web-discovery

To find hidden web application endpoints and parameters during a pentest, you can use content and parameter discovery techniques to scan for undocumented directories, files, and GET, POST, JSON, or XML inputs using tools like ffuf, arjun, and paramspider.

The best way to test for common injection vulnerabilities like SQLi and XSS is to systematically discover hidden parameters and then test each identified input point for multiple vulnerability classes, including SSTI, command injection, and SSRF.

You need wpscan for comprehensive web vulnerability discovery if the target application is built on WordPress, as it specifically helps identify WordPress vulnerabilities, while ffuf, arjun, and paramspider handle general content and parameter discovery.

Web application reconnaissance routes to specific exploitation skills by systematically identifying attack surfaces and injection points, then handing off the confirmed findings to appropriate exploitation modules during authorized penetration testing.

You can discover undocumented JSON and XML request parameters for web pentesting by using parameter discovery tools like arjun and paramspider to systematically scan and identify hidden inputs across various request formats.

Limitations of automated injection point testing include relying heavily on wordlist quality for content discovery and requiring authorized access, as testing only covers common vulnerability classes like SQLi, XSS, SSTI, and command injection without guaranteeing complete coverage.