{"id":13539825,"url":"https://github.com/s0md3v/Arjun","last_synced_at":"2025-04-02T06:31:28.954Z","repository":{"id":38416415,"uuid":"123440315","full_name":"s0md3v/Arjun","owner":"s0md3v","description":"HTTP parameter discovery suite.","archived":false,"fork":false,"pushed_at":"2025-02-20T10:52:16.000Z","size":371,"stargazers_count":5522,"open_issues_count":11,"forks_count":811,"subscribers_count":89,"default_branch":"master","last_synced_at":"2025-03-24T21:38:28.579Z","etag":null,"topics":["api-fuzzer","api-fuzzing","api-testing","parameter-discovery","recon"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/s0md3v.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":"s0md3v","custom":"https://paypal.me/s0md3v"}},"created_at":"2018-03-01T13:44:06.000Z","updated_at":"2025-03-24T10:14:28.000Z","dependencies_parsed_at":"2023-02-12T04:33:03.293Z","dependency_job_id":"51e5bd68-61af-49cd-ab86-8df28f353839","html_url":"https://github.com/s0md3v/Arjun","commit_stats":{"total_commits":180,"total_committers":18,"mean_commits":10.0,"dds":0.1611111111111111,"last_synced_commit":"70b5b28e64fbf69cafdaca66f75f94505945e171"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/s0md3v%2FArjun","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/s0md3v%2FArjun/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/s0md3v%2FArjun/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/s0md3v%2FArjun/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/s0md3v","download_url":"https://codeload.github.com/s0md3v/Arjun/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246668864,"owners_count":20814742,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["api-fuzzer","api-fuzzing","api-testing","parameter-discovery","recon"],"created_at":"2024-08-01T09:01:32.453Z","updated_at":"2025-04-02T06:31:28.948Z","avatar_url":"https://github.com/s0md3v.png","language":"Python","readme":"\n\u003ch1 align=\"center\"\u003e\n  \u003cbr\u003e\n  \u003ca href=\"https://github.com/s0md3v/Arjun\"\u003e\u003cimg src=\"https://image.ibb.co/c618nq/arjun.png\" alt=\"Arjun\"\u003e\u003c/a\u003e\n  \u003cbr\u003e\n  Arjun\n  \u003cbr\u003e\n\u003c/h1\u003e\n\n\u003ch4 align=\"center\"\u003eHTTP Parameter Discovery Suite\u003c/h4\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://github.com/s0md3v/Arjun/releases\"\u003e\n    \u003cimg src=\"https://img.shields.io/github/release/s0md3v/Arjun.svg\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://pypi.python.org/pypi/arjun/\"\u003e\n    \u003cimg src=\"https://img.shields.io/pypi/v/arjun.svg\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://github.com/s0md3v/Arjun/issues?q=is%3Aissue+is%3Aclosed\"\u003e\n      \u003cimg src=\"https://img.shields.io/github/issues-closed-raw/s0md3v/Arjun?color=dark-green\u0026label=issues%20fixed\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://travis-ci.com/s0md3v/Arjun\"\u003e\n      \u003cimg src=\"https://img.shields.io/travis/com/s0md3v/Arjun.svg?color=dark-green\u0026label=tests\"\u003e\n  \u003c/a\u003e\n\u003c/p\u003e\n\n![demo](https://i.ibb.co/p3VKSRJ/arjun-demo.png)\n\n### What's Arjun?\n\nArjun can find query parameters for URL endpoints. If you don't get what that means, it's okay, read along.\n\nWeb applications use parameters (or queries) to accept user input, take the following example into consideration\n\n`http://api.example.com/v1/userinfo?id=751634589`\n\nThis URL seems to load user information for a specific user id, but what if there exists a parameter named `admin` which when set to `True` makes the endpoint provide more information about the user?\\\nThis is what Arjun does, it finds valid HTTP parameters with a huge default dictionary of 25,890 parameter names.\n\nThe best part? It takes less than 10 seconds to go through this huge list while making just 50-60 requests to the target. [Here's how](https://github.com/s0md3v/Arjun/wiki/How-Arjun-works%3F).\n\n### Why Arjun?\n\n- Supports `GET/POST/POST-JSON/POST-XML` requests\n- Automatically handles rate limits and timeouts\n- Export results to: BurpSuite, text or JSON file\n- Import targets from: BurpSuite, text file or a raw request file\n- Can passively extract parameters from JS or 3 external sources\n\n### Installing Arjun\nThe recommended way to install `arjun` is as following:\n```\npipx install arjun\n```\n\u003e Note: If you are using an old version of python, use pip instead of pipx.\n\n### How to use Arjun?\n\nA detailed usage guide is available on [Usage](https://github.com/s0md3v/Arjun/wiki/Usage) section of the Wiki.\n\nDirect links to some basic options are given below:\n\n- [Scan a single URL](https://github.com/s0md3v/Arjun/wiki/Usage#scan-a-single-url)\n- [Import targets](https://github.com/s0md3v/Arjun/wiki/Usage#import-multiple-targets)\n- [Export results](https://github.com/s0md3v/Arjun/wiki/Usage#save-output-to-a-file)\n- [Use custom HTTP headers](https://github.com/s0md3v/Arjun/wiki/Usage#use-custom-http-headers)\n\nOptionally, you can use the `--help` argument to explore Arjun on your own.\n\n##### Credits\nThe parameter names wordlist is created by extracting top parameter names from [CommonCrawl](http://commoncrawl.org) dataset and merging best words from [SecLists](https://github.com/danielmiessler/SecLists) and [param-miner](https://github.com/PortSwigger/param-miner) wordlists into that.\\\n`db/special.json` wordlist is taken from [data-payloads](https://github.com/yehgdotnet/data-payloads).\n","funding_links":["https://github.com/sponsors/s0md3v","https://paypal.me/s0md3v"],"categories":["\u003ca id=\"a76463feb91d09b3d024fae798b92be6\"\u003e\u003c/a\u003e侦察\u0026\u0026信息收集\u0026\u0026子域名发现与枚举\u0026\u0026OSINT","Tools","Recon","Python","Weapons","Python (1887)","其他_安全与渗透","信息搜集","\u003ca id=\"170048b7d8668c50681c0ab1e92c679a\"\u003e\u003c/a\u003e工具"],"sub_categories":["\u003ca id=\"05ab1b75266fddafc7195f5b395e4d99\"\u003e\u003c/a\u003e未分类-OSINT","Parameters","Tools","网络服务_其他","Web"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fs0md3v%2FArjun","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fs0md3v%2FArjun","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fs0md3v%2FArjun/lists"}