arjun(1)

📦 version 2.2.7, in debian bookworm, debian trixie, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 arjun(1) — HTTP parameter discovery suite 💖

okay bestie, sit down, hydrate, and let me tell you about arjun, the manual page girlies have been waiting for. it's a whole command, it's a whole vibe, and it finds HTTP parameters like it's got main character energy. iykyk. ✨

🌸 NAME 🌸

arjun — HTTP parameter discovery suite. that's it, that's the name, and it ate. 💅

🦋 SYNOPSIS 🦋

arjun [-h] [-u URL] [-o JSON_FILE] [-oT TEXT_FILE] [-oB [BURP_PORT]] [-d DELAY] [-t THREADS] [-w WORDLIST] [-m METHOD] [-i [IMPORT_FILE]]
      [-T TIMEOUT] [-c CHUNKS] [-q] [--headers [HEADERS]] [--passive [PASSIVE]] [--stable] [--include INCLUDE] [--disable-redirects]

like, that's the whole fit. every flag is a little accessory and honestly? coordinated. 🎀

✨ DESCRIPTION ✨

So arjun finds query parameters for URL endpoints. and if you're sitting there like "bestie what does that even mean", no worries, we're reading along together, hand in hand. 🫶

Web applications use parameters (aka queries) to accept user input. picture this:

http://api.example.com/v1/userinfo?id=751634589

on the surface it's giving "innocent little endpoint loading one user's info for a specific user id." but what if there's a parameter called admin lurking in there, and the moment you set it to True the endpoint just... hands over more info about the user? 😭

That. That is exactly what Arjun does. It finds valid HTTP parameters using a huge default dictionary of 25,890 parameter names. and the best part?? it takes less than 10 seconds to go through that entire massive list while making only 50-60 requests to the target. periodt. here's how:

  • Supports GET/POST/POST-JSON/POST-XML requests 🔥
  • Automatically handles rate limits and timeouts (no babysitting needed, she's independent)
  • Export results to: BurpSuite, text or JSON file 💾
  • Import targets from: BurpSuite, text file or a raw request file 📥
  • Can passively extract parameters from JS or 3 external sources 🧚

👑 OPTIONS 👑

every flag, no skips, no summaries, we're doing the full tour bestie:

  • -h, --help — show this help message and exit. your lil "what do i even do here" button 💖
  • -u URL — Target URL. the one you're investigating, the main character of the operation.
  • -o JSON_FILE, -oJ JSON_FILE — Path for json output file. save the receipts in JSON.
  • -oT TEXT_FILE — Path for text output file. or save the receipts in plain text, ur choice.
  • -oB [BURP_PORT] — Port for output to Burp Suite Proxy. Default port is 8080. 🕵️♀️
  • -d DELAY — Delay between requests in seconds. (default: 0). slow down a lil, she's not in a rush.
  • -t THREADS — Number of concurrent threads. (default: 5). more threads = more chaos = slay (responsibly).
  • -w WORDLIST — Wordlist file path. (default: /usr/lib/python3/dist-packages/arjun/db/large.txt). yes that's the big one, the 25,890-girlie list.
  • -m METHOD — Request method to use: GET/POST/XML/JSON/HEADERS. (default: GET).
  • -i [IMPORT_FILE] — Import target URLs from file. bring your own list, we love a prepared queen.
  • -T TIMEOUT — HTTP request timeout in seconds. (default: 15). how long we wait before we're like "okay moving on 💀"
  • -c CHUNKS — Chunk size. The number of parameters to be sent at once.
  • -q — Quiet mode. No output. 🤫
  • --headers [HEADERS] — Add headers. Separate multiple headers with a new line.
  • --passive [PASSIVE] — Collect parameter names from passive sources like wayback, commoncrawl and otx. 🌀
  • --stable — Prefer stability over speed. sometimes calm > chaotic, lowkey iconic of her.
  • --include INCLUDE — Include this data in every request.
  • --disable-redirects — disable redirects. no detours, we go straight there. 🚫

🌈 EXAMPLES 🌈

here's the group chat in action, copy-paste ready:

arjun -h

arjun -u http://site.example.com/test.php

arjun -u http://site.example.com/test.php -o test.json

arjun -u http://site.example.com -t 5

arjun -u http://site.example.com --stable

💜 AUTHOR 💜

Written by Somdev Sangwan <s0md3v@gmail.com> — absolute legend, respectfully. 🙇♀️

This manual page was written by Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com> for the Debian project (but may be used by others). giving credit where credit is due, always.

ok and one last thing bestie — this whole page is from arjun-2.2.1, dated 19 Jan 2023. so if you're reading this in the future and something looks different, that's not me being wrong, that's just ✨time✨. love u, go find some parameters 💖🦋🌸✨
📦 where this page comes from