Tool · discoveryactive
Arjun
Discovers hidden HTTP parameters using a bundled (SecLists-upsizable) wordlist.
Use responsibly
Test only systems you own or are explicitly authorized to test. Unauthorized testing is illegal.
Tagsdiscovery
More tools
- dirsearchdiscoveryWeb content/path discovery driven by a shared discovery wordlist.
- feroxbusterdiscoveryRecursive content discovery that can auto-request backup/source-map variants of every hit.
- ffufdiscoveryFast content and parameter fuzzing with soft-404/wildcard auto-calibration.
- gaudiscoveryRetrieves historical URLs for a domain from public archives.
- GobusterdiscoveryDirectory and file brute-forcing with optional backup/source extension probing.
- GoSpiderdiscoveryFast web crawler for links, forms and JavaScript.