arjun ☆

« Back to VersTracker

Description:
HTTP parameter discovery suite

Type: Formula | Latest Version: 2.2.7@3 | Tracked Since: Dec 17, 2025

Links: Homepage | formulae.brew.sh

Category: Security

Tags: security web-scanner pentesting http bug-bounty

Install: brew install arjun

About:
Arjun is an HTTP parameter discovery suite that identifies hidden GET/POST parameters in web applications. It uses various techniques to discover parameters, which is crucial for security testing and parameter pollution attacks. The tool helps security researchers find hidden inputs that could potentially be exploited.

Key Features:

Supports GET, POST, and JSON parameter discovery
Multi-threaded for fast scanning
WAF/IPS detection and bypass capabilities
Export results in multiple formats
Intelligent wordlist generation

Use Cases:

Web application security testing and reconnaissance
Finding hidden parameters for parameter pollution attacks
Penetration testing and bug bounty hunting
Automated security scanning in CI/CD pipelines

Alternatives:

parameth – Similar parameter discovery tool with different wordlist approaches
x8 – Another parameter discovery tool focused on brute-forcing

License: AGPL-3.0-only

Dependencies: certifi, python@3.14

Bottles available for: all

Version History

Detected	Version	Rev	Change	Commit
Nov 3, 2024 9:24pm		0	VERSION_BUMP	3a336008