Paquet : arjun (2.2.2-1)
Liens pour arjun
Ressources Debian :
- Rapports de bogues
- Developer Information
- Journal des modifications Debian
- Fichier de licence
- Suivis des correctifs pour Debian
Télécharger le paquet source arjun :
Responsables :
Ressources externes :
- Page d'accueil [github.com]
Paquets similaires :
HTTP parameter discovery suite
This package can find query parameters for URL endpoints.
Web applications use parameters (or queries) to accept user input, take the following example into consideration.
http://api.example.com/v1/userinfo?id=751634589
This URL seems to load user information for a specific user id, but what if there exists a parameter named admin which when set to True makes the endpoint provide more information about the user? This is what Arjun does, it finds valid HTTP parameters with a huge default dictionary of 25,890 parameter names. It takes less than 10 seconds to go through this huge list while making just 50-60 requests to the target.
Some features:
- Supports GET/POST/POST-JSON/POST-XML requests; - Automatically handles rate limits and timeouts; - Export results to: BurpSuite, text or JSON file; - Import targets from: BurpSuite, text file or a raw request file; - Can passively extract parameters from JS or 3 external sources.
Arjun is useful for penetration testing (PENTEST) and network security analysis, serving as OSINT.
Autres paquets associés à arjun
|
|
|
|
-
- dep: python3
- langage orienté objet interactif de haut niveau – version par défaut de Python 3
-
- dep: python3-dicttoxml
- Python 3 module for converting dict into a XML string
-
- dep: python3-requests
- bibliothèque HTTP simple et élégante pour Python3, construite pour les êtres humains
Télécharger arjun
Architecture | Taille du paquet | Espace occupé une fois installé | Fichiers |
---|---|---|---|
all | 79,5 ko | 345,0 ko | [liste des fichiers] |