameters\nOne of the great features of fallparams is its ability to use [Katana](https://github.com/projectdiscovery/katana) to crawl the links provided as input, resulting in more links and eventually creating a comprehensive parameter wordlist.\n```bash\nfallparams -u \"https://target.tld/page\" -crawl\n```\n\n### Offline Mode\nIf you've already run Katana or any other tool and stored the answer or source pages in files, simply move all the files into one directory. Then provide the directory path to fallparams. In this case, fallparams itself will not send a request and will use the contents of your files.\n```bash\nfallparams -dir \"/path/to/directory\"\n```\n\n### Output\nTo enhance the quality of your parameter wordlist, it's crucial to filter out noisy or irrelevant words that may enter during creation. One effective way to achieve this is by setting a specific character limit for each parameter.\n```bash\nfallparams -u \"https://target.tld/page\" -max-length 30\n```\nYou can also specify the minimum number of characters for each parameter.\n```bash\nfallparams -u \"https://target.tld/page\" -min-length 3\n```\nBy default, the generated parameter wordlist is saved in the parameters.txt file. However, you can customize the name and path of the output file as needed.\n```bash\nfallparams -u \"https://target.tld/page\" -output \"custom_name.txt\"\n```\n## Contributing\n\nContributions to Fallparams are welcome! If you find any issues or have suggestions for improvements, we appreciate your contribution. Your feedback helps us make Fallparams better for everyone.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FImAyrix%2Ffallparams","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FImAyrix%2Ffallparams","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FImAyrix%2Ffallparams/lists"}