discovery

Tools

1. Arjunactive

   Discovers hidden HTTP parameters using a bundled (SecLists-upsizable) wordlist.

   Open ↗
2. dirsearchactive

   Web content/path discovery driven by a shared discovery wordlist.

   Open ↗
3. feroxbusteractive

   Recursive content discovery that can auto-request backup/source-map variants of every hit.

   Open ↗
4. ffufactive

   Fast content and parameter fuzzing with soft-404/wildcard auto-calibration.

   Open ↗
5. gaupassive

   Retrieves historical URLs for a domain from public archives.

   Open ↗
6. Gobusteractive

   Directory and file brute-forcing with optional backup/source extension probing.

   Open ↗
7. GoSpider

   Fast web crawler for links, forms and JavaScript.

   Open ↗
8. hakrawler

   Fast crawler for links, forms and JavaScript endpoints.

   Open ↗
9. Katana

   JS-aware crawler that parses linked JS bundles for URLs and routes.

   Open ↗
10. LinkFinder

    Extracts API endpoints from JavaScript files.

    Open ↗
11. ParamSpiderpassive

    Passively mines parameterized URLs for a domain from web-archive data.

    Open ↗
12. waybackurlspassive

    Fetches historical URLs for a domain from the Wayback Machine.

    Open ↗
13. x8active

    Fast Rust-based hidden-parameter discovery, complementing arjun.

    Open ↗