param-miner

Parameter detective

An extension tool used to identify hidden parameters in web requests

GitHub

1k stars
27 watching
169 forks
Language: Java
last commit: almost 2 years ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
portswigger/backslash-powered-scannerAn extension for Burp Suite that scans for unknown classes of injection vulnerabilities using a novel approach643
portswigger/http-request-smugglerAn extension for Burp Suite to help identify and exploit HTTP Request Smuggling vulnerabilities.964
portswigger/reflected-parametersTools and techniques for exploiting reflected parameter vulnerabilities in Java-based applications19
portswigger/httpoxy-scannerTools to help identify vulnerabilities in web applications using HTTPoxy scanning.90
portswigger/json-decoderA set of BurpSuite extensions for pentesting and testing10
portswigger/command-injection-attackerAn OS command injection detection and exploitation tool that provides methodologies and software for identifying and exploiting vulnerabilities in applications.106
portswigger/additional-scanner-checksA collection of passive scanner checks to identify security vulnerabilities in web applications27
portswigger/scope-monitorA tool to track and analyze application endpoints during testing17
portswigger/example-scanner-checksA Java-based toolset that provides custom scanning checks and techniques for extending Burp Suite's built-in scanning capabilities.15
portswigger/active-scan-plus-plusAn extension to Burp Suite's scanning capabilities designed to identify application behavior of interest to advanced testers.209
portswigger/html5-auditorAn HTML validation and security testing tool for identifying vulnerabilities in web applications4
portswigger/replicatorAn extension for the Burp Suite toolset to help developers reproduce issues discovered by pen testers70
jgillam/burp-paramalyzerAn extension for parameter analysis in web application penetration testing154
portswigger/random-ip-address-headerThis Java project generates and manipulates HTTP headers to include random IP addresses for testing and development purposes.6
portswigger/pip3lineA utility for raw bytes manipulation and interception3