{"id":25074694,"url":"https://github.com/rix4uni/msarjun","last_synced_at":"2026-04-07T05:31:31.503Z","repository":{"id":255808609,"uuid":"853164743","full_name":"rix4uni/msarjun","owner":"rix4uni","description":"Mass-scale hidden parameter discovery using Arjun. A high-performance wrapper that parallelizes Arjun for efficient parameter discovery across multiple targets.","archived":false,"fork":false,"pushed_at":"2025-11-06T22:36:46.000Z","size":19,"stargazers_count":7,"open_issues_count":0,"forks_count":2,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-11-07T00:19:01.861Z","etag":null,"topics":["api-fuzzer","api-fuzzing","api-testing","arjun","bug-bounty","bugbounty","bugbountytips","content-discovery","hacking","infosec","osint","osint-tool","parameter-discovery","penetration-testing","pentest-tool","pentesting","recon","reconnaissance","security","security-tools"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rix4uni.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-09-06T05:45:18.000Z","updated_at":"2025-11-06T22:37:19.000Z","dependencies_parsed_at":"2024-09-07T07:55:55.114Z","dependency_job_id":"d3d16936-548d-4a2d-93ef-be1eea9811c7","html_url":"https://github.com/rix4uni/msarjun","commit_stats":null,"previous_names":["rix4uni/msarjun"],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/rix4uni/msarjun","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Fmsarjun","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Fmsarjun/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Fmsarjun/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Fmsarjun/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rix4uni","download_url":"https://codeload.github.com/rix4uni/msarjun/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Fmsarjun/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31501903,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-07T03:10:19.677Z","status":"ssl_error","status_checked_at":"2026-04-07T03:10:13.982Z","response_time":105,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["api-fuzzer","api-fuzzing","api-testing","arjun","bug-bounty","bugbounty","bugbountytips","content-discovery","hacking","infosec","osint","osint-tool","parameter-discovery","penetration-testing","pentest-tool","pentesting","recon","reconnaissance","security","security-tools"],"created_at":"2025-02-07T00:18:19.166Z","updated_at":"2026-04-07T05:31:31.496Z","avatar_url":"https://github.com/rix4uni.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"## msarjun\n\nMass-scale hidden parameter discovery using Arjun. A high-performance wrapper that parallelizes Arjun for efficient parameter discovery across multiple targets.\n\n## Overview\n\nmsarjun supercharges [Arjun](https://github.com/s0md3v/Arjun) by enabling concurrent scanning of multiple URLs, dramatically reducing execution time while maintaining the powerful detection capabilities of the original tool.\n\n## Features\n- **🚀 Mass Parallelization**: Scan hundreds of URLs concurrently with configurable concurrency\n- **🔧 Automatic Setup**: Self-downloads default wordlist on first run\n- **🛠️ Tool Integration**: Clean output formats for seamless pipeline integration\n- **📊 Multiple Output Formats**: Standard, JSON, and filtered URL outputs\n- **⚡ Performance Optimized**: Significant speed improvements over sequential processing\n\n## Prerequisites\n```\nwget -q https://github.com/s0md3v/Arjun/archive/refs/tags/2.2.7.zip\nunzip -q 2.2.7.zip \u0026\u0026 cd Arjun-2.2.7 \u0026\u0026 python3 setup.py install \u0026\u0026 cd .. \u0026\u0026 rm -rf 2.2.7.zip Arjun-2.2.7\n```\n\n## Installation\n```\ngo install github.com/rix4uni/msarjun@latest\n```\n\n## Download prebuilt binaries\n```\nwget https://github.com/rix4uni/msarjun/releases/download/v0.0.4/msarjun-linux-amd64-0.0.4.tgz\ntar -xvzf msarjun-linux-amd64-0.0.4.tgz\nrm -rf msarjun-linux-amd64-0.0.4.tgz\nmv msarjun ~/go/bin/msarjun\n```\nOr download [binary release](https://github.com/rix4uni/msarjun/releases) for your platform.\n\n## Compile from source\n```\ngit clone --depth 1 https://github.com/rix4uni/msarjun.git\ncd msarjun; go install\n```\n\n## Usage\n```yaml\nUsage of msarjun:\n  -a, --append-output string   File to append the output instead of overwriting.\n  -c, --concurrency int        Number of concurrent URL scans (default 10)\n  -j, --json                   Output results in JSON format\n  -m, --methods string         HTTP methods to test (comma-separated) (default \"GET\")\n  -o, --output string          File to save the output.\n      --silent                 Silent mode.\n  -t, --tfilter                Print only transformed URLs for tool integration.\n      --verbose                Enable verbose output for debugging purposes.\n      --version                Print the version of the tool and exit.\n  -w, --wordlist string        Custom wordlist (default \"~/.config/msarjun/params.txt\")\n```\n\n## Usage Examples\n\n### Basic Scanning\n```yaml\n# Single URL with default settings\necho \"http://testphp.vulnweb.com/AJAX/infocateg.php\" | msarjun\n\n# Single URL with multiple methods\necho \"http://testphp.vulnweb.com/AJAX/infocateg.php\" | msarjun -m GET,POST,XML,JSON\n\n# Custom wordlist\necho \"http://testphp.vulnweb.com/AJAX/infocateg.php\" | msarjun -w /path/to/wordlist.txt\n```\n\n## Performance Comparison\n| Scenario | Time | Command |\n|----------|------|---------|\n| Sequential (5 URLs) | 2m47s | `cat urls.txt \\| msarjun -m GET,POST,XML,JSON` |\n| **Concurrent (5 URLs)** | **25s** | `cat urls.txt \\| msarjun -m GET,POST,XML,JSON -c 10` |\n\n**→ 85% faster execution with concurrency**\n\n## Best Practices\n1. **Domain Distribution**: Use `-concurrency` primarily for scanning different domains/subdomains\n2. **Rate Limiting**: Randomize URLs with `shuf` when scanning same-domain endpoints\n3. **Progressive Scanning**: Start with lower concurrency (`-c 10`) and increase based on target responsiveness\n4. **Output Management**: Use `-tfilter` for tool pipelines and `-j` for automated processing\n\n## Troubleshooting\n- **Arjun not found**: Ensure Arjun is installed and accessible in your PATH\n- **Wordlist issues**: Delete `~/.config/msarjun/params.txt` to trigger redownload\n- **Performance problems**: Reduce concurrency with `-c` for rate-limited targets\n- **Verbose debugging**: Use `--verbose` flag to identify specific issues\n\n## Acknowledgments\n- [s0md3v](https://github.com/s0md3v) for the original [Arjun](https://github.com/s0md3v/Arjun) tool","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frix4uni%2Fmsarjun","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frix4uni%2Fmsarjun","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frix4uni%2Fmsarjun/lists"}