Discover hidden HTTP parameters in web applications using Arjun and x8 workflows.
npx skills add https://github.com/zebbern/termstack --skill param-miner
Please help me install this Agent Skill. Skill: param-miner Source: https://github.com/zebbern/termstack/tree/main/.github/skills/param-miner Command: npx skills add https://github.com/zebbern/termstack --skill param-miner
Discover hidden and undocumented HTTP parameters in web applications to reveal potential admin, debug, or sensitive inputs.
Scan your API endpoints with Arjun or x8 to discover hidden parameters and verify results.
High-intent search queries and answers about installing and using this skill.
To find hidden HTTP parameters, scan API endpoints using tools like Arjun and x8 to identify undocumented query, body, and header inputs. This reveals potential admin or debug parameters for security assessments.
The best way to discover undocumented API parameters for bug bounty hunting is using multi-tool workflows, applying Arjun for basic discovery and x8 for deeper parameter enumeration and verification.
Yes, you can integrate Burp Suite to thoroughly verify hidden parameter discovery results. This ensures that identified undocumented inputs are validated for thorough security testing.
Yes, parameter discovery with Arjun and x8 supports security assessments across large URL collections, allowing you to identify undocumented query and body parameters at scale.
For HTTP parameter fuzzing, you need wordlists to guide Arjun and x8 in guessing hidden parameters. The workflow provides guidance on selecting appropriate wordlists and verifying the discovered inputs.
sixscripts-aiAutomate SQL injection testing and database enumeration with SQLMap.
gerald-icaAutomate web application security testing with Burp Suite.
zebbernAutomate Burp Suite web application security testing across intercept, modify, scan, and manual workflows.
sayseven7Discover API endpoints, schemas, versions, and hidden documentation paths.
