Arjun

Arjun can find query parameters for URL endpoints.

Why Arjun?
- Supports GET/POST/POST-JSON/POST-XML requests
- Automatically handles rate limits and timeouts
- Export results to: BurpSuite, text or JSON file
- Import targets from: BurpSuite, text file or a raw request file
- Can passively extract parameters from JS or 3 external sources